Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa
File:                     3137302e302e3136302e302f32322d3234203d3e20323635303231.roa (raw, json)
Hash identifier:          6pfqADTsjSeHHxbLWnPLj2N8E6/TVM0EP0tRhxVwxts=
Subject key identifier:   8F:F7:D8:3C:68:4E:A9:C3:17:8C:D3:62:08:7D:02:DE:2A:5D:92:30
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       45DDD030D73204A6184265FDB216063912FEC5F4
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa
Signing time:             Sat 20 Jan 2024 18:52:01 +0000
ROA not before:           Sat 20 Jan 2024 18:47:01 +0000
ROA not after:            Sat 18 Jan 2025 18:52:01 +0000
asID:                     265021
IP address blocks:        170.0.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:dd:d0:30:d7:32:04:a6:18:42:65:fd:b2:16:06:39:12:fe:c5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:47:01 2024 GMT
            Not After : Jan 18 18:52:01 2025 GMT
        Subject: CN=8FF7D83C684EA9C3178CD362087D02DE2A5D9230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:a9:fa:ed:d3:54:a5:44:2f:48:f6:cc:19:
                    f9:8b:1f:45:22:3f:6b:25:04:19:aa:aa:f4:f3:42:
                    93:8e:d1:13:49:a3:f3:2b:1e:b4:99:77:f6:48:ec:
                    58:07:af:85:6a:d5:3f:10:4d:85:eb:5d:15:09:84:
                    3a:75:12:a0:5f:ca:c9:10:7c:03:db:54:b4:05:ac:
                    47:eb:f3:b0:f1:e9:8a:bb:81:82:cb:34:45:8c:e6:
                    a8:17:01:ec:cd:21:b9:c7:48:f6:bf:b1:9d:a0:79:
                    5c:85:15:f5:a6:97:e1:bb:a3:27:7b:41:fe:28:fa:
                    4f:83:30:79:00:b4:67:84:a2:de:22:ac:48:61:43:
                    09:0a:b7:8f:b1:ac:ad:0f:af:83:c5:e6:b4:c7:21:
                    e6:6d:59:90:8e:d4:fa:d5:f7:d0:ca:6e:04:af:35:
                    64:29:9d:05:d8:a9:cb:7a:84:ff:77:8a:11:18:3a:
                    61:81:7e:02:e2:1d:20:3f:08:d1:94:ac:8c:2d:2f:
                    91:98:d9:6b:fd:5e:2e:ff:01:b9:0a:9c:8d:d3:2c:
                    b1:25:4a:41:2d:15:ef:27:19:20:5c:b3:2b:73:1e:
                    3b:61:68:3a:7c:25:7e:8e:79:4a:91:e4:44:1b:d7:
                    29:9d:d7:14:cd:6e:82:3b:ab:22:17:84:13:1f:6f:
                    25:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F7:D8:3C:68:4E:A9:C3:17:8C:D3:62:08:7D:02:DE:2A:5D:92:30
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137302e302e3136302e302f32322d3234203d3e20323635303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:f4:da:80:27:62:09:6e:95:bf:bb:13:f4:69:b4:12:d7:84:
         0c:ed:53:62:be:14:c2:b1:2a:2c:67:b2:13:1b:d7:db:e4:63:
         19:c1:09:1a:37:53:d4:88:5c:cb:e2:ad:c2:44:99:ec:6b:51:
         ba:0b:78:e7:8f:b8:d8:d3:20:a6:ff:01:83:6c:88:e9:b6:83:
         d3:43:1f:da:1b:b4:86:99:00:16:17:86:b4:67:39:e6:32:88:
         4f:58:4f:7c:f9:20:85:3a:3b:b3:c2:08:ba:f6:7f:cd:f1:1e:
         65:74:63:67:92:f2:d2:97:a9:7d:41:87:b1:57:a5:77:6a:e3:
         38:81:ce:80:91:ea:39:af:b1:cf:3b:69:d2:30:6e:70:24:82:
         9c:ea:e4:51:a6:20:f4:4b:12:bd:a9:a2:5a:e2:36:ee:c7:f3:
         9b:41:cc:88:0f:7a:8e:2d:3e:73:0b:f8:47:e2:41:a7:19:e5:
         60:bf:97:54:8b:f3:a2:2a:b1:93:7c:06:69:af:06:84:66:aa:
         40:77:94:32:81:d3:7a:05:9e:14:7e:52:e7:e9:d5:73:ee:8e:
         7f:52:dd:1f:38:e9:d7:b6:06:de:6c:2a:e1:6d:7c:0b:48:57:
         2e:9c:39:e7:70:93:de:06:ce:fe:90:eb:d7:9c:7c:d5:9f:26:
         7b:e9:10:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org