Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3234352e32342e302f32322d3332203d3e203631353838.roa
File:                     3137302e3234352e32342e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          es+Ck9ALHZXS+No0cPvTCbE8ApmqZFIyLVmIEU0oY3k=
Subject key identifier:   EF:57:4F:2A:D4:13:0B:67:03:A7:33:48:D7:99:5B:9C:68:45:F1:B5
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       3E57555089B97579704BB3B40EF96F01A19D807E
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3234352e32342e302f32322d3332203d3e203631353838.roa
Signing time:             Wed 27 Sep 2023 20:01:19 +0000
ROA not before:           Wed 27 Sep 2023 19:56:19 +0000
ROA not after:            Wed 25 Sep 2024 20:01:19 +0000
asID:                     61588
IP address blocks:        170.245.24.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:57:55:50:89:b9:75:79:70:4b:b3:b4:0e:f9:6f:01:a1:9d:80:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Sep 27 19:56:19 2023 GMT
            Not After : Sep 25 20:01:19 2024 GMT
        Subject: CN=EF574F2AD4130B6703A73348D7995B9C6845F1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:b8:fc:c2:3c:2c:6d:9c:9a:0b:a5:3f:87:
                    b2:92:7f:25:1e:ac:2d:ca:69:1e:30:30:c3:ab:18:
                    d4:2b:65:95:74:1a:67:71:12:55:78:be:f3:30:96:
                    0d:e3:0c:3f:9c:b3:87:a5:5f:62:4d:c3:65:1e:e6:
                    cc:53:1a:2a:85:21:7c:0e:a2:4c:a6:d1:3a:ad:0c:
                    7e:b4:dd:88:1c:7b:6a:95:d3:9c:9c:56:8e:f4:8c:
                    07:6e:32:a1:a1:ab:94:fe:58:b2:c9:e9:b7:31:40:
                    4e:b2:4c:1a:c7:5b:b2:ef:c0:8c:48:2d:a9:b2:f7:
                    cf:fb:3c:46:ea:06:54:db:51:f1:f7:c7:62:fc:40:
                    9e:88:f7:bf:43:c5:63:6c:62:08:dd:07:e0:08:58:
                    e3:56:15:30:f4:8a:fb:db:82:d6:3e:fa:d6:9c:24:
                    90:c5:44:9e:32:d7:f7:f0:5f:75:a6:8b:0c:1e:41:
                    a0:c4:63:1f:e1:5c:52:89:75:77:09:50:31:8f:7d:
                    ae:fd:fb:68:b5:4a:7d:25:dd:d8:74:2c:72:ee:ef:
                    a9:c6:55:25:4e:a3:68:d2:9a:4b:80:2b:ad:a4:eb:
                    85:2e:02:90:51:d8:7b:e3:f1:c1:c7:28:7d:2f:e8:
                    44:88:d5:99:5b:46:d2:c2:fa:65:a7:a0:a6:eb:35:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:57:4F:2A:D4:13:0B:67:03:A7:33:48:D7:99:5B:9C:68:45:F1:B5
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3234352e32342e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:63:57:a2:a1:45:b4:fc:7f:b2:b1:93:fa:5e:69:a9:63:d4:
         bd:90:c6:8e:71:d1:1b:20:33:3d:bd:b9:d4:25:e2:78:41:54:
         f4:f1:0e:47:42:26:f0:34:10:f3:20:d6:d6:55:2a:a3:4c:e2:
         b8:14:b5:bc:09:fa:b2:bb:80:fd:d5:b2:91:41:0d:34:3c:e8:
         d7:41:9b:c6:7f:e2:7e:5d:47:ea:14:e3:77:5c:33:12:82:bb:
         c1:02:5b:36:64:ed:e9:77:d9:b9:04:40:7e:7f:b3:e5:f5:57:
         79:79:48:ef:5e:55:da:bd:50:79:c8:ae:63:3a:0b:ee:a2:b4:
         25:0f:2f:87:90:d6:52:49:b6:2f:9a:49:5c:17:dd:0f:71:c3:
         fd:b1:b9:01:6e:1f:cd:09:eb:20:98:cc:c3:57:54:18:d6:bb:
         f4:e0:cb:a5:b4:ba:4c:3e:e6:77:8b:0c:79:83:1c:b4:be:8b:
         ba:9a:de:08:46:d5:d5:b4:99:68:c1:07:f5:b2:bf:cc:44:09:
         ba:fd:0b:f9:60:37:c2:5f:fe:2f:d3:38:85:09:e7:e9:c2:c3:
         c7:2c:de:ec:e5:ea:71:a5:e1:6e:02:63:0f:dd:7a:4a:96:5e:
         4c:d4:a0:93:b7:ee:42:d9:93:27:ab:e2:a7:01:a6:66:a6:45:
         58:7e:9e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org