Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137302e3233312e3233322e302f32332d3233203d3e203532363133.roa
File:                     3137302e3233312e3233322e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          xf0aanV8TmS3fUXp7IJOyTU8/4cXihJZGPaCkdDoPMQ=
Subject key identifier:   6C:6A:4A:A6:54:5B:78:F0:E2:84:38:54:EA:CF:E6:03:C0:70:37:C9
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       744690FEDF718D2D559B070AA6C7F6359962FA08
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137302e3233312e3233322e302f32332d3233203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:58 +0000
ROA not before:           Wed 06 Mar 2024 14:46:58 +0000
ROA not after:            Wed 05 Mar 2025 14:51:58 +0000
asID:                     52613
IP address blocks:        170.231.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:46:90:fe:df:71:8d:2d:55:9b:07:0a:a6:c7:f6:35:99:62:fa:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:58 2024 GMT
            Not After : Mar  5 14:51:58 2025 GMT
        Subject: CN=6C6A4AA6545B78F0E2843854EACFE603C07037C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:9d:0e:09:8e:97:44:05:00:13:82:27:9f:
                    01:67:ef:15:c5:38:bb:11:40:98:dd:1e:5b:bd:7b:
                    95:49:af:50:0c:4f:8d:eb:71:1f:79:9a:88:ba:49:
                    62:20:d5:0a:cb:86:05:71:ca:09:8e:cb:03:83:fe:
                    5b:50:a5:56:4b:37:3a:0f:e6:ab:fc:6f:88:e9:35:
                    82:45:90:37:b8:35:c8:02:70:42:f0:fb:3c:06:d1:
                    32:52:37:e6:60:e9:d1:67:28:66:c5:da:c1:6f:bf:
                    f6:b6:8a:e5:7a:f5:c0:da:14:10:b3:d4:ef:6f:5e:
                    a0:21:3b:cc:83:e2:f2:b0:0c:d0:a8:53:83:19:d8:
                    01:91:1f:e7:0a:16:f0:69:67:5b:ef:e4:af:e8:2d:
                    01:22:cf:5d:65:c0:47:f1:13:b0:6e:6b:bc:dc:9b:
                    26:d6:ab:fc:e3:c1:42:40:4f:78:e5:15:89:73:23:
                    95:dc:0b:e1:cb:81:56:24:ab:b0:a2:d2:49:11:c2:
                    20:ed:14:00:c0:cc:f6:ef:26:2b:05:c9:1b:cb:44:
                    8c:37:4c:ab:19:4d:57:c4:f4:a3:81:55:80:3f:56:
                    c5:ab:39:66:6a:a7:1c:e6:b3:7f:81:34:9f:54:04:
                    47:dd:e3:d3:ba:fd:64:20:1f:a3:cf:a3:6d:86:e9:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6A:4A:A6:54:5B:78:F0:E2:84:38:54:EA:CF:E6:03:C0:70:37:C9
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3137302e3233312e3233322e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:e0:ff:0c:07:5e:0a:9a:a2:75:06:8a:82:a8:15:0d:d7:ff:
         ff:c9:2a:fa:0f:65:7b:b0:d8:b2:65:c5:db:1f:f2:a4:fd:a7:
         fd:f1:97:5d:01:91:cf:9a:1f:de:35:5d:14:b3:b7:15:31:25:
         dd:c8:b3:a0:13:d2:9a:79:05:1e:f2:ea:a3:7f:01:34:9a:15:
         3b:a8:cb:35:ac:9e:a2:97:92:87:b3:88:ea:57:ad:9c:0f:70:
         24:f9:e6:01:39:9a:ea:dc:04:68:22:a9:ec:b9:cb:d2:cf:63:
         b9:87:b1:16:78:f4:f0:1e:3b:8b:5f:a5:9d:fa:85:e5:0f:2c:
         06:6d:3b:18:d9:5d:8b:4d:e5:83:b9:22:8e:a3:31:c2:b9:04:
         c7:90:29:6d:a8:ba:a8:06:6b:3e:fd:ea:c9:96:de:5b:f0:f9:
         3f:be:a4:4b:61:e1:53:05:6e:17:8f:be:6b:8c:8d:cb:86:60:
         d6:8a:32:d9:28:af:bd:ee:2b:49:c6:88:a1:cd:ef:15:e2:f5:
         a4:44:b5:5a:c5:88:70:45:a1:25:90:af:e9:9a:63:81:d9:1f:
         51:57:93:40:b1:1b:8c:3c:e1:20:6e:5a:a0:05:ba:34:39:be:
         67:94:2e:d5:b1:ef:0e:41:59:79:f8:02:6d:1f:8f:ac:a2:67:
         2c:ec:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org