Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/0/3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa
File:                     3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa (raw, json)
Hash identifier:          ozGkUphgEF2n+Acl5qBlDZ82v0z4OGz4zMopI+Jbd1A=
Subject key identifier:   D9:AC:62:CE:0C:FE:05:80:78:7D:37:AE:8C:D0:9F:D1:3B:11:C7:AA
Certificate issuer:       /CN=51751B63E97EBF8F8F8083568EE27D930751549B
Certificate serial:       19868D65399E0679364275FC458B9FD3A6AB4A1C
Authority key identifier: 51:75:1B:63:E9:7E:BF:8F:8F:80:83:56:8E:E2:7D:93:07:51:54:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51751B63E97EBF8F8F8083568EE27D930751549B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/0/3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa
Signing time:             Tue 26 Mar 2024 17:00:20 +0000
ROA not before:           Tue 26 Mar 2024 16:55:20 +0000
ROA not after:            Tue 25 Mar 2025 17:00:20 +0000
asID:                     265113
IP address blocks:        170.254.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:86:8d:65:39:9e:06:79:36:42:75:fc:45:8b:9f:d3:a6:ab:4a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51751B63E97EBF8F8F8083568EE27D930751549B
        Validity
            Not Before: Mar 26 16:55:20 2024 GMT
            Not After : Mar 25 17:00:20 2025 GMT
        Subject: CN=D9AC62CE0CFE0580787D37AE8CD09FD13B11C7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:c3:ce:17:19:e9:88:93:60:10:fd:af:20:
                    f2:3d:db:35:a7:39:a8:70:d9:06:6b:5c:a8:ad:a8:
                    be:4a:07:22:b5:7b:90:80:6a:ef:c5:73:b8:54:9e:
                    3a:e3:e4:bb:13:7c:cf:c1:8f:b1:ab:19:1a:65:11:
                    53:b7:ad:58:b0:4c:a4:8e:b6:54:ea:de:40:7a:67:
                    bc:29:ef:ef:f4:04:87:ec:40:f9:ba:3a:f6:e4:31:
                    bc:d7:4b:de:b5:fc:3d:0f:ef:b7:df:e7:25:e8:42:
                    4d:e1:2e:b4:91:d0:80:ca:4b:30:e9:fb:48:89:6f:
                    ab:24:31:84:b2:21:cd:b5:68:b8:40:b0:54:0d:3c:
                    43:32:0e:4c:d6:9f:7a:24:c0:4f:a0:a1:06:ce:3c:
                    85:4f:84:06:c7:3c:b7:30:23:f4:93:ae:bc:7f:95:
                    4c:f4:92:06:6d:ad:2d:6e:22:60:bb:58:a7:31:c5:
                    42:e6:2b:75:05:34:33:5d:f6:56:9a:94:37:d1:c1:
                    ec:38:dc:9b:7a:a9:04:29:1e:c0:f4:cc:84:ed:3a:
                    1f:75:76:cc:23:5a:12:59:60:89:b8:b1:bc:c1:45:
                    6b:ce:99:ad:b6:8c:ba:b8:34:66:04:c6:56:e3:1a:
                    0e:70:f2:84:f6:42:85:6a:be:9c:0d:45:22:ec:f8:
                    eb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AC:62:CE:0C:FE:05:80:78:7D:37:AE:8C:D0:9F:D1:3B:11:C7:AA
            X509v3 Authority Key Identifier:
                keyid:51:75:1B:63:E9:7E:BF:8F:8F:80:83:56:8E:E2:7D:93:07:51:54:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/0/51751B63E97EBF8F8F8083568EE27D930751549B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51751B63E97EBF8F8F8083568EE27D930751549B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/0/3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:a5:fd:1b:84:65:9f:79:6f:3b:94:a9:18:7e:56:19:ef:fa:
         71:20:2c:6c:68:d4:40:4f:47:35:80:4d:fa:71:91:03:f3:fb:
         8f:a0:8d:10:5e:a1:ba:f7:90:96:ce:b1:89:cc:b7:45:27:1c:
         a6:ed:79:5e:3c:8a:ab:89:95:3b:f2:32:52:10:41:83:7c:dc:
         d1:f6:63:68:22:93:0e:09:6f:d0:f9:0b:04:26:3b:9f:13:b8:
         9f:62:e2:3e:59:ca:dc:49:b1:56:38:63:0d:ef:df:10:8a:28:
         fe:b0:58:27:69:8b:af:69:cd:22:61:71:aa:32:41:c3:3a:8f:
         71:fe:2a:f7:72:e1:3b:b8:e0:4c:d2:f2:b6:c4:1d:d7:4f:ee:
         09:63:5b:c1:9e:f5:46:3b:2b:f7:c0:2d:64:28:8e:23:08:87:
         97:9e:71:f2:3f:34:f1:e5:97:8d:ea:19:a6:95:01:d2:d6:60:
         04:96:b7:2f:44:3d:cf:76:5b:b1:75:45:d6:42:66:e2:ea:01:
         7a:82:09:a4:4a:f1:8d:f8:27:7e:7c:b3:68:f1:cd:3a:fe:af:
         91:42:aa:27:01:d2:99:ae:68:95:9b:aa:7a:2c:d9:aa:93:78:
         88:c1:ac:1b:19:fe:48:89:27:5f:3f:b3:b9:61:c9:58:21:17:
         7f:31:19:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org