Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137302e3233312e3139362e302f32322d3234203d3e20323632353330.roa
File:                     3137302e3233312e3139362e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          qRzjgAR9HHtijW6cOWG+g8GK6YI+juAg/OHZ1QTS+yo=
Subject key identifier:   1B:61:9B:A3:9C:A8:3C:03:F5:49:D3:E2:AD:20:CA:82:77:EE:A3:6E
Certificate issuer:       /CN=6F0A880CA7D572A87F872A9CD6CEBB505528DC89
Certificate serial:       0512258BF09F2964F0A1958A3052FE6255DB20B6
Authority key identifier: 6F:0A:88:0C:A7:D5:72:A8:7F:87:2A:9C:D6:CE:BB:50:55:28:DC:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F0A880CA7D572A87F872A9CD6CEBB505528DC89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137302e3233312e3139362e302f32322d3234203d3e20323632353330.roa
Signing time:             Tue 19 Sep 2023 13:06:36 +0000
ROA not before:           Tue 19 Sep 2023 13:01:36 +0000
ROA not after:            Tue 17 Sep 2024 13:06:36 +0000
asID:                     262530
IP address blocks:        170.231.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:12:25:8b:f0:9f:29:64:f0:a1:95:8a:30:52:fe:62:55:db:20:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F0A880CA7D572A87F872A9CD6CEBB505528DC89
        Validity
            Not Before: Sep 19 13:01:36 2023 GMT
            Not After : Sep 17 13:06:36 2024 GMT
        Subject: CN=1B619BA39CA83C03F549D3E2AD20CA8277EEA36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:41:a5:0a:df:20:83:84:93:ee:76:57:47:
                    a9:a1:7e:b2:0f:a8:54:80:3b:98:bf:f1:3c:56:c4:
                    c5:54:8b:34:71:cc:37:12:15:61:ed:67:f8:6f:4c:
                    35:94:60:42:b5:91:97:b4:3e:bb:3f:de:90:76:71:
                    8f:87:7a:ef:24:6e:83:e9:54:98:ee:1a:eb:b9:56:
                    8e:03:9f:1e:d1:0e:6d:a9:2d:0c:62:b7:79:10:4f:
                    45:39:a9:c1:bd:53:3c:46:75:9e:df:17:75:83:0f:
                    f5:7c:1e:07:33:26:fb:c3:2c:62:89:46:06:8a:8a:
                    c4:4c:cd:79:e5:a2:c8:51:a9:6b:46:b8:8b:85:52:
                    11:a5:f0:0d:c4:79:93:f2:de:8e:6e:c3:f2:dc:79:
                    db:91:d0:c5:a4:1d:73:24:dd:d4:47:b6:78:a5:48:
                    a1:87:04:51:f9:85:96:bb:28:88:43:3b:07:53:69:
                    f2:03:37:60:93:69:2e:4b:19:14:77:22:f0:d9:48:
                    5d:4b:39:45:0c:a0:6a:0f:31:29:f3:7d:96:fb:8c:
                    00:2d:e0:a6:2c:a8:9f:30:b8:dc:25:f0:0f:e5:60:
                    aa:f4:c9:01:a8:ce:8b:1f:ac:a1:0e:95:1f:8a:38:
                    be:7a:0c:50:62:f6:90:e5:31:0f:96:c8:36:2c:bf:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:61:9B:A3:9C:A8:3C:03:F5:49:D3:E2:AD:20:CA:82:77:EE:A3:6E
            X509v3 Authority Key Identifier:
                keyid:6F:0A:88:0C:A7:D5:72:A8:7F:87:2A:9C:D6:CE:BB:50:55:28:DC:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/6F0A880CA7D572A87F872A9CD6CEBB505528DC89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F0A880CA7D572A87F872A9CD6CEBB505528DC89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3137302e3233312e3139362e302f32322d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:ae:e7:e4:ec:60:35:81:43:da:3f:24:e4:cc:a0:20:ed:db:
         bb:74:b2:36:04:11:c4:27:6d:00:81:3f:0c:0c:93:62:ba:f4:
         d0:0e:8a:d9:a7:6e:c7:50:53:b8:a7:0f:41:87:66:35:e1:2f:
         25:b1:94:8b:7b:58:4c:02:ca:e8:12:2b:49:a2:ff:8b:87:97:
         02:04:08:e6:b7:00:68:52:c5:f3:51:4e:45:8e:7f:d3:49:3c:
         7f:24:69:cf:c3:08:69:11:c4:c9:14:67:99:9c:e3:18:3f:4a:
         30:6e:fe:52:a0:62:a5:35:75:83:fd:13:dc:e5:27:3f:84:d4:
         44:81:b7:31:42:8d:7f:a9:bb:59:a6:60:6a:c0:01:09:33:ad:
         2a:a8:0c:b0:77:66:1a:07:ad:13:57:cc:6a:f1:f9:b5:43:b2:
         c5:ab:27:4e:a0:c5:1f:b8:4c:d4:b7:3d:28:a5:d7:a6:bb:25:
         97:ba:08:4c:ab:7b:ee:c0:04:aa:65:34:14:0e:cc:85:01:f0:
         ad:4a:49:4f:c3:47:66:5e:83:f8:56:32:c4:12:0e:17:e3:dd:
         ef:b1:73:38:60:95:6f:0d:f5:d0:3e:57:4a:65:a0:77:81:7e:
         d0:e6:29:ad:d5:71:98:4f:b5:fb:5d:f3:e6:df:03:2d:cc:18:
         80:6c:18:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org