Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233332e34382e302f32322d3234203d3e203238323130.roa
File:                     3137302e3233332e34382e302f32322d3234203d3e203238323130.roa (raw, json)
Hash identifier:          FyfDaWjA/0roGsqg4eoduf63r7OUswyRW28Mr6ezj9s=
Subject key identifier:   47:51:D3:45:77:95:31:63:EF:CD:F7:04:E9:61:80:AD:B0:93:BB:A3
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       5C416F4F4078001A33431956B1B69480BA0AE2E5
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233332e34382e302f32322d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:08:32 +0000
ROA not before:           Sat 04 Mar 2023 16:03:32 +0000
ROA not after:            Sat 02 Mar 2024 16:08:32 +0000
asID:                     28210
IP address blocks:        170.233.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:41:6f:4f:40:78:00:1a:33:43:19:56:b1:b6:94:80:ba:0a:e2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:03:32 2023 GMT
            Not After : Mar  2 16:08:32 2024 GMT
        Subject: CN=4751D34577953163EFCDF704E96180ADB093BBA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:5b:73:47:64:11:9c:7d:e3:4a:f4:e6:68:
                    23:30:2c:06:b3:4f:6e:bf:92:23:6d:98:41:d8:6b:
                    e3:67:48:80:b2:4e:07:02:f7:ea:92:0c:64:11:e2:
                    c0:3b:6c:a2:4f:03:19:2e:f2:40:82:3a:30:80:fc:
                    78:2d:cc:8d:bd:7d:7c:ee:ed:a8:ef:86:62:e4:78:
                    08:f8:ea:5a:d3:9e:c8:05:7a:72:f9:9b:b4:6c:63:
                    f8:0c:9b:6d:7c:3f:73:67:ad:d6:09:59:c7:f2:c0:
                    46:90:b8:9b:cf:aa:0d:63:9c:34:00:71:e6:85:6c:
                    49:af:9f:f2:0c:4e:96:7e:b6:d4:0d:5a:ef:43:1c:
                    fe:4f:68:66:60:40:32:d5:3a:ad:5a:67:de:32:8f:
                    21:ee:dc:2c:f6:89:91:4c:8d:47:76:19:48:fa:3c:
                    98:db:05:c2:bd:c1:af:8f:13:a3:da:f4:40:67:f6:
                    d9:10:9e:c1:db:75:a8:eb:54:9e:f5:d1:1c:7e:f4:
                    e6:b8:6c:38:37:6d:8e:a4:8e:24:da:06:f3:a4:ea:
                    aa:dc:a7:25:42:b3:5e:a9:a0:c8:84:f3:86:db:3f:
                    98:49:da:c0:e9:c9:66:54:97:4b:44:57:3d:fa:bb:
                    63:ab:e8:4c:cb:58:71:6e:b5:63:ba:6a:92:93:7d:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:51:D3:45:77:95:31:63:EF:CD:F7:04:E9:61:80:AD:B0:93:BB:A3
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233332e34382e302f32322d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:ac:22:a1:f6:b9:ef:3b:e9:ad:a4:ff:2e:b9:a3:13:a8:e3:
         88:c9:5c:70:52:44:92:8d:d6:b6:58:c4:da:70:ad:3d:f1:34:
         53:fb:39:6d:55:d1:b8:87:ad:62:32:21:dd:a7:0a:40:19:ee:
         10:02:2d:3b:a7:ea:8a:9d:f2:10:61:a1:e0:f3:b9:16:fe:38:
         7d:90:e5:86:6f:c0:30:8c:0c:02:b3:1c:88:c4:12:a7:59:a5:
         53:0c:c2:40:3a:33:8c:81:97:29:22:1c:ea:f6:31:9e:b3:9b:
         7a:62:16:89:f7:6e:2d:4b:cc:0a:d1:4a:af:7d:57:0b:ed:19:
         0a:2a:c0:46:70:51:22:ea:9e:85:33:da:df:90:58:f4:00:cd:
         ed:4d:08:40:77:e5:93:fd:19:af:34:b8:49:7d:c2:d6:ee:24:
         d1:35:22:4e:4a:d1:39:36:9d:74:5c:30:75:3e:5d:79:37:30:
         16:f7:19:1a:dd:18:97:f3:1a:26:53:e0:52:fa:9d:32:7d:ff:
         b0:16:67:66:7d:40:00:f7:6c:81:d5:7b:8a:94:da:ca:98:2e:
         74:12:bd:fa:2c:23:dd:f4:18:66:ec:b7:6d:a3:1e:8a:ec:79:
         df:50:3b:13:8e:e6:b2:d5:c4:e1:39:93:6b:bf:34:41:ad:41:
         76:ae:9d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org