Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37322e302f32342d3234203d3e20323636343938.roa
File:                     3137302e3234342e37322e302f32342d3234203d3e20323636343938.roa (raw, json)
Hash identifier:          ckp9lqL5ipBLg7L4F/9EXt+JFOVY3pUxta1BDdR4dqc=
Subject key identifier:   CF:C8:25:09:25:28:26:45:57:70:22:B0:BB:CA:C5:F0:EB:73:09:32
Certificate issuer:       /CN=4179F18E400A87D55EB4188FF8AF6E8152E58E77
Certificate serial:       56C617DAC2F90E4B63CA415471E2961959BBF207
Authority key identifier: 41:79:F1:8E:40:0A:87:D5:5E:B4:18:8F:F8:AF:6E:81:52:E5:8E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37322e302f32342d3234203d3e20323636343938.roa
Signing time:             Sat 02 Mar 2024 08:29:41 +0000
ROA not before:           Sat 02 Mar 2024 08:24:41 +0000
ROA not after:            Sat 01 Mar 2025 08:29:41 +0000
asID:                     266498
IP address blocks:        170.244.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c6:17:da:c2:f9:0e:4b:63:ca:41:54:71:e2:96:19:59:bb:f2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4179F18E400A87D55EB4188FF8AF6E8152E58E77
        Validity
            Not Before: Mar  2 08:24:41 2024 GMT
            Not After : Mar  1 08:29:41 2025 GMT
        Subject: CN=CFC8250925282645577022B0BBCAC5F0EB730932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:e9:ae:6a:b1:11:d5:8d:53:c1:ba:f3:ed:
                    3d:1a:05:47:6e:af:f4:4a:15:1a:73:d4:69:40:22:
                    dd:5b:45:e2:c1:71:a9:41:9d:7f:e8:54:fb:4f:e4:
                    ce:9d:89:f7:43:27:e2:3b:da:a7:ad:42:c6:e5:c8:
                    16:9f:7b:31:6f:af:6a:dc:07:19:55:11:e2:1a:35:
                    de:8d:bc:e8:16:db:9b:17:a5:a2:8c:74:61:63:e4:
                    98:d5:f3:c2:de:e3:61:db:75:3f:6e:2c:91:4c:2c:
                    7b:3c:53:4d:e0:b8:dd:a8:65:37:9c:a2:ad:66:c8:
                    15:e1:29:18:34:4d:c4:aa:d3:67:2f:5d:39:28:1b:
                    ef:02:f4:f4:75:86:d1:54:20:ca:87:fe:1d:4f:d3:
                    93:05:40:cf:e8:12:a8:88:33:27:a1:0b:98:b5:ea:
                    05:e5:5c:1c:74:3d:92:71:1f:c4:2a:c9:d4:81:b7:
                    30:eb:bf:e5:c4:67:ef:22:c2:1c:5f:fc:3b:ac:f6:
                    c7:65:a9:a5:3d:56:5f:4e:cd:5f:0f:6e:b0:1e:58:
                    40:6a:2d:3a:0b:17:5d:d9:f0:1d:55:2b:74:dd:10:
                    5f:ca:b4:83:af:b6:34:d2:53:e9:8d:c8:02:3e:13:
                    06:b9:bf:5e:53:13:d1:ae:d6:5a:64:de:af:fb:1e:
                    89:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C8:25:09:25:28:26:45:57:70:22:B0:BB:CA:C5:F0:EB:73:09:32
            X509v3 Authority Key Identifier:
                keyid:41:79:F1:8E:40:0A:87:D5:5E:B4:18:8F:F8:AF:6E:81:52:E5:8E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37322e302f32342d3234203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ae:03:35:2b:00:8c:bc:75:93:cd:ad:22:5a:7e:66:b7:c5:
         b2:85:8f:2b:66:c4:25:00:70:14:f4:0d:ad:d6:c3:be:38:e4:
         7e:b0:79:b7:66:21:3a:18:92:98:9e:90:1b:fe:30:eb:d3:8f:
         79:97:0f:bd:00:c6:bc:a7:73:03:48:0a:eb:82:62:38:ed:bf:
         13:1a:be:d4:a9:8f:26:ff:ba:fd:0b:f0:09:36:71:2c:1a:fc:
         79:7a:5e:f5:66:3d:44:cb:74:b5:7f:7a:ae:15:72:9b:1f:5d:
         f7:92:c7:bc:96:29:e1:79:6e:22:cb:67:1e:e1:8f:0a:e4:32:
         4a:dd:e6:dc:a6:ed:4c:1e:41:e9:7d:37:c2:3a:1a:97:52:6a:
         bc:12:e6:ff:e9:b5:d8:b9:9f:f4:a4:f2:f7:ef:c4:4b:36:98:
         c6:ce:74:03:5a:b4:eb:8d:87:38:09:9e:0a:2c:8e:f2:b8:53:
         e0:6a:31:cd:7d:94:d5:34:1a:80:de:29:43:ee:6c:5c:2e:89:
         b0:f3:48:09:ff:84:24:ec:29:9a:7a:cd:40:cb:48:77:81:e0:
         3a:14:b8:cd:54:7d:50:33:37:4c:1e:d6:c3:07:ff:8c:5d:60:
         46:7a:5e:e3:35:ab:67:fb:75:06:e7:0e:8c:67:7b:16:f3:2f:
         56:71:00:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org