Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33362e302f32332d3233203d3e20323635313831.roa
File:                     3137302e3233332e33362e302f32332d3233203d3e20323635313831.roa (raw, json)
Hash identifier:          LAhN6kN3566qGORctNJSCP7SeiHSi2P/Z3avXVLuzEw=
Subject key identifier:   1B:6A:5E:4C:1A:A2:9D:53:12:4C:27:F2:00:C6:C8:6F:9C:4D:B7:32
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       7A199C26F72E1FA0E43E8410FCC1D9321DD1B750
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33362e302f32332d3233203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:16:30 +0000
ROA not before:           Fri 02 Feb 2024 00:11:30 +0000
ROA not after:            Fri 31 Jan 2025 00:16:30 +0000
asID:                     265181
IP address blocks:        170.233.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:19:9c:26:f7:2e:1f:a0:e4:3e:84:10:fc:c1:d9:32:1d:d1:b7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:11:30 2024 GMT
            Not After : Jan 31 00:16:30 2025 GMT
        Subject: CN=1B6A5E4C1AA29D53124C27F200C6C86F9C4DB732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:ab:1f:93:25:d3:13:55:07:22:9c:78:92:
                    b3:90:74:4c:4a:81:2a:6a:00:7d:fe:32:bf:77:24:
                    43:53:e8:6d:dc:a7:cf:0d:a1:a7:fc:58:c5:00:da:
                    5b:9d:31:51:4f:9c:c1:e9:c9:eb:d1:84:a1:10:af:
                    b6:76:dc:74:f2:63:aa:78:a8:af:6c:5c:d6:2a:e3:
                    5b:db:99:d2:a5:4f:02:05:9f:7e:08:b0:51:51:dd:
                    0f:d6:91:96:fa:06:fc:b4:69:48:d2:d7:2d:7d:a5:
                    c9:b2:29:42:b3:89:c4:32:a6:5e:b0:bf:c4:ca:4e:
                    dd:96:23:59:bc:fa:69:90:e9:53:03:49:0d:6a:d4:
                    8d:75:72:89:58:7f:7e:28:c1:06:28:9a:a6:b5:33:
                    5a:56:76:19:a1:ff:c4:52:0a:25:73:01:a3:e9:da:
                    87:8d:d7:66:60:40:d6:0f:14:bf:bf:f8:e4:bd:fb:
                    c4:20:b1:71:3f:a9:b4:96:cd:79:c4:79:c5:1a:62:
                    be:5b:3a:f8:21:68:33:7c:38:f2:13:50:64:c2:e0:
                    b8:21:40:2a:05:a6:9f:da:de:cf:ed:58:98:a8:6e:
                    bc:6a:db:4e:7e:5e:4a:f9:8b:57:d8:73:ef:de:52:
                    11:0c:24:1b:d5:ce:72:60:58:c9:5a:26:43:d3:05:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:5E:4C:1A:A2:9D:53:12:4C:27:F2:00:C6:C8:6F:9C:4D:B7:32
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33362e302f32332d3233203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:17:43:11:12:d5:87:cb:fe:ac:82:99:4b:70:dd:2b:e2:
         7e:c9:cd:ae:bf:e9:42:91:8f:05:32:16:5a:51:02:a7:fe:6b:
         0a:dc:b8:92:1f:ba:f1:0c:d4:50:42:14:4b:94:a9:4a:3d:65:
         35:3b:17:58:d3:a1:f4:55:56:9c:b0:3b:0e:16:b2:fd:de:b9:
         2e:56:77:15:23:de:31:dd:30:79:05:91:45:87:51:97:3a:88:
         34:da:7d:6d:2c:db:b8:43:b8:e2:f0:fb:c3:07:a2:ee:7e:27:
         18:a8:cc:ae:fb:f6:d2:4f:6a:b2:cf:7a:00:47:83:be:f9:1e:
         ba:33:77:a9:ac:28:f8:ec:9c:58:a0:18:de:54:3f:3a:26:06:
         48:04:99:e5:fe:6c:b0:e3:39:5b:d1:59:15:10:f2:f6:08:8b:
         6d:01:6c:70:fd:05:6a:4d:61:3b:eb:fc:9a:7d:eb:75:16:3e:
         c9:4c:b3:cb:b3:a4:ac:aa:a9:0f:b8:2d:24:de:f5:15:18:9e:
         53:c3:c6:9c:d2:35:b1:4a:54:92:dc:1b:58:40:32:4e:e3:4d:
         8e:a9:36:9d:01:84:bb:ea:f9:ed:23:e7:fe:a6:54:57:06:57:
         b4:8e:1a:d2:5d:96:1c:cc:5c:86:2c:3c:01:d0:5a:87:db:26:
         20:99:49:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org