Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/3137302e3233312e33322e302f32322d3234203d3e20323634353133.roa
File:                     3137302e3233312e33322e302f32322d3234203d3e20323634353133.roa (raw, json)
Hash identifier:          zsoNGFhFfq+kzRr2oe8j/WT3BkUZ37m7yHveD8/y3ws=
Subject key identifier:   FC:B2:97:F6:3D:5C:B4:A8:87:C1:F3:89:A7:CC:35:61:62:BA:96:0D
Certificate issuer:       /CN=A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51
Certificate serial:       2BD26D947FA312D4FFAF86B95916C0F5D262E636
Authority key identifier: A8:D8:1D:D1:C8:C0:92:5B:5E:7A:42:70:09:F2:D1:D5:3C:41:EC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/3137302e3233312e33322e302f32322d3234203d3e20323634353133.roa
Signing time:             Fri 16 Feb 2024 20:48:12 +0000
ROA not before:           Fri 16 Feb 2024 20:43:12 +0000
ROA not after:            Fri 14 Feb 2025 20:48:12 +0000
asID:                     264513
IP address blocks:        170.231.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d2:6d:94:7f:a3:12:d4:ff:af:86:b9:59:16:c0:f5:d2:62:e6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51
        Validity
            Not Before: Feb 16 20:43:12 2024 GMT
            Not After : Feb 14 20:48:12 2025 GMT
        Subject: CN=FCB297F63D5CB4A887C1F389A7CC356162BA960D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ae:44:19:d0:e2:aa:fa:2e:6c:64:f9:89:25:
                    10:0e:f6:09:6d:9c:00:d7:2e:e1:4e:78:d9:23:3b:
                    84:dd:1d:17:82:05:6c:af:6d:d6:75:4b:46:14:30:
                    34:76:89:3f:08:30:3a:7c:f0:46:8f:39:1e:64:13:
                    24:ae:8a:25:76:f9:41:06:16:57:27:8a:a7:75:a5:
                    f3:e3:37:c4:e6:c3:52:e6:96:ea:94:f5:a7:d3:86:
                    e0:a0:ff:9c:16:8b:06:43:dd:29:c1:fa:67:ac:f7:
                    fb:c7:f4:2f:49:d9:dc:75:60:fd:f0:86:21:92:dc:
                    52:13:fd:57:2c:0c:a3:ee:a0:06:23:c7:e6:4a:67:
                    7f:72:27:ae:92:62:53:60:c5:65:9e:bf:93:23:65:
                    da:0b:8d:e5:f9:b8:42:6f:b8:70:2d:a8:1a:6c:e1:
                    e5:4b:c2:d7:9b:75:1a:92:bd:be:1f:c4:45:b3:fd:
                    43:f8:04:c4:ed:94:49:e1:a6:74:6e:9f:ce:39:2a:
                    c4:bf:d2:7f:45:95:bf:fd:bf:de:a9:26:32:0b:3c:
                    ef:c6:8f:d3:34:db:db:cd:86:46:e2:07:75:60:9b:
                    05:d5:e5:b8:f1:fc:7b:04:c2:1b:7e:74:22:90:4d:
                    70:9b:f2:74:0b:44:ba:fc:d3:52:4a:ca:af:6d:a4:
                    cf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B2:97:F6:3D:5C:B4:A8:87:C1:F3:89:A7:CC:35:61:62:BA:96:0D
            X509v3 Authority Key Identifier:
                keyid:A8:D8:1D:D1:C8:C0:92:5B:5E:7A:42:70:09:F2:D1:D5:3C:41:EC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/3137302e3233312e33322e302f32322d3234203d3e20323634353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:bb:15:06:77:aa:90:99:70:02:0e:27:9e:ef:61:29:f4:8e:
         db:84:92:2f:07:a9:9c:e8:a7:7f:dc:c2:b7:c9:a7:ca:92:2d:
         c0:f7:94:09:bc:39:a8:00:cd:09:2b:f1:d3:62:66:73:8c:df:
         4a:e0:e0:92:11:56:a7:3e:6d:20:66:bd:c1:28:dc:99:b6:c4:
         19:ef:be:bb:ee:da:94:6d:d4:6c:9e:ab:1d:cc:c4:60:bd:2c:
         83:93:30:f4:8c:da:c0:24:f0:54:40:cf:54:d0:fd:3d:c5:52:
         76:e9:be:1c:dc:b7:d2:20:80:85:71:b4:0f:9b:fa:c5:f7:f3:
         36:a9:61:79:ad:c2:58:87:37:72:6f:83:68:5f:5b:04:7c:97:
         79:8b:c5:75:56:01:b3:b9:1e:f2:39:7f:0e:49:ff:96:e0:0e:
         04:45:27:8c:d4:69:50:fe:69:1f:b6:73:c9:eb:08:e9:01:bd:
         1d:98:8f:42:5b:f6:36:f5:a9:ef:f8:bd:e2:35:39:6a:c3:37:
         d9:0a:9e:73:94:38:9b:d1:b3:a4:ec:8c:4d:5c:e7:87:49:a2:
         a7:67:93:1f:b9:d1:d1:54:e8:9b:bb:ed:7b:df:0c:84:6d:8e:
         07:ec:82:ae:56:35:74:97:3e:20:52:ce:d0:15:b0:c9:72:52:
         87:36:c0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org