Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230302e302f32332d3233203d3e20323633393938.roa
File:                     3137302e3234352e3230302e302f32332d3233203d3e20323633393938.roa (raw, json)
Hash identifier:          LlTi7LAEGQp7jzYOCyOV2g23dtIHTgkB4GfKY9VViHY=
Subject key identifier:   39:0B:EE:23:B3:8E:50:8B:D3:9A:88:B7:CD:6A:7E:26:C3:68:AF:62
Certificate issuer:       /CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
Certificate serial:       53494FC9912CC17C9EFD49C7A4CA3398F2EA1714
Authority key identifier: 98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230302e302f32332d3233203d3e20323633393938.roa
Signing time:             Mon 24 Apr 2023 18:18:18 +0000
ROA not before:           Mon 24 Apr 2023 18:13:18 +0000
ROA not after:            Mon 22 Apr 2024 18:18:18 +0000
asID:                     263998
IP address blocks:        170.245.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:49:4f:c9:91:2c:c1:7c:9e:fd:49:c7:a4:ca:33:98:f2:ea:17:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
        Validity
            Not Before: Apr 24 18:13:18 2023 GMT
            Not After : Apr 22 18:18:18 2024 GMT
        Subject: CN=390BEE23B38E508BD39A88B7CD6A7E26C368AF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d0:ea:6b:f9:a4:ae:52:74:34:64:11:0b:cf:
                    71:07:c1:ff:c2:24:75:e0:83:ea:43:08:1a:4c:2d:
                    ff:9d:55:5e:c3:71:33:af:c4:bb:64:be:60:ab:f9:
                    3a:7c:97:be:1c:61:12:ec:e1:64:d1:03:6a:c3:4a:
                    24:22:50:e4:1a:4c:4d:80:be:8f:af:3f:e2:d2:29:
                    86:2d:ec:0c:f0:9f:81:c5:93:fa:f9:d7:fc:83:52:
                    33:81:99:ad:04:59:e9:7d:0a:61:fc:85:cb:9c:57:
                    18:1e:a2:ec:92:be:04:0e:38:23:f3:68:f1:6d:46:
                    3c:b0:ee:e6:e2:5d:a1:c8:14:fa:ee:0d:e5:d2:73:
                    36:80:1d:67:ed:83:ec:8f:71:e6:f6:1e:53:2b:0f:
                    df:4c:49:9d:17:83:ab:25:2b:eb:5c:f5:6a:7e:1d:
                    62:6d:97:7b:d2:1f:28:21:cc:c5:29:fa:34:7d:b6:
                    da:06:40:d3:83:0c:72:ae:2f:ad:24:4a:94:5c:24:
                    e9:a7:d6:00:39:25:1a:74:60:d6:0a:b4:5a:93:cf:
                    77:14:68:97:aa:ed:3c:e2:80:70:f7:2c:85:6a:12:
                    a3:d0:6e:c1:ed:06:0a:cc:3b:9a:0c:45:1d:0c:8c:
                    54:d2:f8:9a:a4:1b:f5:cf:08:48:3a:33:b7:27:43:
                    b7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0B:EE:23:B3:8E:50:8B:D3:9A:88:B7:CD:6A:7E:26:C3:68:AF:62
            X509v3 Authority Key Identifier:
                keyid:98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230302e302f32332d3233203d3e20323633393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:e5:28:66:c4:92:0d:e9:42:ae:1c:9e:92:7b:9f:32:d0:4a:
         8f:7b:61:48:1b:bf:c3:15:5b:c7:93:40:6c:bc:e6:f5:60:01:
         b2:fc:36:ff:3d:5c:16:5c:90:0a:86:cf:d4:97:22:72:9e:02:
         60:57:88:3b:b5:01:0d:8f:d5:a2:d0:f7:44:1b:c3:1a:b0:56:
         5f:93:88:fd:b3:c4:f9:25:19:85:18:6c:55:11:9b:6f:a8:ca:
         d4:06:a1:6d:6f:99:e7:24:12:df:cf:2c:2e:22:35:c5:9c:bb:
         98:64:fd:b5:24:19:fd:6b:b6:83:2f:9d:d0:26:6a:54:6c:34:
         92:3b:2b:f5:76:31:2a:1d:7c:07:3e:f5:75:2f:fd:b3:95:d4:
         aa:1f:69:ad:c7:fc:cc:57:2d:08:59:e9:90:fa:ff:01:c6:27:
         f9:9b:60:26:45:f2:fb:4e:71:e4:d9:23:99:34:01:0b:b9:59:
         c5:a3:48:a5:ac:f7:70:ce:d9:ca:50:6d:29:e5:df:2f:a0:12:
         f0:a4:34:ec:92:1c:64:46:cf:45:4f:fe:1a:b4:fe:4d:94:e5:
         dc:13:6d:11:57:5c:3f:d4:5a:1a:c4:97:9b:c0:70:54:48:6b:
         17:8e:e8:81:8a:6e:53:d3:4a:1f:cc:0a:df:1e:ce:b5:4d:9c:
         96:25:a8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org