Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/3137302e3233382e3138342e302f32332d3234203d3e20323636333338.roa
File:                     3137302e3233382e3138342e302f32332d3234203d3e20323636333338.roa (raw, json)
Hash identifier:          kEujAs9He/nkjeDTpTLC9xa7VomQK5AJP4oIxXNEgk8=
Subject key identifier:   42:BF:98:63:BA:27:69:69:67:44:BC:1A:46:77:ED:AC:0B:45:F6:19
Certificate issuer:       /CN=8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5
Certificate serial:       2AC9A80FEDDD46379C1D60F2EFC81E69142C8CFE
Authority key identifier: 8F:24:F4:01:F7:CE:9F:43:05:EE:7F:5E:EE:78:60:B4:0E:10:2C:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/3137302e3233382e3138342e302f32332d3234203d3e20323636333338.roa
Signing time:             Mon 21 Aug 2023 23:19:56 +0000
ROA not before:           Mon 21 Aug 2023 23:14:56 +0000
ROA not after:            Wed 21 Aug 2024 23:19:56 +0000
asID:                     266338
IP address blocks:        170.238.184.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c9:a8:0f:ed:dd:46:37:9c:1d:60:f2:ef:c8:1e:69:14:2c:8c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5
        Validity
            Not Before: Aug 21 23:14:56 2023 GMT
            Not After : Aug 21 23:19:56 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f0:68:58:43:4a:5b:07:9d:fb:05:8a:d2:7b:
                    21:5a:a8:6b:79:11:4d:13:c7:d1:97:36:8a:54:15:
                    3d:e0:e1:60:ad:c6:ea:2c:17:2f:a8:7b:ed:75:c5:
                    59:5a:5a:82:17:3d:7f:81:c6:b6:9e:41:f9:d3:0e:
                    ab:56:2d:1c:86:b3:8b:0a:18:91:fd:45:e9:5e:87:
                    5c:8d:df:2d:d7:31:9e:e3:5a:34:f8:94:0c:80:33:
                    be:b3:b6:3b:f1:e6:a1:0c:85:37:b0:2b:bd:86:51:
                    77:00:01:9f:87:9c:75:0e:81:62:62:0f:29:db:a6:
                    cd:dd:ef:31:dc:b0:63:5b:0a:c3:b6:00:c4:f1:2b:
                    87:97:78:38:db:2d:87:64:7d:66:bc:cf:02:aa:32:
                    b8:30:9c:a7:c1:dc:bc:69:ce:2d:48:e9:07:91:e4:
                    07:d1:64:cc:34:09:49:b6:e5:a5:7f:63:02:b9:de:
                    80:12:c7:de:2b:4d:30:a1:ec:d5:82:70:4f:81:5c:
                    4f:a9:9a:81:f3:6c:6c:27:5a:1e:84:09:c6:55:61:
                    dc:00:92:69:a4:fa:c1:df:f9:13:d2:b4:46:3f:17:
                    b3:6a:64:a1:34:4d:81:c9:91:bc:51:13:a7:76:15:
                    2f:23:a0:e2:0e:4e:f0:e4:69:a7:e6:98:83:3d:c9:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BF:98:63:BA:27:69:69:67:44:BC:1A:46:77:ED:AC:0B:45:F6:19
            X509v3 Authority Key Identifier:
                keyid:8F:24:F4:01:F7:CE:9F:43:05:EE:7F:5E:EE:78:60:B4:0E:10:2C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/3137302e3233382e3138342e302f32332d3234203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:a6:5d:37:7f:83:86:f2:76:dd:46:11:c2:8e:37:cf:a0:32:
         8e:6f:b8:2c:85:5c:71:4e:d8:80:58:be:d5:84:0e:1b:bb:4a:
         fe:79:5f:34:c9:b3:48:36:fe:df:bd:14:f2:4d:1e:1c:f1:e0:
         79:e1:44:67:e7:88:04:5b:2a:a5:1d:15:c1:14:49:96:bb:2e:
         38:cb:e4:60:83:f9:0d:6a:4f:05:fc:94:5b:70:7b:82:84:3c:
         b3:bd:0f:74:d2:33:35:8c:6e:ce:4c:e3:7a:f8:3c:03:59:63:
         32:de:2f:d5:4d:c8:07:ac:0b:22:34:88:b5:d3:0d:9c:84:a1:
         08:78:7a:b3:bf:1d:df:92:7c:e5:9e:88:60:f0:d9:ed:43:6f:
         dd:85:20:d3:d0:17:ae:83:c8:5c:20:31:08:ed:02:13:90:5e:
         88:1c:c8:47:d1:a3:ca:1a:f4:01:75:36:cf:a3:36:96:ad:95:
         5b:bb:d3:cb:ae:e1:41:38:df:e8:fc:ea:6a:3f:94:f0:b5:98:
         f1:ee:8c:4f:b3:3a:77:88:8e:2f:72:83:33:e5:c7:ab:f2:62:
         03:95:d5:55:ec:75:a5:cb:30:3c:1b:1f:fb:20:b2:61:0a:55:
         be:e7:f5:0d:d8:0d:8e:92:1e:3f:2f:48:9a:fb:2a:45:f4:b3:
         9c:26:c6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org