Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233372e302f32342d3234203d3e20323731303037.roa
File:                     3137302e3235342e3233372e302f32342d3234203d3e20323731303037.roa (raw, json)
Hash identifier:          /MeaWGkOhmDrxui5nnudD3SDl/FQxVL+7Tr32xN75NE=
Subject key identifier:   92:21:ED:C0:D8:7B:F6:C1:05:1A:18:C9:2C:98:FD:5E:4C:70:D3:AD
Certificate issuer:       /CN=031B7A807743AC5BE7218B45A482A2BB809962D6
Certificate serial:       39A9592C6C0876CE7DDCC017F6F26B6713BE2890
Authority key identifier: 03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233372e302f32342d3234203d3e20323731303037.roa
Signing time:             Fri 06 Sep 2024 18:15:28 +0000
ROA not before:           Fri 06 Sep 2024 18:10:28 +0000
ROA not after:            Fri 05 Sep 2025 18:15:28 +0000
asID:                     271007
IP address blocks:        170.254.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a9:59:2c:6c:08:76:ce:7d:dc:c0:17:f6:f2:6b:67:13:be:28:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031B7A807743AC5BE7218B45A482A2BB809962D6
        Validity
            Not Before: Sep  6 18:10:28 2024 GMT
            Not After : Sep  5 18:15:28 2025 GMT
        Subject: CN=9221EDC0D87BF6C1051A18C92C98FD5E4C70D3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ee:8e:af:41:a1:89:90:6a:e0:26:c4:95:46:
                    21:e8:25:2d:03:34:95:d4:7e:d2:db:0c:2d:dc:18:
                    01:ba:14:f7:92:7f:d5:2f:28:33:f5:1e:fe:a7:2b:
                    84:23:b6:a8:d3:b5:f1:64:d5:39:c2:a7:09:f2:9b:
                    15:df:85:af:78:94:0c:91:07:0c:57:00:4e:78:73:
                    2b:32:03:2a:50:e2:4a:94:5c:fc:82:73:13:9c:d6:
                    39:0d:0c:e9:f7:cf:20:1f:e6:ad:d6:94:31:02:26:
                    99:f3:9a:80:7b:2e:06:a4:0f:5d:e6:2a:e2:93:c5:
                    1e:55:df:93:79:56:73:50:55:c3:45:94:25:20:b8:
                    e4:8a:a7:d4:73:2d:01:eb:a0:7f:f6:0e:f3:fe:93:
                    ed:a9:ec:f1:0f:d4:d3:9d:46:b2:24:d9:2f:5a:24:
                    12:24:d4:96:2c:95:87:14:0e:00:e6:05:d6:b4:12:
                    69:48:11:aa:03:7d:1e:9f:08:7b:27:92:de:31:1a:
                    c0:c1:d3:b8:f0:37:2b:f6:96:12:de:06:b1:63:2e:
                    7a:49:0d:f1:72:f2:01:ab:73:1c:8e:c9:59:26:59:
                    33:4e:d2:0d:9e:69:72:46:3d:29:69:e4:5b:8d:04:
                    95:21:36:c3:85:e6:9e:f4:46:97:fe:d0:c6:b5:96:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:21:ED:C0:D8:7B:F6:C1:05:1A:18:C9:2C:98:FD:5E:4C:70:D3:AD
            X509v3 Authority Key Identifier:
                keyid:03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/031B7A807743AC5BE7218B45A482A2BB809962D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233372e302f32342d3234203d3e20323731303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:47:ab:84:44:85:86:59:a0:68:cb:09:19:0c:1e:0b:bf:f1:
         e0:93:42:4a:8f:9d:74:a4:9d:0e:50:d3:f6:5f:05:14:43:80:
         50:10:38:97:1a:ce:f4:16:9d:fa:86:5e:16:fb:33:7f:74:14:
         da:48:a9:70:5b:b4:11:f0:4a:fd:f0:8e:b4:3d:55:b4:48:7e:
         0b:f0:4a:af:c7:70:4a:4c:59:3f:6c:db:03:9a:71:4c:95:6d:
         a9:4d:43:97:b3:25:ec:c8:f5:18:5d:f9:58:6c:71:72:4f:55:
         1d:50:d1:a4:8c:d1:6b:66:d9:44:59:90:0e:42:f9:67:c9:4f:
         16:b4:56:6f:4c:ae:50:a0:49:5a:1e:3f:d7:fa:73:07:30:42:
         2a:1c:15:c4:8b:c1:ac:fa:e9:a3:bf:e4:f9:c6:6c:13:34:f7:
         50:66:08:61:ae:f5:d1:e9:fb:65:04:5c:d7:32:6c:fa:fa:76:
         42:2e:cd:73:e0:34:78:d9:2b:94:f3:1b:37:5d:7a:a2:cd:12:
         c8:84:76:5b:ca:67:91:da:33:16:c8:e0:26:d0:d9:f2:dc:a5:
         05:d7:d6:ce:fc:48:68:ee:79:18:86:c5:83:1c:51:3b:9a:cc:
         5f:ce:74:45:d3:05:ed:0b:e0:b7:8e:bd:1e:2d:c8:9d:e0:28:
         5b:68:ab:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 18:24:28 2024 by rpki-client on console-fra.rpki-client.org