Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0/3137302e3233382e39362e302f32332d3233203d3e20323636333235.roa
File:                     3137302e3233382e39362e302f32332d3233203d3e20323636333235.roa (raw, json)
Hash identifier:          /5NmDI1PvFTHCTU3JYJjMA9SVN4lsfW8RMF4MEpALlQ=
Subject key identifier:   3D:29:8E:BB:81:52:52:85:BA:56:E2:BE:5D:D4:C4:5F:A4:59:55:AA
Certificate issuer:       /CN=5BC51E68ED3524672721F103AAA028F78D429165
Certificate serial:       44C2966108B3242D396984BB7044CD281A635006
Authority key identifier: 5B:C5:1E:68:ED:35:24:67:27:21:F1:03:AA:A0:28:F7:8D:42:91:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BC51E68ED3524672721F103AAA028F78D429165.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0/3137302e3233382e39362e302f32332d3233203d3e20323636333235.roa
Signing time:             Sat 06 May 2023 18:10:42 +0000
ROA not before:           Sat 06 May 2023 18:05:42 +0000
ROA not after:            Sat 04 May 2024 18:10:42 +0000
asID:                     266325
IP address blocks:        170.238.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:96:61:08:b3:24:2d:39:69:84:bb:70:44:cd:28:1a:63:50:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BC51E68ED3524672721F103AAA028F78D429165
        Validity
            Not Before: May  6 18:05:42 2023 GMT
            Not After : May  4 18:10:42 2024 GMT
        Subject: CN=3D298EBB81525285BA56E2BE5DD4C45FA45955AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:f8:78:d5:ec:cd:a6:9a:1c:6f:4a:f1:6d:
                    96:47:c4:8a:cc:37:c1:71:8e:92:d5:64:26:4e:cd:
                    a8:fe:2c:ac:43:5b:df:e3:88:9f:00:1c:f5:05:eb:
                    4d:25:9e:3d:c5:14:d6:83:69:ca:6d:e2:b2:12:20:
                    51:f8:7d:3f:9c:26:26:ac:94:14:8f:45:d0:15:14:
                    99:c8:1a:b0:aa:47:2a:ac:29:c2:50:7f:2d:31:54:
                    2f:ff:15:96:aa:1f:52:ff:a5:f8:b2:06:e8:7c:f8:
                    0c:ec:78:42:74:63:59:d5:a9:34:76:98:8b:37:d6:
                    1c:40:f4:ab:3f:6f:d7:04:da:0c:74:6a:71:4a:3b:
                    a1:28:69:e0:e0:72:88:b0:50:5c:e2:fa:89:d6:3e:
                    d3:82:80:fd:93:05:a9:23:3b:ab:2a:f1:27:70:ec:
                    06:93:99:09:fc:48:2e:fd:a5:ad:a6:fe:90:f3:00:
                    ee:3a:cf:d8:3c:9c:2b:b0:7b:0a:d4:13:51:d2:73:
                    a5:88:61:35:95:e5:6d:1a:a6:88:4d:f3:fc:1a:df:
                    d9:5f:88:6f:fe:24:20:4a:4a:7a:5a:24:5b:cf:58:
                    24:11:9b:69:db:ca:a3:24:89:29:75:09:4a:fb:6d:
                    06:49:8e:6d:2e:0e:8e:0d:75:5e:03:29:f8:c2:b2:
                    aa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:29:8E:BB:81:52:52:85:BA:56:E2:BE:5D:D4:C4:5F:A4:59:55:AA
            X509v3 Authority Key Identifier:
                keyid:5B:C5:1E:68:ED:35:24:67:27:21:F1:03:AA:A0:28:F7:8D:42:91:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0/5BC51E68ED3524672721F103AAA028F78D429165.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BC51E68ED3524672721F103AAA028F78D429165.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BipB2N3YpAccYdum8AvutLAwgTN1RUywARZ4PFAthuPa/0/3137302e3233382e39362e302f32332d3233203d3e20323636333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:46:17:19:c9:09:bb:9c:37:56:c9:97:df:5d:24:04:97:7a:
         fb:f3:3a:6f:58:58:a9:f4:b0:ef:56:64:57:f6:b3:c6:5b:cb:
         68:d9:c9:4f:b0:85:44:b0:bf:9d:15:3f:69:94:5f:3f:29:d1:
         a1:e4:f8:fe:01:25:e3:b1:6b:97:62:1e:84:52:39:d8:db:49:
         a0:24:e9:97:13:e3:e0:0e:2c:53:28:7d:c3:9a:17:b4:d4:37:
         94:76:79:dd:52:ce:a9:d9:b5:ee:d6:c6:c3:80:f7:7b:4d:e4:
         a0:7c:4f:a8:94:81:ad:e5:b1:a3:c1:c1:4b:12:1c:db:3d:a5:
         18:c6:8a:ed:37:44:bf:2f:ef:1d:64:72:2d:96:a5:41:d7:55:
         05:a2:a2:a5:00:ec:51:81:a7:88:a9:6e:13:e3:69:8b:89:e5:
         43:33:bb:1f:8c:69:40:34:c1:f3:e6:8b:d7:85:76:75:9e:54:
         4e:77:61:fc:85:67:e2:40:27:8a:53:af:08:bc:be:65:22:02:
         75:e6:5c:2b:42:4d:5a:18:09:dd:bf:eb:c3:7c:5c:b8:48:96:
         87:24:5d:08:1a:da:04:e3:a2:b7:c4:cf:69:d4:44:52:ef:cb:
         45:5e:3e:38:ef:cb:9b:13:fd:22:69:08:3c:48:76:98:7d:40:
         9d:62:4d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org