Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e38332e3230372e302f32342d3234203d3e203533323336.roa
File:                     3137302e38332e3230372e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          Lsn6bGdFi31YPcz0/PtMmvQ9IOSflF3aIeFtLFjIYeU=
Subject key identifier:   47:62:98:F7:0F:BF:57:D0:8B:7A:4A:0F:11:4D:5B:A7:03:F5:BA:A2
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       01409AD166E7CBE079D89015C0CAD9082E93FD36
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e38332e3230372e302f32342d3234203d3e203533323336.roa
Signing time:             Thu 08 Feb 2024 15:00:00 +0000
ROA not before:           Thu 08 Feb 2024 14:55:00 +0000
ROA not after:            Thu 06 Feb 2025 15:00:00 +0000
asID:                     53236
IP address blocks:        170.83.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:40:9a:d1:66:e7:cb:e0:79:d8:90:15:c0:ca:d9:08:2e:93:fd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Feb  8 14:55:00 2024 GMT
            Not After : Feb  6 15:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b0:56:0a:d3:5b:af:64:2d:a0:9d:82:cf:6a:
                    a7:4a:a9:b0:73:b1:0e:65:8d:d6:28:8c:49:01:59:
                    f1:01:32:d6:6d:73:94:10:09:1b:5e:10:f6:99:49:
                    21:eb:b6:af:4b:55:c0:78:fa:a2:aa:d7:33:0a:7f:
                    78:50:a0:2c:8c:4a:1a:5e:1b:e2:6e:d3:48:5c:14:
                    5d:2c:ea:6b:d7:a9:6e:eb:13:40:3f:48:0c:b0:6f:
                    ce:c9:c1:6c:ea:f6:3a:59:00:5a:58:56:92:3f:cd:
                    24:06:1b:f5:71:e1:f8:5d:ea:40:8a:7e:03:79:df:
                    5f:a0:0d:3e:43:c8:87:ed:2b:07:cb:46:d2:47:0c:
                    e0:32:d1:2b:52:07:e0:b0:82:39:ad:69:03:46:7c:
                    c1:e6:62:09:58:b0:2c:4e:d8:98:87:5e:f3:81:97:
                    a7:4f:3f:0c:98:f0:d1:d1:61:52:24:48:e5:0f:ba:
                    f7:30:15:de:31:b6:32:02:2b:f9:7c:1f:28:71:db:
                    06:b2:93:47:36:72:7f:b6:9d:fb:9b:ef:cd:2f:28:
                    11:16:31:07:86:1b:1c:9b:63:28:1e:77:5c:cb:ab:
                    a0:78:d7:a5:6f:32:bd:76:e0:28:92:3e:15:52:39:
                    08:84:a8:3e:e8:a8:4a:b3:ff:d5:e4:c8:2d:83:5c:
                    89:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:62:98:F7:0F:BF:57:D0:8B:7A:4A:0F:11:4D:5B:A7:03:F5:BA:A2
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e38332e3230372e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f0:8e:4d:7c:a0:e8:91:5a:de:07:cd:80:fa:12:ab:50:58:
         ae:7e:d2:50:d0:20:28:9e:29:08:ce:e1:d7:6f:12:cc:d9:a8:
         5a:c1:23:3a:06:29:77:b7:49:08:5f:b3:1b:94:85:84:c6:b8:
         e5:11:39:f3:8a:53:6d:3f:f4:47:06:4c:d4:8c:40:9d:9a:76:
         d5:31:fd:97:60:c5:f7:ab:6b:ce:6f:cf:83:a5:7b:d8:1d:3d:
         8f:03:2a:a6:8c:30:97:ef:05:d6:c6:b7:9d:90:b0:4d:bb:5f:
         ca:43:24:99:02:92:e4:da:12:f7:6f:68:fc:dc:dd:f2:90:18:
         7c:6c:22:b8:6b:56:20:d5:ae:70:5b:90:9a:25:8b:42:40:28:
         8a:80:d4:2a:04:32:9a:ac:33:3d:43:8f:64:89:78:91:5d:26:
         1e:d9:a0:9c:ee:67:87:5f:6d:de:95:ac:ad:c3:75:b0:4a:66:
         4a:3b:34:4b:01:a2:02:59:56:60:fa:57:89:6e:9c:81:6a:4a:
         d3:1d:fb:aa:21:6d:08:3e:e1:c0:13:c5:ef:e2:2f:6c:ce:bd:
         90:bc:40:df:80:6a:48:6d:b2:41:fb:14:94:f9:94:e9:00:30:
         21:9f:20:b9:ca:98:bb:22:75:88:c2:8a:ce:ac:50:72:80:b0:
         31:ba:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org