Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231382e302f32342d3234203d3e20323633393133.roa
File:                     3137302e3233312e3231382e302f32342d3234203d3e20323633393133.roa (raw, json)
Hash identifier:          EURbavaTtywS3s1uzmrD5T1jlxNVfhcead5PcPR3CSY=
Subject key identifier:   D6:20:A2:E4:2E:C0:0D:D6:F4:DE:D1:93:BC:8D:C2:61:68:03:40:1F
Certificate issuer:       /CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
Certificate serial:       64BCECDC96E746CDD63FC00054BECE447685BF9B
Authority key identifier: 61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231382e302f32342d3234203d3e20323633393133.roa
Signing time:             Wed 30 Aug 2023 17:00:04 +0000
ROA not before:           Wed 30 Aug 2023 16:55:04 +0000
ROA not after:            Wed 28 Aug 2024 17:00:04 +0000
asID:                     263913
IP address blocks:        170.231.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bc:ec:dc:96:e7:46:cd:d6:3f:c0:00:54:be:ce:44:76:85:bf:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5
        Validity
            Not Before: Aug 30 16:55:04 2023 GMT
            Not After : Aug 28 17:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:50:6b:7a:70:de:21:65:80:d6:91:93:cd:
                    4f:60:04:1c:90:47:0b:a8:ac:24:a1:64:b6:fa:d4:
                    51:88:48:bb:7c:8d:7c:e8:ec:cb:25:41:58:b6:1a:
                    32:1c:11:69:c7:9e:08:42:f3:c9:cb:23:d0:32:a6:
                    ab:a2:73:a9:48:df:87:92:5f:d1:0c:0f:bb:08:53:
                    19:54:2e:bb:60:fc:70:9d:c2:c5:ba:c5:ab:b4:36:
                    47:b0:03:14:9e:71:f1:b8:97:8d:64:4b:4a:a7:bf:
                    96:12:5f:e5:5e:84:de:ab:6e:f7:13:16:64:b6:6c:
                    5e:c2:ce:82:3e:51:a1:86:d4:4b:f6:1a:7d:5b:4b:
                    ed:02:58:34:ad:86:ee:48:6f:52:cf:37:ca:72:ab:
                    57:4b:15:66:a8:6b:9f:0d:7b:50:f8:28:be:66:07:
                    50:91:03:78:2d:00:f2:f4:5a:18:82:bd:89:3b:74:
                    36:e0:6d:18:f0:81:c5:5a:f8:2f:1f:c2:95:27:27:
                    04:aa:49:44:0e:ce:74:ad:db:c4:be:c7:66:28:48:
                    c0:ae:45:8c:e3:bd:3c:2b:ac:e7:05:21:ea:e8:dd:
                    61:ec:2a:fb:59:e3:5b:cf:cc:b2:37:f2:3e:c3:65:
                    32:a8:46:eb:17:70:31:c3:a5:c5:9e:ee:1c:84:a8:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:20:A2:E4:2E:C0:0D:D6:F4:DE:D1:93:BC:8D:C2:61:68:03:40:1F
            X509v3 Authority Key Identifier:
                keyid:61:F8:FB:85:E5:A0:39:73:BD:C5:BC:31:FA:F2:4C:C3:A5:C9:2A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61F8FB85E5A03973BDC5BC31FAF24CC3A5C92AD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231382e302f32342d3234203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:6d:55:62:ff:f0:4c:d5:87:14:cd:94:64:74:95:9f:0c:5f:
         13:ee:3d:dd:72:b9:8e:44:10:8c:17:48:42:05:7a:df:9b:1c:
         4e:f9:7d:2e:cd:da:c0:41:5d:74:e6:d9:42:d2:1d:48:5a:31:
         40:09:70:cb:16:4c:35:27:f4:15:a5:40:d8:e6:94:b6:eb:49:
         67:82:b1:78:e8:f8:ff:77:3f:0b:0c:d2:fe:1d:ff:19:d4:16:
         3f:76:da:c6:ca:22:d6:d4:6e:2e:37:13:e8:1d:6b:1e:d1:98:
         92:51:ce:6c:6c:f4:39:c7:5b:9c:7c:84:c4:80:68:96:7e:0c:
         a9:3e:57:30:be:e6:5f:3d:96:4d:ad:02:8c:35:0b:4c:2b:5a:
         27:73:e5:4f:90:e1:26:d4:5b:51:c6:37:f3:09:01:8e:f2:c7:
         20:8a:29:79:32:50:30:31:a0:28:1d:0d:5e:84:18:bf:ec:d9:
         42:9a:c8:bd:25:41:d7:4d:13:95:9a:28:36:a8:fb:e3:cf:3b:
         61:bc:3e:4f:d4:0f:6c:6c:e3:0d:44:1d:6f:7b:82:ee:6a:c1:
         4f:f0:24:f4:9e:5d:42:a9:21:af:6a:b3:7a:b4:10:a7:fb:f9:
         d3:7e:f2:6e:37:c2:a1:a3:b1:7b:67:1c:27:ac:97:ae:d4:c6:
         71:12:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:24 2024 by rpki-client on console-fra.rpki-client.org