Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32342d3234203d3e20323635303632.roa
File:                     3137302e3233312e3135362e302f32342d3234203d3e20323635303632.roa (raw, json)
Hash identifier:          8PgfeP/vcN8TLQR4aysFsiB9m515ird7C7NAcm3hu0g=
Subject key identifier:   26:DC:9A:05:64:74:E8:FA:E9:7A:DD:D2:BA:DF:C2:6B:97:64:4E:F0
Certificate issuer:       /CN=073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9
Certificate serial:       73AC53425AF121F483EA5F42C4922A5B15FFBDBB
Authority key identifier: 07:3F:FD:DB:68:F4:07:3F:D1:0C:2D:FF:F4:ED:FC:7F:F9:0F:1B:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32342d3234203d3e20323635303632.roa
Signing time:             Mon 11 Sep 2023 20:47:24 +0000
ROA not before:           Mon 11 Sep 2023 20:42:24 +0000
ROA not after:            Mon 09 Sep 2024 20:47:24 +0000
asID:                     265062
IP address blocks:        170.231.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ac:53:42:5a:f1:21:f4:83:ea:5f:42:c4:92:2a:5b:15:ff:bd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9
        Validity
            Not Before: Sep 11 20:42:24 2023 GMT
            Not After : Sep  9 20:47:24 2024 GMT
        Subject: CN=26DC9A056474E8FAE97ADDD2BADFC26B97644EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:eb:32:92:86:e5:a9:a4:8a:19:0c:ca:c1:
                    31:ca:68:4a:e1:49:3c:6a:11:d3:e4:73:93:9f:16:
                    e3:78:39:50:f5:a8:72:88:4e:64:84:0b:42:e5:a1:
                    12:47:ba:1a:4b:3a:5f:c7:f5:25:25:22:fa:37:db:
                    a9:e5:f2:b4:6d:2c:ba:f3:04:68:1f:f6:0d:52:00:
                    da:c2:5b:97:c1:4d:d6:7e:84:ed:ed:aa:44:37:df:
                    84:80:eb:8e:d4:c8:45:05:2b:14:dd:56:a6:81:80:
                    e8:18:9a:c5:1e:89:90:a3:3f:30:b5:54:3c:87:21:
                    71:95:a1:9e:b9:7b:3a:99:0f:af:3f:a6:99:17:62:
                    a7:a5:cf:8a:33:f2:14:17:17:57:10:ca:4e:5c:5f:
                    ee:2f:ae:03:f8:2a:a6:75:29:f6:44:c2:f2:ad:73:
                    f4:94:9f:4e:58:11:92:ac:89:15:32:c9:18:7e:01:
                    00:24:e2:52:2c:34:84:b5:f5:0c:18:ca:3a:d9:ce:
                    5b:24:ce:c4:99:68:d0:9f:6b:95:b0:73:35:bd:03:
                    7d:d4:76:3d:b0:ac:8e:97:ba:57:ba:0e:98:18:f0:
                    a2:09:b8:53:58:05:d4:4b:32:8e:be:8d:03:01:8c:
                    82:f4:63:53:d2:2c:11:40:0d:4e:b7:20:3a:04:f1:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DC:9A:05:64:74:E8:FA:E9:7A:DD:D2:BA:DF:C2:6B:97:64:4E:F0
            X509v3 Authority Key Identifier:
                keyid:07:3F:FD:DB:68:F4:07:3F:D1:0C:2D:FF:F4:ED:FC:7F:F9:0F:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/073FFDDB68F4073FD10C2DFFF4EDFC7FF90F1BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3137302e3233312e3135362e302f32342d3234203d3e20323635303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:f4:49:8b:7e:40:15:82:57:20:0c:c1:1c:ca:4a:23:36:
         3b:21:14:13:8d:c2:84:e5:ba:0c:08:5b:4b:66:45:ed:7a:5e:
         ac:bf:77:6c:d9:34:85:dc:db:e5:dd:c0:e9:23:62:3f:da:94:
         49:be:f2:f3:a1:ff:f0:75:61:21:82:6b:3c:51:ea:14:0c:ad:
         0f:07:9c:b5:9b:ef:e1:c5:a9:75:48:96:88:d4:a9:2e:a7:ef:
         f0:10:5c:5a:8e:48:b1:1b:52:04:bd:82:5b:52:62:02:d7:0a:
         a8:e8:9f:24:0c:06:ea:b9:79:0f:7b:25:c2:90:45:1c:a5:f9:
         47:74:39:04:4e:6d:71:1e:9f:26:61:27:58:20:bf:ac:d4:70:
         8a:45:d5:f8:a1:d9:80:ae:8b:23:b2:44:9d:0c:77:77:ad:d4:
         0d:b9:89:69:1e:ed:ce:3b:7d:c4:30:1c:69:d9:6d:ee:8f:3f:
         e4:82:50:69:da:4b:bc:70:28:17:a1:79:5c:6d:ba:f3:11:2a:
         8e:cf:0a:80:d6:63:88:04:0a:a2:8c:a4:e6:22:83:65:b5:ea:
         cc:3b:3f:f7:47:fa:70:64:6e:a7:f4:a8:33:ee:d8:58:0a:ea:
         49:4d:bd:c7:a2:4f:b2:27:95:b0:45:a8:2d:5a:05:2a:00:e3:
         9e:21:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org