Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
File:                     3137302e302e3230342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          BnUV0RFsoqTrFmPiOz/b8d5v/omkAy2z7hZ7+PiDom8=
Subject key identifier:   24:A0:C4:B1:29:45:5D:66:07:94:4A:6B:F8:DC:AF:56:25:97:B3:99
Certificate issuer:       /CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Certificate serial:       106AA8CFCA6BC7BD858DF43384203008D55901EE
Authority key identifier: 41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
Signing time:             Mon 23 Jan 2023 21:42:22 +0000
ROA not before:           Mon 23 Jan 2023 21:37:22 +0000
ROA not after:            Mon 22 Jan 2024 21:42:22 +0000
asID:                     271724
IP address blocks:        170.0.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6a:a8:cf:ca:6b:c7:bd:85:8d:f4:33:84:20:30:08:d5:59:01:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
        Validity
            Not Before: Jan 23 21:37:22 2023 GMT
            Not After : Jan 22 21:42:22 2024 GMT
        Subject: CN=24A0C4B129455D6607944A6BF8DCAF562597B399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f4:84:d9:f9:db:fa:ca:c7:d8:5f:e9:b9:62:
                    ce:26:78:f4:6a:cb:1c:73:fe:6f:74:08:8b:18:52:
                    0b:ea:b5:95:72:a3:d5:95:8f:ff:d1:28:00:ea:bc:
                    27:86:d7:ef:a2:09:e4:80:92:52:d8:4b:95:e2:a7:
                    1e:5c:cc:02:97:f0:1d:b8:73:62:82:e3:bb:7c:09:
                    a0:17:50:48:e2:25:b6:4b:ba:b5:ab:ca:77:37:49:
                    d6:34:58:56:44:bc:48:39:0f:2c:0a:9c:18:bd:fa:
                    46:d3:f1:97:1d:8a:81:46:fe:ae:04:74:75:d6:d3:
                    55:b4:94:55:ac:d9:21:05:a5:a3:0e:08:94:e2:5b:
                    28:8e:d5:43:9c:13:45:1b:f2:69:84:af:d6:7a:4d:
                    a9:07:44:51:58:c4:b0:b5:41:e1:ee:b5:6a:62:72:
                    92:e8:08:1c:fb:a1:b1:94:5c:5d:8f:50:8e:62:d5:
                    4f:4d:70:db:65:1c:25:bd:ef:d3:db:7a:42:f9:1a:
                    98:d7:91:8f:e7:e2:9a:c9:fe:45:b9:68:e9:74:80:
                    57:6e:d0:28:4a:0b:8d:64:56:f9:d5:94:eb:e9:09:
                    94:2d:a0:c6:7d:2c:19:65:d3:dd:9b:11:a5:1d:3b:
                    ba:26:8c:2d:c0:52:f0:4a:a8:c9:87:eb:55:27:b1:
                    89:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A0:C4:B1:29:45:5D:66:07:94:4A:6B:F8:DC:AF:56:25:97:B3:99
            X509v3 Authority Key Identifier:
                keyid:41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:3f:97:65:06:83:f2:e7:46:65:30:70:1a:3f:90:2f:61:cc:
         52:f1:de:4e:7d:2b:53:d9:19:d0:18:2f:4d:7e:df:e6:04:78:
         d2:63:79:5e:53:67:dc:3d:6b:8c:62:fb:bd:fd:3d:b8:e4:62:
         9a:28:cd:3d:28:e8:d3:62:1f:11:41:f9:5f:ba:00:fe:59:2a:
         98:6b:f7:57:8f:83:f6:72:0c:4a:c8:e2:03:ae:2e:03:61:de:
         75:50:32:fc:1a:b2:48:35:4b:2a:5a:13:59:51:97:7e:a4:cc:
         8f:62:2e:e9:64:fc:94:6a:25:30:b1:f9:9c:2d:3b:a9:d0:57:
         9e:82:21:2a:9f:63:e3:7e:40:7e:7a:27:98:56:c5:b9:c0:23:
         5c:67:9a:97:77:d9:3c:1b:1a:6d:ed:ac:79:b3:ad:ab:e3:1d:
         b2:0d:8a:29:67:85:29:89:8d:c4:b2:3a:d9:f2:65:ea:84:2e:
         58:e5:7f:9b:fb:d3:d4:2f:65:4f:91:3d:e4:11:ee:f7:78:98:
         8c:bc:ec:ad:69:4a:99:18:3f:36:be:18:bd:2d:28:44:a7:08:
         43:8f:d8:c6:35:c7:e1:55:d6:16:d4:91:f2:7f:66:55:cf:03:
         20:5e:4b:d1:c0:e2:f6:e8:43:51:fa:5f:85:4b:1d:18:7f:a6:
         b1:ff:1b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org