Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa
File:                     3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa (raw, json)
Hash identifier:          G4spywcg5VRMwyQd4QNreXnGtRh7D0VBeDaJbz0DC5s=
Subject key identifier:   A3:C4:54:33:16:C1:88:E9:F7:3B:D4:A0:9C:DC:89:FC:35:7F:52:9B
Certificate issuer:       /CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
Certificate serial:       299020B115382AB45E5718F6A2435A29EE4D94E7
Authority key identifier: 4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa
Signing time:             Wed 25 Oct 2023 22:38:31 +0000
ROA not before:           Wed 25 Oct 2023 22:33:31 +0000
ROA not after:            Wed 23 Oct 2024 22:38:31 +0000
asID:                     264300
IP address blocks:        170.244.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:90:20:b1:15:38:2a:b4:5e:57:18:f6:a2:43:5a:29:ee:4d:94:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE15BAEA336D487DDC76FCB730547D5476527A
        Validity
            Not Before: Oct 25 22:33:31 2023 GMT
            Not After : Oct 23 22:38:31 2024 GMT
        Subject: CN=A3C4543316C188E9F73BD4A09CDC89FC357F529B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e5:f0:2c:ef:8e:1f:bd:fc:e1:d1:06:dd:c8:
                    3b:0e:ea:aa:99:a7:8d:7d:8a:e3:2f:24:c9:cb:c6:
                    3d:a8:7f:59:de:bf:6b:2d:74:44:7b:e4:dc:cc:1c:
                    06:46:a0:1a:83:eb:3d:22:b8:71:03:d3:c7:30:81:
                    79:95:73:2f:6c:dc:b3:0c:ac:40:20:a2:d3:ea:2b:
                    2a:3d:72:ad:42:e4:09:ce:f7:25:1a:fa:31:d5:d6:
                    eb:f2:c0:6e:e5:13:4a:02:82:d1:fe:22:6e:77:8f:
                    93:dc:ef:2a:d0:92:ac:3b:df:f3:13:11:7f:2d:c1:
                    7e:19:17:d6:ac:0f:7b:bc:99:6f:1c:5c:f0:53:43:
                    be:9e:ca:ab:32:0b:41:cb:27:6d:b7:d7:04:66:6b:
                    f1:87:b5:15:de:db:9a:34:07:09:6f:28:8c:27:2c:
                    ce:8c:4e:ef:8c:ac:0c:47:53:45:a0:7d:a5:b9:77:
                    5c:b1:9d:2e:69:f0:cd:0e:c4:99:6a:f9:dd:8f:0d:
                    87:23:20:90:3a:52:56:1c:ac:49:8a:df:eb:75:95:
                    ef:5d:1c:5c:da:c0:8f:48:d4:10:7d:18:ca:6e:06:
                    a7:ff:eb:de:3b:0f:ca:20:82:fb:c4:60:6a:2f:b7:
                    6e:c9:f9:8d:66:9c:10:66:1f:e3:50:80:cc:17:c2:
                    48:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C4:54:33:16:C1:88:E9:F7:3B:D4:A0:9C:DC:89:FC:35:7F:52:9B
            X509v3 Authority Key Identifier:
                keyid:4A:AE:15:BA:EA:33:6D:48:7D:DC:76:FC:B7:30:54:7D:54:76:52:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE15BAEA336D487DDC76FCB730547D5476527A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:51:2f:43:13:9c:c4:3d:9b:31:13:78:fa:67:c7:97:00:45:
         0f:e1:58:44:50:e5:c2:65:6e:a8:41:69:ed:28:41:32:cb:9a:
         ff:b4:9d:59:0a:23:06:0d:1e:71:fb:99:00:15:09:32:84:d7:
         ca:be:78:09:0a:cf:03:07:95:15:a3:4f:96:d4:22:b4:d5:9d:
         86:1a:97:97:64:de:e9:b4:5b:18:46:6d:56:0a:d5:d9:1f:dd:
         bb:56:f1:14:c5:dc:1c:fd:e0:2a:aa:1b:10:a2:54:9d:47:42:
         0a:fd:6f:2e:77:a7:e1:f1:8d:1a:dd:58:c3:91:5d:fb:a0:ad:
         9c:33:5c:05:24:d8:79:40:c8:d4:99:ba:4c:68:2f:66:28:7b:
         c6:9d:b0:8e:73:59:6f:4d:67:24:a1:01:b9:7a:4a:ed:4c:39:
         fe:52:e7:a8:bc:92:9e:8b:b9:0e:f9:42:c2:e9:9b:fb:06:90:
         ec:80:1e:79:53:d6:4a:85:23:e2:8a:2f:35:86:74:37:16:7f:
         0b:c2:91:96:33:a8:fa:e6:14:fe:ba:61:03:5d:87:85:49:1b:
         d2:69:0e:45:83:72:06:c1:ab:84:3e:00:99:c0:8b:ea:e7:73:
         45:df:3c:a5:57:42:52:00:0a:37:81:ca:91:13:5f:33:66:18:
         d3:56:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org