Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233392e3135362e302f32322d3234203d3e203238313938.roa
File:                     3137302e3233392e3135362e302f32322d3234203d3e203238313938.roa (raw, json)
Hash identifier:          iMMM8W2ukW8zZ4tNlIQDLpFthp5ItwyHYkeq3pnr3PI=
Subject key identifier:   25:28:D4:5D:01:D3:F8:E2:A5:85:C4:76:F0:D6:17:CB:F4:47:FD:C5
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       3623BAFFDF9C81B5A0798933CC8DC6D3800572ED
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233392e3135362e302f32322d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:27:44 +0000
ROA not before:           Mon 21 Aug 2023 20:22:44 +0000
ROA not after:            Mon 19 Aug 2024 20:27:44 +0000
asID:                     28198
IP address blocks:        170.239.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:23:ba:ff:df:9c:81:b5:a0:79:89:33:cc:8d:c6:d3:80:05:72:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:22:44 2023 GMT
            Not After : Aug 19 20:27:44 2024 GMT
        Subject: CN=2528D45D01D3F8E2A585C476F0D617CBF447FDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:9c:89:08:1f:58:0d:ec:aa:36:3f:8f:30:
                    8f:a0:9e:46:8c:2b:49:ad:25:45:c0:75:2c:77:04:
                    53:69:68:37:fe:72:80:d9:d3:9a:1b:29:48:41:aa:
                    0c:0e:13:b3:28:04:1d:27:91:4d:ed:64:23:e9:b5:
                    84:78:96:1a:1e:9d:96:6c:39:38:c4:48:57:f2:9b:
                    31:c3:40:70:7b:f8:d4:08:e0:e6:70:3f:6d:11:5b:
                    df:08:de:36:10:4c:a0:af:1f:ea:c2:53:c9:08:25:
                    69:78:42:03:9c:41:5f:e6:2f:75:6d:1d:65:93:1b:
                    0e:81:4f:9f:a4:35:b8:6e:b3:12:56:ec:47:c8:f7:
                    67:29:0e:2c:fd:3f:fc:de:aa:73:0e:34:37:7f:39:
                    ae:47:0c:dc:49:a3:cb:84:fe:9d:b2:fc:61:bd:d4:
                    00:25:17:7e:88:62:d4:92:ce:23:22:5e:95:82:2f:
                    d2:28:ef:59:ab:75:37:ce:91:cf:32:52:dc:58:1d:
                    bd:3e:06:45:27:df:5f:0a:5d:86:08:5d:60:0b:e5:
                    b4:22:66:45:9d:67:ba:76:17:49:21:2f:dd:1c:06:
                    db:3e:54:5c:c6:67:38:85:54:ef:56:ca:2f:4f:49:
                    61:0e:4f:c7:84:16:b3:27:7a:0b:a0:16:af:22:57:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:28:D4:5D:01:D3:F8:E2:A5:85:C4:76:F0:D6:17:CB:F4:47:FD:C5
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233392e3135362e302f32322d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:a2:e5:bb:aa:58:d8:0b:1d:a5:3f:0f:ac:30:55:3c:96:
         1d:9a:4d:6f:0c:dc:91:fd:5a:f8:28:d4:63:45:56:41:aa:cf:
         e0:e3:78:12:33:42:d5:11:e3:2a:df:5c:d9:3f:4c:e7:e5:1d:
         aa:e9:00:fc:50:96:e3:43:ca:bc:18:26:58:f7:65:d9:23:a2:
         71:ba:8f:85:1f:93:ed:22:4f:23:8e:ce:95:d6:8d:a3:3c:4c:
         0b:86:cf:0d:c8:5e:b3:c8:ba:f4:4b:02:09:20:2d:8d:5d:7e:
         40:07:ea:0a:9d:f3:22:e6:0a:b0:dd:f8:66:33:72:bf:cb:4f:
         8d:60:5e:c1:be:3d:48:86:be:8b:f2:dc:89:26:6c:2f:d4:4d:
         a7:a9:9b:c0:29:80:de:0f:e6:3b:e6:ac:3c:a2:7d:03:34:20:
         98:30:1f:35:c5:d2:f9:40:0e:a5:a4:38:e4:48:ec:25:fe:2e:
         e5:18:0d:6f:78:5d:94:1a:12:5f:c5:37:13:68:01:b6:34:bb:
         51:66:43:1c:1c:d9:e9:56:90:54:44:08:6e:4a:d7:e0:9d:c9:
         c3:97:83:77:c5:a3:04:17:9f:21:d5:d7:e5:bc:9c:bf:f2:1c:
         ce:0d:b9:c0:22:e6:a8:d1:19:57:8b:2e:fe:68:ce:e7:8b:09:
         b3:fe:86:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org