Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233352e302f32342d3234203d3e20323636353134.roa
File:                     3137302e3234342e3233352e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          CZdPTKsCjlDzALnbWW58uNaKMQLo1ssVP7265WtXOlY=
Subject key identifier:   7A:C5:0E:B1:E1:54:AD:40:0F:AC:16:A2:5F:A7:68:D5:53:E8:D3:C7
Certificate issuer:       /CN=00163538EC66E277F93E54FBE592E30664E16F63
Certificate serial:       209FB01AA1AB88D03A9C28FD8D93B320F678E616
Authority key identifier: 00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00163538EC66E277F93E54FBE592E30664E16F63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233352e302f32342d3234203d3e20323636353134.roa
Signing time:             Thu 20 Jul 2023 16:29:34 +0000
ROA not before:           Thu 20 Jul 2023 16:24:34 +0000
ROA not after:            Thu 18 Jul 2024 16:29:34 +0000
asID:                     266514
IP address blocks:        170.244.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9f:b0:1a:a1:ab:88:d0:3a:9c:28:fd:8d:93:b3:20:f6:78:e6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00163538EC66E277F93E54FBE592E30664E16F63
        Validity
            Not Before: Jul 20 16:24:34 2023 GMT
            Not After : Jul 18 16:29:34 2024 GMT
        Subject: CN=7AC50EB1E154AD400FAC16A25FA768D553E8D3C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:02:a1:e7:fd:4c:bf:ce:0a:b8:16:5a:f8:
                    84:19:ed:09:9d:2b:33:ec:90:00:b1:f9:a6:b5:20:
                    d4:40:05:8d:08:d9:50:89:1f:df:eb:d5:f6:cb:be:
                    a6:1e:4b:46:b1:e0:23:39:26:aa:7a:a1:17:25:f9:
                    19:83:fd:1b:9c:5e:44:2d:ad:4d:69:88:6e:38:c3:
                    61:d8:55:44:5b:17:4d:21:a6:ff:60:5a:57:ec:b5:
                    d2:d8:01:11:97:70:c6:c9:d5:13:64:19:c6:9d:e7:
                    4a:14:e8:af:fa:48:f3:d7:40:87:7e:ca:e4:6e:ec:
                    d7:2e:65:d8:06:9a:3d:b8:96:a3:38:8f:cd:de:c5:
                    03:42:ec:94:a8:7d:e3:4e:43:d5:7c:93:8e:db:52:
                    c0:b6:7c:86:44:e0:f0:66:f3:30:66:36:d3:b2:ac:
                    7a:86:ca:29:0d:0a:76:c0:43:ad:50:5d:18:30:67:
                    bf:f6:47:0d:f6:22:47:da:3e:61:b4:c7:33:f8:a8:
                    87:5f:ea:96:e7:62:d8:e9:00:4d:75:21:af:bb:f7:
                    8d:51:15:f4:6c:01:54:45:67:4b:ea:77:18:0b:3f:
                    3a:79:fe:32:a9:d0:dc:6d:6c:72:76:6a:f5:4d:95:
                    84:c0:c2:3d:fb:c4:8d:2d:d9:d1:9d:03:4a:40:50:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C5:0E:B1:E1:54:AD:40:0F:AC:16:A2:5F:A7:68:D5:53:E8:D3:C7
            X509v3 Authority Key Identifier:
                keyid:00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/00163538EC66E277F93E54FBE592E30664E16F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00163538EC66E277F93E54FBE592E30664E16F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/3137302e3234342e3233352e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a7:3a:8c:ae:8b:bc:12:4c:bc:11:9a:87:dd:24:78:a6:55:
         11:9b:9d:1e:dc:f7:99:c0:48:4a:f3:5d:c8:72:0a:e4:e7:61:
         c5:28:bc:c7:ba:13:8f:bd:d6:e2:2d:96:69:18:86:ba:bd:f1:
         1b:c0:28:83:af:9b:5b:d3:77:8a:2d:06:88:9b:e7:46:22:19:
         3d:8c:ed:a6:7a:1a:1e:c1:c2:86:52:57:30:62:2c:84:74:38:
         01:ad:fc:ea:b6:af:9f:f3:e3:46:ed:d4:15:ed:9a:c4:12:d8:
         a7:aa:05:86:33:6f:eb:cd:21:78:d8:f8:e8:49:67:20:c8:27:
         48:3a:d8:09:b3:f2:ae:fb:60:5c:8e:d1:73:e6:8e:20:9f:34:
         7b:55:14:bb:36:06:f0:9f:42:78:56:b6:8a:f1:42:55:ee:e9:
         db:dd:05:f6:b3:45:e6:91:61:4d:74:b3:71:1e:8d:10:3d:51:
         9a:ed:6b:61:94:4b:76:4c:f5:e4:0f:d9:1b:15:a4:08:44:6a:
         6e:cb:8e:0a:b9:b0:db:95:4e:1c:b6:53:a0:51:af:30:90:6f:
         87:72:7c:cb:f4:cb:7e:a2:09:9b:79:3f:15:28:8f:c4:b1:17:
         e5:a6:63:7e:7f:9f:11:d9:7e:26:df:1a:c5:1b:b5:d4:9e:b2:
         94:b7:7c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org