Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233382e302f32342d3234203d3e20323731303037.roa
File:                     3137302e3235342e3233382e302f32342d3234203d3e20323731303037.roa (raw, json)
Hash identifier:          jQOKzxCvmJOltH7xPJ9HnRw6o8FJv9Z4jF/J2aDmm6g=
Subject key identifier:   C6:8E:AC:73:59:0A:AA:E3:79:00:AF:DD:F4:2C:77:FA:ED:BB:CC:65
Certificate issuer:       /CN=031B7A807743AC5BE7218B45A482A2BB809962D6
Certificate serial:       22BF5ABB293F9EC6BA40D2B115CD19E5CD0EB99F
Authority key identifier: 03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233382e302f32342d3234203d3e20323731303037.roa
Signing time:             Fri 06 Sep 2024 18:15:29 +0000
ROA not before:           Fri 06 Sep 2024 18:10:29 +0000
ROA not after:            Fri 05 Sep 2025 18:15:29 +0000
asID:                     271007
IP address blocks:        170.254.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bf:5a:bb:29:3f:9e:c6:ba:40:d2:b1:15:cd:19:e5:cd:0e:b9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031B7A807743AC5BE7218B45A482A2BB809962D6
        Validity
            Not Before: Sep  6 18:10:29 2024 GMT
            Not After : Sep  5 18:15:29 2025 GMT
        Subject: CN=C68EAC73590AAAE37900AFDDF42C77FAEDBBCC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:b7:aa:18:9b:1f:da:04:ac:e5:e2:c4:13:
                    cc:80:50:a0:92:ff:36:7d:41:be:0a:3b:89:4d:68:
                    bf:cc:c5:48:d6:a9:ab:e6:61:04:65:a4:0c:1d:04:
                    60:d7:ab:d4:94:df:1b:86:ca:14:59:a0:45:3f:bf:
                    6e:8d:33:d1:18:d8:c6:6e:e3:1e:06:b8:29:52:4c:
                    68:a8:fd:53:db:d1:20:40:29:40:35:b9:dc:a5:36:
                    db:00:f7:34:ea:70:ec:c1:d4:f5:c4:a5:33:9a:6a:
                    f8:e6:31:5b:ab:13:d7:40:0e:53:05:63:b0:9d:44:
                    e3:ae:d6:04:ff:22:73:fa:c8:e1:03:df:91:b5:15:
                    7d:6a:d1:09:d9:97:6d:bb:a4:77:8d:10:95:cf:f8:
                    15:07:ef:ee:bc:39:36:2d:9c:da:c8:4d:bc:41:2c:
                    33:71:da:a0:d2:18:52:63:3e:30:48:46:b9:b3:7f:
                    fd:f7:60:45:c9:87:7d:2d:e4:f9:d8:70:62:84:5f:
                    bc:92:87:e7:e5:84:35:18:fd:93:6f:ad:67:05:45:
                    63:20:33:36:f0:07:89:49:2f:b8:58:4d:73:1e:26:
                    c1:04:e6:5b:df:2e:0e:3f:2e:81:ea:48:dd:07:9d:
                    5b:76:7f:ad:eb:b3:77:ee:85:86:8c:3b:f7:b0:48:
                    e4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:AC:73:59:0A:AA:E3:79:00:AF:DD:F4:2C:77:FA:ED:BB:CC:65
            X509v3 Authority Key Identifier:
                keyid:03:1B:7A:80:77:43:AC:5B:E7:21:8B:45:A4:82:A2:BB:80:99:62:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/031B7A807743AC5BE7218B45A482A2BB809962D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/031B7A807743AC5BE7218B45A482A2BB809962D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233382e302f32342d3234203d3e20323731303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:66:25:28:0c:8d:3b:4a:e4:44:a9:85:f2:22:3c:2d:1f:1f:
         9c:5f:e6:c5:0f:ea:88:e4:c5:06:90:d8:1a:23:a0:3f:aa:7b:
         55:88:d3:92:16:57:a9:2b:80:d4:4d:ee:1e:87:e2:05:ed:25:
         57:92:a2:4a:04:24:48:40:6c:14:ec:10:7e:58:b5:0d:75:92:
         d2:7e:53:92:a2:01:90:77:0b:fe:af:cd:c2:ae:f0:b7:82:58:
         10:4b:61:6e:61:9f:6c:c4:91:e5:d0:3a:52:19:11:71:75:7f:
         84:f0:e3:ac:64:24:d5:56:f4:66:58:1d:04:99:73:2d:32:75:
         42:b2:2a:8c:aa:16:91:eb:0c:27:15:6d:d6:a4:7a:89:fa:93:
         95:6d:3e:4b:50:b0:1d:d6:f0:ec:23:85:cf:08:14:99:d7:a2:
         3d:9c:b1:d3:0d:7a:eb:fb:f2:25:e5:c7:92:9a:23:3e:d6:ef:
         c6:f1:46:4c:e7:fc:1e:d2:4e:5f:02:28:6b:e7:19:06:6c:78:
         2e:2d:c2:20:a9:9b:7f:1f:74:8c:0f:41:1a:4a:4a:86:f3:75:
         01:57:4e:27:9d:9d:2b:90:d4:72:dc:58:0b:52:9c:3f:8a:a6:
         6f:99:88:a0:fb:8c:10:f8:b1:07:2d:c3:23:e6:18:4b:0e:59:
         fc:f3:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 18:24:28 2024 by rpki-client on console-fra.rpki-client.org