Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233332e302f32342d3234203d3e20323636353134.roa
File:                     3137302e3234342e3233332e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          EdVvyuCAWcKi2e58CCdMXfoLHcYrjZjRb2Jg+11QZoQ=
Subject key identifier:   89:AA:62:85:EF:2A:C2:07:66:28:54:41:00:00:91:64:78:1A:79:EB
Certificate issuer:       /CN=00163538EC66E277F93E54FBE592E30664E16F63
Certificate serial:       2C66A2FA20F39AA637C7EFD696788054DF3C5153
Authority key identifier: 00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00163538EC66E277F93E54FBE592E30664E16F63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233332e302f32342d3234203d3e20323636353134.roa
Signing time:             Thu 20 Jul 2023 16:27:58 +0000
ROA not before:           Thu 20 Jul 2023 16:22:58 +0000
ROA not after:            Thu 18 Jul 2024 16:27:58 +0000
asID:                     266514
IP address blocks:        170.244.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:66:a2:fa:20:f3:9a:a6:37:c7:ef:d6:96:78:80:54:df:3c:51:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00163538EC66E277F93E54FBE592E30664E16F63
        Validity
            Not Before: Jul 20 16:22:58 2023 GMT
            Not After : Jul 18 16:27:58 2024 GMT
        Subject: CN=89AA6285EF2AC2076628544100009164781A79EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1b:a4:9c:d2:0f:ad:c1:c4:67:78:1a:cd:55:
                    e4:ed:86:78:ff:56:b3:69:7b:dc:75:d4:15:9a:6f:
                    f7:77:e5:ee:d9:be:98:27:60:ef:f1:39:6d:89:e1:
                    41:41:18:3d:ce:be:ae:e6:ea:54:16:54:d4:7e:21:
                    d2:f6:8d:e3:18:7c:e5:a9:29:5f:b4:27:fa:de:87:
                    e9:60:2f:d4:5b:0c:c9:e4:ec:c7:b5:04:6e:46:75:
                    cb:14:25:88:66:50:22:99:a9:0c:83:e3:78:52:d0:
                    6f:6d:50:e2:39:02:27:ac:1e:55:19:e6:16:f8:40:
                    d9:d1:ef:bf:d2:1d:74:85:62:f5:0c:23:a5:40:75:
                    d9:3f:b1:58:28:b5:92:3f:79:ab:c2:e9:e4:27:0a:
                    e4:b6:5c:6d:a4:cf:23:09:24:68:33:86:75:ac:45:
                    59:f0:03:c2:8c:9d:e9:ac:ae:03:19:6b:08:f9:2d:
                    38:fc:23:de:a7:43:c7:e8:15:ca:09:72:8b:b9:8a:
                    cc:83:66:19:68:bf:bb:9b:76:ff:65:cc:bb:fa:38:
                    53:9f:0a:41:ef:a2:73:76:3e:ac:b5:b0:f2:3f:b0:
                    5e:3d:6b:90:6d:bb:3d:74:7a:fa:80:20:ed:1c:31:
                    d1:30:61:09:56:05:46:65:41:ef:bb:79:41:90:9a:
                    51:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AA:62:85:EF:2A:C2:07:66:28:54:41:00:00:91:64:78:1A:79:EB
            X509v3 Authority Key Identifier:
                keyid:00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/00163538EC66E277F93E54FBE592E30664E16F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00163538EC66E277F93E54FBE592E30664E16F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233332e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:01:82:8c:bc:1b:33:14:2b:3f:c0:21:91:98:f2:a5:eb:5c:
         90:83:9e:ec:b4:6f:d5:ae:3a:a3:59:fc:f6:53:4c:f8:de:ef:
         ae:02:24:3f:29:2b:41:1a:14:ab:2f:da:ff:50:f9:1d:b4:79:
         0c:22:ae:ad:87:9d:3f:93:8f:7a:11:03:cd:c6:ab:ea:7d:93:
         c7:e3:5c:13:80:bc:90:94:f2:b4:8f:6a:7d:e8:40:49:78:dc:
         63:46:57:94:64:4c:80:46:cd:1e:5d:fc:23:c4:79:c9:b7:df:
         0d:01:bc:09:6d:10:02:ac:e3:ad:a0:60:11:5c:42:f6:c4:ec:
         ab:fd:b8:85:21:a5:ed:47:c2:85:78:38:df:74:c9:8d:4c:22:
         36:b4:63:f0:85:aa:b6:69:fb:f0:61:96:48:b9:8e:de:09:f5:
         f4:9b:72:0a:26:71:4a:f9:27:44:05:7e:44:87:f3:46:33:6e:
         1c:c5:74:69:38:09:0b:bf:c0:3d:fa:4d:aa:35:1f:15:d8:27:
         34:5c:42:4c:ce:9c:64:91:91:94:94:fc:17:ca:a3:6d:67:0d:
         8c:a3:c1:dd:a3:0a:d3:e1:dd:19:82:52:03:3b:01:21:db:87:
         b1:72:c4:83:a7:ee:bc:af:23:94:1c:08:03:54:25:29:1d:8d:
         68:4e:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org