Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa
File:                     3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (raw, json)
Hash identifier:          X+HY0rEkcEZBU8fc5bVlkcXwmuduVVRHecRs2RqHGiY=
Subject key identifier:   0B:2E:ED:0D:A7:C1:F1:0A:7B:E0:A5:5D:1A:77:4D:5C:38:FC:F6:43
Certificate issuer:       /CN=8385AA20FCB01184811054ADA6C4B37FC0652175
Certificate serial:       74F13E5577C717A962871A0A839ACD23BF607E58
Authority key identifier: 83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa
Signing time:             Thu 08 Feb 2024 20:24:12 +0000
ROA not before:           Thu 08 Feb 2024 20:19:12 +0000
ROA not after:            Thu 06 Feb 2025 20:24:12 +0000
asID:                     265078
IP address blocks:        170.233.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f1:3e:55:77:c7:17:a9:62:87:1a:0a:83:9a:cd:23:bf:60:7e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8385AA20FCB01184811054ADA6C4B37FC0652175
        Validity
            Not Before: Feb  8 20:19:12 2024 GMT
            Not After : Feb  6 20:24:12 2025 GMT
        Subject: CN=0B2EED0DA7C1F10A7BE0A55D1A774D5C38FCF643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:03:2b:c3:40:14:8d:87:e7:48:29:51:81:
                    0c:9e:54:1d:56:36:cd:5e:f4:31:93:2a:8a:29:67:
                    48:fb:38:26:ac:82:db:df:0a:94:eb:c1:26:d8:18:
                    8e:2a:a2:08:8a:15:ac:86:ab:70:01:58:19:ea:78:
                    df:f1:08:71:ad:74:32:57:dd:43:91:db:33:62:08:
                    71:49:21:00:10:37:c8:aa:0d:fe:cc:2c:1f:43:38:
                    68:42:66:b2:db:ec:ea:8d:6b:8e:e2:94:07:3b:33:
                    56:b7:89:47:fe:35:8f:11:6a:5a:a1:83:fd:4a:1e:
                    35:e9:b7:22:fa:34:53:14:2a:ad:60:eb:98:8d:c2:
                    37:dc:dd:11:2e:47:87:c7:f1:d0:1e:0c:d8:cb:4d:
                    51:9b:c1:8e:ec:c7:66:de:35:fa:90:1e:91:4b:66:
                    0b:4b:9e:ae:8a:5c:dc:d3:99:4b:b7:9c:da:b8:95:
                    1d:41:65:b6:a4:50:53:c3:ae:0d:05:4d:ad:a5:fe:
                    1d:b4:ba:17:e5:ec:f5:a3:f0:58:43:3c:78:bb:e8:
                    d3:dc:bc:8a:2c:c1:2b:b2:d0:bd:d1:11:f4:85:3e:
                    a7:30:15:40:62:fc:42:fc:c4:e0:2c:5c:d9:06:52:
                    79:db:f7:ac:fd:5b:c0:b2:f7:5e:0e:57:5c:b4:70:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2E:ED:0D:A7:C1:F1:0A:7B:E0:A5:5D:1A:77:4D:5C:38:FC:F6:43
            X509v3 Authority Key Identifier:
                keyid:83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/8385AA20FCB01184811054ADA6C4B37FC0652175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:63:8b:01:7a:df:dd:e7:90:00:1a:07:58:6a:16:93:1b:45:
         7d:f6:b2:6e:84:d3:e5:33:fb:d1:1d:19:23:00:78:a9:40:60:
         20:b4:90:86:67:1c:bf:6e:33:d6:d6:1e:23:10:fe:f8:dd:28:
         42:ee:e7:42:b6:b2:66:d6:bc:9a:74:6d:68:9f:fe:3b:47:7b:
         d9:3e:9a:2b:2a:38:b3:74:00:d4:3f:41:a5:2c:e6:12:12:8d:
         35:95:84:73:74:c1:fd:72:78:f5:2c:88:78:25:db:d0:be:c0:
         0c:91:73:31:7c:5f:ff:5e:64:eb:2c:70:8a:e9:17:dc:b7:96:
         f2:9a:99:03:b6:08:f9:14:75:34:f1:69:94:44:9f:d9:4b:13:
         fd:8a:9f:27:9d:e3:72:04:6b:46:53:0f:d7:7f:b5:7f:40:a6:
         77:e0:56:f8:9b:a5:bd:30:d6:85:f0:45:66:bd:e9:f4:3f:d9:
         bf:00:d5:2e:94:41:7f:e0:8f:6c:a1:2b:6a:d5:2b:6d:08:41:
         0d:6b:17:41:6a:c9:87:d1:dd:16:d8:06:29:02:79:12:81:83:
         a2:4d:86:12:82:ac:7d:5a:87:ef:d5:96:f3:af:40:68:d6:5b:
         2d:0f:7b:7d:e2:e5:d6:c9:51:27:37:2e:bd:b7:f7:8b:13:47:
         80:48:1f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org