Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230302e302f32342d3234203d3e20323633393938.roa
File:                     3137302e3234352e3230302e302f32342d3234203d3e20323633393938.roa (raw, json)
Hash identifier:          b3GLe+pB4XZMNjdWE1SOG67kRU/rYWYFeSDNYzo5eBc=
Subject key identifier:   BC:74:83:29:6E:29:4A:AE:90:03:E4:7D:3B:75:2B:2A:40:5D:BA:1D
Certificate issuer:       /CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
Certificate serial:       74B8858D4A0AA12C69CEE8B767FBC61CB953F448
Authority key identifier: 98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230302e302f32342d3234203d3e20323633393938.roa
Signing time:             Mon 24 Apr 2023 18:18:48 +0000
ROA not before:           Mon 24 Apr 2023 18:13:48 +0000
ROA not after:            Mon 22 Apr 2024 18:18:48 +0000
asID:                     263998
IP address blocks:        170.245.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b8:85:8d:4a:0a:a1:2c:69:ce:e8:b7:67:fb:c6:1c:b9:53:f4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
        Validity
            Not Before: Apr 24 18:13:48 2023 GMT
            Not After : Apr 22 18:18:48 2024 GMT
        Subject: CN=BC7483296E294AAE9003E47D3B752B2A405DBA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:c3:1d:21:71:65:aa:9d:4d:4a:00:b3:99:
                    c2:46:f6:e7:4e:3c:b1:08:de:b8:68:5e:67:84:1d:
                    70:e8:47:a9:37:3d:23:e7:20:bf:5b:bf:3d:7a:0e:
                    84:7d:5c:f5:3e:69:6b:6e:27:30:74:f5:fd:ec:67:
                    e7:cc:69:40:a4:47:4a:99:63:dc:1a:89:6f:83:0a:
                    75:24:96:b4:6d:a4:5f:14:10:69:16:0a:25:30:35:
                    a2:58:93:87:d1:fb:e0:69:22:00:08:48:5f:e3:09:
                    f3:de:8a:b1:9c:aa:83:7b:cc:bf:a5:ca:b1:9b:15:
                    01:d4:74:ec:04:d6:42:db:16:49:06:04:16:fb:20:
                    d7:93:25:19:17:5c:29:d0:a0:10:f1:05:d5:8e:2b:
                    ec:f7:da:10:2a:6d:4a:8a:26:08:13:3b:cd:f1:26:
                    b8:93:63:7e:48:94:63:7f:2b:3a:25:1e:02:85:7c:
                    33:16:28:80:9c:52:34:c3:de:dd:0c:d4:43:37:c5:
                    ee:e6:8b:1d:95:62:1a:4c:f7:5d:5c:4f:f7:d9:d6:
                    e7:37:96:92:ea:53:78:bd:c1:ef:cd:a3:e6:53:30:
                    72:e4:e8:de:83:0c:e4:2b:64:6b:e0:56:70:17:68:
                    fe:37:81:60:1e:37:50:66:4e:55:f0:75:40:f7:82:
                    23:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:74:83:29:6E:29:4A:AE:90:03:E4:7D:3B:75:2B:2A:40:5D:BA:1D
            X509v3 Authority Key Identifier:
                keyid:98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3137302e3234352e3230302e302f32342d3234203d3e20323633393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:ea:62:48:59:0f:33:06:b1:b3:40:1f:4f:f8:f4:3d:a8:0d:
         64:18:67:28:59:6d:91:5f:89:42:ba:34:5c:e9:24:db:52:8a:
         65:c2:43:00:9f:ae:c5:04:4d:43:e4:a3:1d:1f:5b:78:fb:0d:
         fe:62:8a:72:ca:3d:84:53:34:e6:fd:ef:d1:76:54:50:29:9c:
         66:d7:1f:ba:84:5b:d9:36:68:2a:a8:ae:ee:a0:e9:b3:a8:21:
         3b:c4:55:58:e2:91:19:2a:7b:e0:e7:12:1c:8c:a2:e2:0a:25:
         71:c4:4c:8b:1f:65:76:d8:64:45:c1:e6:00:e7:68:bf:f4:12:
         e5:a2:8b:55:27:c3:82:e7:fd:3b:5e:4b:a2:c4:e3:5c:f0:ca:
         ee:c6:ad:88:5a:ce:00:ff:d3:74:2c:94:9f:28:13:6e:f7:f5:
         23:8b:ee:bf:77:6e:99:2c:b2:77:3c:33:eb:22:50:18:93:63:
         35:31:77:a4:8a:cf:09:91:b5:60:21:8c:1f:45:13:5a:0e:f8:
         81:f5:78:ae:95:8e:7f:fa:25:35:3d:de:d7:bb:5d:30:03:90:
         6f:f7:a5:11:1d:f0:40:00:30:fb:b0:55:6e:4a:98:60:86:ef:
         f3:50:79:65:60:41:d7:f4:1f:5a:a9:56:75:d7:4d:61:b1:d0:
         b0:8d:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org