Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37322e302f32332d3233203d3e20323636343938.roa
File:                     3137302e3234342e37322e302f32332d3233203d3e20323636343938.roa (raw, json)
Hash identifier:          0imNP4wwqbSUtkYW3q6uAJ9B0WpOOCyHGotTbLVhIlE=
Subject key identifier:   4D:92:72:79:33:15:0C:E1:08:82:13:01:F1:36:B7:F6:1F:E8:1C:28
Certificate issuer:       /CN=4179F18E400A87D55EB4188FF8AF6E8152E58E77
Certificate serial:       5FCE923A071AAD1FBB8A844FF7FBB5E2B21C02A9
Authority key identifier: 41:79:F1:8E:40:0A:87:D5:5E:B4:18:8F:F8:AF:6E:81:52:E5:8E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37322e302f32332d3233203d3e20323636343938.roa
Signing time:             Sat 02 Mar 2024 08:29:40 +0000
ROA not before:           Sat 02 Mar 2024 08:24:40 +0000
ROA not after:            Sat 01 Mar 2025 08:29:40 +0000
asID:                     266498
IP address blocks:        170.244.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ce:92:3a:07:1a:ad:1f:bb:8a:84:4f:f7:fb:b5:e2:b2:1c:02:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4179F18E400A87D55EB4188FF8AF6E8152E58E77
        Validity
            Not Before: Mar  2 08:24:40 2024 GMT
            Not After : Mar  1 08:29:40 2025 GMT
        Subject: CN=4D92727933150CE108821301F136B7F61FE81C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:05:bf:f2:e3:3a:c8:f8:4a:bd:ed:45:31:45:
                    79:f1:a0:06:f4:de:b4:e5:24:46:d5:94:45:04:8e:
                    55:3a:75:56:05:3c:71:f6:02:19:d7:69:00:c1:36:
                    36:86:d0:82:2c:b2:d0:e1:93:98:29:26:dd:33:dd:
                    39:bb:ff:f4:1a:e3:bf:07:53:d1:de:9d:cd:85:25:
                    86:21:62:90:ab:b2:eb:1f:dd:8b:85:3d:f0:6f:dc:
                    3f:71:a1:17:c5:48:b1:d4:29:2c:7b:a0:26:82:9b:
                    58:ef:7a:1d:a5:56:29:c9:af:25:09:0c:11:6a:e0:
                    45:81:b0:54:af:0c:35:3f:70:b4:21:d1:fc:c4:07:
                    4b:1e:ff:cf:6e:31:10:a9:9d:db:e8:26:54:ef:79:
                    81:ee:3b:8d:1b:bf:11:a2:e9:45:93:06:94:18:36:
                    7e:49:36:ba:82:78:0b:27:d8:05:9c:38:d9:fd:e1:
                    36:dc:23:31:5c:3e:2d:1e:c4:14:89:1a:c0:8b:56:
                    a1:f2:95:75:4b:ae:74:f3:d5:07:6a:c9:01:83:d6:
                    1a:b8:3a:2a:27:db:43:33:60:a4:98:13:19:62:0f:
                    8a:1a:33:a3:45:38:27:5f:b9:ef:30:09:40:5a:fe:
                    bc:aa:55:32:45:ec:82:50:8e:bd:84:7d:79:01:cc:
                    a5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:92:72:79:33:15:0C:E1:08:82:13:01:F1:36:B7:F6:1F:E8:1C:28
            X509v3 Authority Key Identifier:
                keyid:41:79:F1:8E:40:0A:87:D5:5E:B4:18:8F:F8:AF:6E:81:52:E5:8E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37322e302f32332d3233203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:c3:d6:a3:07:44:cd:6b:20:0c:33:4c:7a:57:74:90:1b:1c:
         9e:b8:f9:c9:f9:b5:7c:2c:54:c7:6c:72:22:a3:e0:53:de:6b:
         eb:98:74:4d:b8:27:a3:b0:1f:62:e5:7b:5d:a9:06:10:af:23:
         4b:1e:ac:9f:d0:df:cc:3b:67:18:fa:5d:d9:4f:fb:7c:89:e2:
         1f:57:3c:15:93:69:c5:5d:97:8f:ce:b2:95:e1:09:d7:26:eb:
         2f:14:b1:62:1a:4a:4d:a6:6a:b1:19:da:bc:5c:fe:5b:f2:89:
         31:4c:fa:c3:44:24:95:90:43:e5:f1:84:23:fa:b3:0b:7a:8f:
         21:e5:88:dc:de:ad:0a:a6:fb:c0:b6:ca:5e:62:04:20:d6:2e:
         c6:a8:57:30:fb:66:0d:e4:af:b7:50:93:5c:99:21:90:96:f6:
         ca:af:86:2d:8a:11:c6:8c:db:e2:7c:53:44:1c:eb:f3:a8:4d:
         c7:16:24:62:66:3f:1f:37:fc:a4:3f:84:4b:09:37:60:b0:82:
         61:32:42:d6:42:49:0c:ca:76:c5:bb:93:e7:08:6a:cf:e1:7d:
         36:c7:0b:97:75:f1:d5:40:94:6b:7e:2e:e1:9d:71:49:71:2b:
         60:7d:14:c5:c5:45:6b:da:c8:03:99:bb:ca:7e:5f:64:53:36:
         a3:5c:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org