Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa
File:                     3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa (raw, json)
Hash identifier:          cxrBssrbOQ1D/nxcI1tzkjBKHvMqvM9rwYxWCuHfZNs=
Subject key identifier:   21:E5:3B:58:8F:E2:2B:DE:31:F4:B7:EB:01:3A:87:F4:13:B1:62:C7
Certificate issuer:       /CN=3F18422C71C9046C3B4C766867F0CC989883236F
Certificate serial:       26580F0EDBD403E810082861F08272ADC3B6589E
Authority key identifier: 3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa
Signing time:             Mon 25 Sep 2023 13:38:37 +0000
ROA not before:           Mon 25 Sep 2023 13:33:37 +0000
ROA not after:            Mon 23 Sep 2024 13:38:37 +0000
asID:                     266022
IP address blocks:        170.245.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:58:0f:0e:db:d4:03:e8:10:08:28:61:f0:82:72:ad:c3:b6:58:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F18422C71C9046C3B4C766867F0CC989883236F
        Validity
            Not Before: Sep 25 13:33:37 2023 GMT
            Not After : Sep 23 13:38:37 2024 GMT
        Subject: CN=21E53B588FE22BDE31F4B7EB013A87F413B162C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:ec:58:c4:b8:0a:0e:ba:7d:00:3b:d7:1a:
                    13:64:51:af:1c:9e:c7:b9:6a:cd:35:11:e9:46:6c:
                    1e:d6:f3:a6:3a:e5:b7:4d:24:58:42:22:1c:59:a6:
                    f3:8a:d8:95:56:85:a6:8a:a8:b3:80:4c:b0:0c:83:
                    a0:ca:72:df:db:33:31:67:b2:fd:40:c5:bf:eb:1b:
                    8f:e1:05:a0:65:fc:d6:01:44:c9:ac:b3:7e:a0:c4:
                    a7:5a:4e:1d:90:1b:a5:07:ba:6e:b1:44:ac:3c:d9:
                    f3:c8:43:89:96:9d:42:2c:e5:96:a4:d5:fb:91:46:
                    1e:d3:25:0d:39:18:78:16:1b:67:80:10:54:dc:7a:
                    82:f2:43:6d:7b:c3:d2:ca:c6:65:6a:ce:eb:ee:33:
                    ff:86:06:59:30:a4:fb:92:97:d8:63:ac:69:fe:2d:
                    95:7b:19:e2:41:a3:71:b4:a3:6f:50:68:13:ba:c1:
                    9e:76:61:39:b2:46:3e:a4:b1:c8:91:91:77:a7:4a:
                    c4:d8:5e:76:54:81:69:ef:5a:fe:c6:99:c5:57:5c:
                    0c:75:a6:3c:b4:7d:44:b3:e1:ef:23:92:8a:d4:c4:
                    b8:c0:c9:a8:af:cf:6a:36:73:78:0e:77:00:97:14:
                    c6:01:eb:8f:3b:17:d0:7a:9b:3b:9f:4d:ef:8b:8d:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E5:3B:58:8F:E2:2B:DE:31:F4:B7:EB:01:3A:87:F4:13:B1:62:C7
            X509v3 Authority Key Identifier:
                keyid:3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3F18422C71C9046C3B4C766867F0CC989883236F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:70:3d:c8:12:16:73:bc:3a:ff:f6:39:dc:55:55:7b:9f:
         0c:ba:0a:f8:1d:7f:b4:6d:5e:e4:89:f1:82:04:48:6a:4a:41:
         bb:03:d4:55:7e:54:70:fe:1f:5c:07:39:dc:c0:28:3a:43:2d:
         ed:5b:75:76:7d:59:9b:9b:81:27:01:56:c0:ec:2d:85:f6:13:
         a8:10:73:05:07:c4:95:6a:f6:51:be:7f:2f:a2:26:84:8e:cf:
         68:d2:f3:76:c9:4d:86:86:24:db:14:19:0d:51:68:74:04:51:
         1d:5b:2b:64:ac:22:66:33:e0:17:0f:00:97:5e:b2:b9:ea:bb:
         9b:30:da:49:c3:a5:44:5a:f6:96:88:ba:c8:8d:99:c7:fc:c2:
         bb:e0:e6:ab:c1:24:30:48:f4:4e:9b:8a:58:4f:24:04:99:2d:
         2c:04:38:e8:83:49:63:a7:c7:07:90:f3:6a:9b:0f:78:5d:45:
         ba:8e:e2:e1:49:a5:63:94:5d:1d:6c:56:bf:9b:d0:e0:e4:9d:
         63:65:74:ec:01:f1:8b:62:7b:cd:82:13:e4:ba:e9:cf:e1:72:
         d1:1e:9f:29:e5:be:b7:69:89:20:3e:bf:33:55:22:8f:a8:55:
         aa:78:84:31:b1:5e:3f:cc:f1:3c:28:26:d5:36:d3:26:4f:c8:
         80:0c:64:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org