Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa
File:                     3137302e3233332e35322e302f32322d3234203d3e203532353437.roa (raw, json)
Hash identifier:          nYtoMOET+aQgUbrupxj/XI4ymXvOX2JhX3DIGXuBmk0=
Subject key identifier:   9B:93:A6:70:4D:EC:5E:11:7D:92:84:09:E4:C2:BC:23:21:0A:4C:81
Certificate issuer:       /CN=20EB5865E20D53A7E08BD066F5A704ECA29EEAC8
Certificate serial:       3C21176744D2E3F9A339F9EE1921BEE5A9D5A43D
Authority key identifier: 20:EB:58:65:E2:0D:53:A7:E0:8B:D0:66:F5:A7:04:EC:A2:9E:EA:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa
Signing time:             Tue 10 Oct 2023 19:25:19 +0000
ROA not before:           Tue 10 Oct 2023 19:20:19 +0000
ROA not after:            Tue 08 Oct 2024 19:25:19 +0000
asID:                     52547
IP address blocks:        170.233.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:21:17:67:44:d2:e3:f9:a3:39:f9:ee:19:21:be:e5:a9:d5:a4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EB5865E20D53A7E08BD066F5A704ECA29EEAC8
        Validity
            Not Before: Oct 10 19:20:19 2023 GMT
            Not After : Oct  8 19:25:19 2024 GMT
        Subject: CN=9B93A6704DEC5E117D928409E4C2BC23210A4C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:8d:bb:4c:35:e1:3a:49:d6:10:1d:e5:ab:
                    28:03:49:ab:b4:fe:04:e4:8c:cf:f3:67:7a:e5:75:
                    0b:29:eb:b9:32:12:b9:c0:46:ad:57:77:1e:22:d2:
                    5c:26:86:b0:91:6f:1f:5c:2f:c0:bd:1c:ef:95:34:
                    6b:f0:49:fe:4f:67:54:3b:34:11:8e:8c:b3:61:72:
                    2e:75:e8:f1:a0:b1:8e:f3:9d:41:06:4f:f9:fd:1f:
                    05:74:26:ac:95:8f:0c:4f:bc:3d:d5:f1:65:f7:65:
                    f9:fe:2a:6e:07:e4:82:40:fc:53:a3:27:e7:58:2e:
                    cc:6d:a2:d9:2f:1a:5a:bc:bd:b9:e9:4c:7b:15:1c:
                    7e:e6:f8:12:e0:69:d4:b1:eb:91:e1:83:c6:a5:0d:
                    a2:8b:78:da:de:e9:5e:da:9e:ca:0d:ca:62:11:f4:
                    7e:57:5b:d3:5b:56:4b:61:d2:15:11:9e:f7:4f:97:
                    58:9d:f2:5e:8e:d3:52:3e:ea:54:9d:4f:27:95:12:
                    ba:06:36:1d:b0:fc:57:34:26:e8:14:93:1d:02:a6:
                    7f:43:10:3a:65:e4:de:a0:3d:7a:9f:ca:dd:61:2f:
                    6f:62:b3:d4:60:f8:b5:2c:d1:8e:3a:0a:53:17:dc:
                    ca:27:d1:c9:b4:ec:ef:30:fc:43:03:2b:2b:b4:96:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:93:A6:70:4D:EC:5E:11:7D:92:84:09:E4:C2:BC:23:21:0A:4C:81
            X509v3 Authority Key Identifier:
                keyid:20:EB:58:65:E2:0D:53:A7:E0:8B:D0:66:F5:A7:04:EC:A2:9E:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/3137302e3233332e35322e302f32322d3234203d3e203532353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:ea:b5:36:03:5f:41:2a:74:ff:ad:17:2b:eb:14:c6:1f:6f:
         9c:40:ac:18:9e:81:a6:ad:97:07:ae:16:c6:62:f2:d0:37:67:
         ef:f9:a1:45:c1:a0:fb:e5:7f:42:86:c9:3a:e5:62:68:b5:b1:
         5f:30:b7:94:ef:fe:db:aa:0c:3a:c1:46:93:c1:4f:8f:21:e3:
         21:fd:2e:a3:5d:9d:93:e3:9d:9b:8e:67:1b:51:c1:58:c8:dc:
         cd:5c:27:10:66:12:a1:d8:ac:8b:11:61:95:12:5c:96:9a:27:
         ae:53:a1:ec:e4:7c:c6:3c:b0:75:04:20:35:c7:1a:42:4c:22:
         a1:2b:47:75:eb:71:33:35:0d:91:f6:fc:de:28:80:23:bf:91:
         e5:32:b2:0b:a7:d0:92:29:6d:74:ef:52:1d:e6:e9:93:6c:52:
         0c:06:59:1a:31:58:d1:fe:1f:1b:e5:e5:60:c7:8c:00:e6:1b:
         81:7c:92:7d:b2:9f:0a:68:47:5b:23:90:59:41:79:47:da:36:
         df:6f:b0:48:f0:20:42:0c:b2:98:3c:7a:39:40:38:25:5c:14:
         ee:6d:8c:3c:cb:91:03:55:17:3b:56:6d:73:2e:a4:a5:9a:d9:
         6b:c1:4d:09:b3:61:e5:83:9a:a6:64:4e:ad:1c:27:75:18:47:
         d6:ca:1f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org