Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0/3137302e3233392e36302e302f32322d3234203d3e20323636333431.roa
File:                     3137302e3233392e36302e302f32322d3234203d3e20323636333431.roa (raw, json)
Hash identifier:          1MJXc7dhWCXnTlQQI9kuBPZJwyPrgfqwzMIkVX5VS8Y=
Subject key identifier:   03:97:FE:B0:3B:ED:31:39:7C:07:83:18:8A:F4:8A:6A:A7:8D:73:68
Certificate issuer:       /CN=B86264159D6FD0487114AE36C925C9ED5133FF47
Certificate serial:       5CCA58E51BA72EAC0A1D387ED9380C21870315CD
Authority key identifier: B8:62:64:15:9D:6F:D0:48:71:14:AE:36:C9:25:C9:ED:51:33:FF:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B86264159D6FD0487114AE36C925C9ED5133FF47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0/3137302e3233392e36302e302f32322d3234203d3e20323636333431.roa
Signing time:             Fri 08 Dec 2023 20:01:21 +0000
ROA not before:           Fri 08 Dec 2023 19:56:21 +0000
ROA not after:            Fri 06 Dec 2024 20:01:21 +0000
asID:                     266341
IP address blocks:        170.239.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ca:58:e5:1b:a7:2e:ac:0a:1d:38:7e:d9:38:0c:21:87:03:15:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B86264159D6FD0487114AE36C925C9ED5133FF47
        Validity
            Not Before: Dec  8 19:56:21 2023 GMT
            Not After : Dec  6 20:01:21 2024 GMT
        Subject: CN=0397FEB03BED31397C0783188AF48A6AA78D7368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c4:e5:e0:fe:5f:fe:17:42:7b:a5:d1:a2:1b:
                    43:47:a3:3f:1d:db:65:50:7a:3a:02:7c:5f:34:0a:
                    43:b4:7c:f2:79:3d:98:d7:59:47:5a:a4:66:74:8c:
                    96:ff:8d:60:fc:61:ef:cb:5a:c8:dc:67:60:ad:b7:
                    67:d0:04:a2:8f:75:aa:1e:32:3c:d3:48:56:66:ad:
                    ea:71:e7:51:47:b0:31:e8:ec:79:34:3e:de:c2:29:
                    e3:09:0b:fc:93:2f:f4:22:f9:5b:31:22:12:97:2a:
                    c9:66:91:15:d6:66:fc:7c:4c:45:45:7e:43:21:e1:
                    54:e3:d4:32:b6:62:1e:c6:c5:56:f3:5d:4c:f7:db:
                    91:a6:51:d8:cd:4a:4e:d3:a5:32:6b:b8:13:3a:69:
                    b4:73:1b:f9:ea:14:46:3a:71:77:8b:7e:35:15:db:
                    92:9f:d0:d0:74:28:0c:db:02:1b:65:ad:a8:68:99:
                    c3:97:ad:dc:6f:7a:20:6d:ec:62:54:0b:46:f2:86:
                    dd:f3:ea:08:c4:ee:a1:e2:b0:5f:ac:40:c1:56:9c:
                    77:1f:46:ca:77:fb:31:21:97:05:be:c1:04:b7:8e:
                    81:f8:46:66:1b:9e:19:35:0b:01:67:6b:cf:f0:34:
                    5a:61:24:48:b4:5f:d5:c3:24:62:c8:2c:3d:e8:63:
                    9a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:97:FE:B0:3B:ED:31:39:7C:07:83:18:8A:F4:8A:6A:A7:8D:73:68
            X509v3 Authority Key Identifier:
                keyid:B8:62:64:15:9D:6F:D0:48:71:14:AE:36:C9:25:C9:ED:51:33:FF:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0/B86264159D6FD0487114AE36C925C9ED5133FF47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B86264159D6FD0487114AE36C925C9ED5133FF47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0/3137302e3233392e36302e302f32322d3234203d3e20323636333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:a7:d3:4a:6e:f2:c2:83:3b:0e:9d:7b:4c:5c:b9:94:b2:c0:
         a0:c7:99:3b:1b:b3:bc:0e:5f:af:3e:54:29:1e:09:cc:63:4d:
         3b:e1:26:52:bc:b3:d6:e0:31:21:b9:12:c0:73:f5:48:76:41:
         15:ca:42:08:0f:f2:be:f8:94:53:e6:f0:7d:67:82:73:6e:07:
         a4:c6:9d:4a:43:8a:32:97:9c:4d:86:77:19:0e:4b:b1:d5:7e:
         a0:39:ec:68:57:83:11:cd:09:c6:b2:bf:76:48:b6:06:2d:a0:
         0b:dc:49:fc:88:68:04:27:f8:7f:19:5b:d0:13:02:6f:02:12:
         44:45:e7:25:3e:3f:6a:c2:bc:14:85:33:e3:94:48:27:cc:99:
         e2:76:2b:9d:d5:9d:d0:8c:6f:f5:42:cb:9b:87:8b:6e:10:7c:
         93:c2:4a:61:d7:d6:37:bf:1d:9f:d4:67:36:ae:45:2e:ee:ef:
         4f:35:58:2a:e1:2e:cb:3e:ab:26:e2:97:b1:b7:5d:62:f3:38:
         31:3e:2e:f1:7f:a8:2f:70:46:1d:84:e8:c0:9c:9c:6f:fb:5e:
         0b:da:ca:5d:76:6a:db:2c:28:d7:07:89:cb:9a:b0:dd:f3:c3:
         98:e3:f9:4c:2f:77:0d:f9:1c:17:a9:ba:f9:1b:e1:27:41:26:
         28:f3:fe:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org