Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37332e302f32342d3234203d3e20323636343938.roa
File:                     3137302e3234342e37332e302f32342d3234203d3e20323636343938.roa (raw, json)
Hash identifier:          StQ0HNMJIzem/8A/xu6jTG+z7Y0MbPzFNW4/CV1QOng=
Subject key identifier:   51:76:C7:13:9F:A9:67:B5:07:3F:AE:A2:5D:C4:17:91:07:83:EC:0E
Certificate issuer:       /CN=4179F18E400A87D55EB4188FF8AF6E8152E58E77
Certificate serial:       63DF05DF4395CCC6FEB25ED5C07D395BDA82E559
Authority key identifier: 41:79:F1:8E:40:0A:87:D5:5E:B4:18:8F:F8:AF:6E:81:52:E5:8E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37332e302f32342d3234203d3e20323636343938.roa
Signing time:             Sat 02 Mar 2024 08:29:40 +0000
ROA not before:           Sat 02 Mar 2024 08:24:40 +0000
ROA not after:            Sat 01 Mar 2025 08:29:40 +0000
asID:                     266498
IP address blocks:        170.244.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:df:05:df:43:95:cc:c6:fe:b2:5e:d5:c0:7d:39:5b:da:82:e5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4179F18E400A87D55EB4188FF8AF6E8152E58E77
        Validity
            Not Before: Mar  2 08:24:40 2024 GMT
            Not After : Mar  1 08:29:40 2025 GMT
        Subject: CN=5176C7139FA967B5073FAEA25DC417910783EC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:16:ab:7f:e1:0b:01:c9:a5:e9:d4:e2:b3:
                    a0:fe:33:fd:ec:10:ea:36:4e:68:6a:cf:41:0b:fe:
                    99:40:b6:68:b6:b5:17:45:5d:5a:f6:09:4b:2e:0a:
                    b4:ea:e2:32:8d:59:6b:3a:ec:ad:7e:6b:c4:4a:eb:
                    1b:d2:b3:14:67:18:6e:ec:c5:b5:34:bd:f0:94:c7:
                    87:61:a2:09:8c:be:25:a2:df:52:61:6a:83:2a:b0:
                    ce:7b:e5:31:4a:c3:a4:e9:b5:1b:fa:d9:56:22:e8:
                    7e:55:26:16:d9:9a:c3:65:ad:cd:ab:43:d1:8b:7e:
                    1e:49:c4:ee:26:ff:6f:91:76:06:06:53:43:df:cb:
                    5b:f6:20:5f:b6:d1:51:fa:f7:b0:b3:11:53:ce:2c:
                    75:e2:45:32:32:1e:71:1c:aa:fd:5b:03:c2:8e:b3:
                    9d:a7:46:e2:27:45:7c:10:e8:5e:d3:5c:0d:24:90:
                    64:ec:7c:cf:c0:77:5d:4a:4f:87:3c:f6:fd:2a:da:
                    bb:fc:73:d0:ca:e5:b1:de:fd:ed:3f:34:6c:43:59:
                    a9:38:aa:59:ac:3f:07:56:99:ec:db:9f:13:f1:3f:
                    05:44:8d:31:d7:8f:5e:2d:dc:c5:d2:e8:de:b9:3a:
                    a5:75:43:f0:1e:1b:8d:f4:13:ed:8c:6d:8e:05:13:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:76:C7:13:9F:A9:67:B5:07:3F:AE:A2:5D:C4:17:91:07:83:EC:0E
            X509v3 Authority Key Identifier:
                keyid:41:79:F1:8E:40:0A:87:D5:5E:B4:18:8F:F8:AF:6E:81:52:E5:8E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/3137302e3234342e37332e302f32342d3234203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:7d:c8:68:b6:bb:41:22:7d:b9:0e:f0:94:4f:e5:e6:92:9e:
         04:d7:21:28:3a:b4:9b:27:94:30:47:70:e4:3f:c7:c5:a3:cc:
         c8:e7:26:30:cf:db:ec:ba:a9:e3:37:0d:bd:bc:f4:92:b2:a1:
         b4:82:c1:32:a3:b2:1a:17:4f:5f:fc:90:b8:5c:b0:3b:7f:04:
         cd:60:89:57:8c:94:74:f9:d2:28:06:95:fc:04:5e:98:db:7c:
         14:ee:03:c2:0c:bb:45:59:53:e0:43:a8:e6:01:6e:8f:8d:0c:
         4e:1e:04:38:8c:5e:4a:5e:82:6c:88:cf:a5:f0:ed:5b:29:e1:
         ed:5f:f6:88:1e:8c:ac:0f:15:f9:6f:5b:91:a0:fc:cf:83:ac:
         cc:5f:89:35:07:a4:07:2d:a3:94:85:a9:ab:1f:03:d1:2b:5f:
         4f:a1:ed:70:f7:0e:ab:7a:c4:42:25:e4:cb:3e:99:76:ff:4f:
         f6:57:e2:0c:92:5d:36:1c:96:5d:46:a5:a6:55:df:09:b7:1e:
         39:89:43:39:ea:ab:81:0e:e5:de:da:b2:29:97:a4:b8:6c:95:
         43:fc:a7:3d:c6:79:fd:6e:66:a3:50:d2:fe:7c:09:0e:66:52:
         c4:23:81:a1:14:4e:18:74:38:68:a5:28:a2:ba:e2:82:e2:19:
         24:5d:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org