Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232302e302f32342d3234203d3e20323634313337.roa
File:                     3137302e302e3232302e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          1AqPSR5yoblEiQaHSgeGRO0NkBpPjl8ZqPGCg3lbMYA=
Subject key identifier:   83:0E:14:23:0A:E3:36:F4:C8:55:7F:A3:74:16:CF:A1:42:A1:95:19
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       1D1D042C5C92E5315205801EAE7CBEC66EC581AC
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232302e302f32342d3234203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:29 +0000
ROA not before:           Mon 11 Dec 2023 14:00:29 +0000
ROA not after:            Mon 09 Dec 2024 14:05:29 +0000
asID:                     264137
IP address blocks:        170.0.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1d:04:2c:5c:92:e5:31:52:05:80:1e:ae:7c:be:c6:6e:c5:81:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:29 2023 GMT
            Not After : Dec  9 14:05:29 2024 GMT
        Subject: CN=830E14230AE336F4C8557FA37416CFA142A19519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dc:7e:5a:8f:6f:90:78:c9:3a:f0:7b:cf:aa:
                    c9:e8:ea:08:6a:e6:39:fe:a4:55:e9:e8:ae:57:16:
                    d5:7a:18:2f:83:cc:cc:c0:64:68:40:2e:10:03:e5:
                    59:38:b3:5f:aa:dc:2c:1e:70:3d:a9:8f:17:25:83:
                    2f:47:dd:43:1d:04:53:66:d1:54:dc:e5:aa:1e:6a:
                    90:5f:ef:de:08:c7:23:8a:ee:66:26:c5:bd:3c:1f:
                    ca:56:e7:fa:01:8b:0c:5b:65:1b:4b:52:be:b5:29:
                    ef:c5:77:b0:f6:3f:a9:66:c3:af:dc:26:2d:f8:6c:
                    44:bb:ab:74:32:75:46:57:35:6c:a2:96:37:e4:c2:
                    5e:fa:84:47:e9:66:8b:0b:d0:44:6b:ce:b9:b8:e4:
                    f9:0e:49:d5:b4:42:74:60:86:d2:03:16:56:13:e6:
                    45:23:ee:05:d1:51:77:e8:f6:53:8b:3a:fd:32:d4:
                    33:3a:18:6c:04:29:8e:ec:4e:b1:6b:cb:49:a8:8f:
                    15:f8:de:a0:39:db:62:9d:0c:8a:46:50:0b:d6:50:
                    b8:9d:f7:d2:8a:99:be:8a:7b:a7:4a:00:90:a6:9f:
                    cb:2b:05:3c:fe:23:7f:0b:9e:08:1f:9c:0d:7b:e9:
                    06:9a:b6:07:b8:0b:01:5c:40:41:8d:51:c6:63:dc:
                    65:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0E:14:23:0A:E3:36:F4:C8:55:7F:A3:74:16:CF:A1:42:A1:95:19
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232302e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:e7:db:42:98:a8:c2:50:9c:0d:7d:ec:45:0b:7f:1e:b8:a1:
         86:56:1a:9b:40:39:35:1a:f0:4c:e5:76:f5:46:9a:29:51:e5:
         97:98:b6:14:fa:ae:17:d4:06:8b:2b:df:0f:a1:e7:6f:af:1d:
         85:1e:91:b6:56:c8:eb:76:b8:76:05:b1:a7:c0:5c:cd:a1:a4:
         a5:e2:20:e2:fd:8b:2a:6e:f7:82:e7:ae:85:fc:08:7e:34:9d:
         8a:c8:89:21:a8:a7:d3:34:99:12:85:e5:c6:04:84:86:cb:ae:
         23:d9:76:56:04:2d:48:cc:19:c4:4c:7b:e0:ba:f9:bb:25:bb:
         cf:94:6b:68:57:62:1e:8b:7d:bb:b4:c4:2d:00:4f:1d:5e:25:
         29:0d:72:b8:0d:5b:42:fd:6b:30:a6:eb:20:c2:27:25:e3:de:
         74:f6:ab:e1:a1:49:69:5b:37:97:12:03:97:41:30:99:91:7d:
         18:9c:6f:b3:ad:05:16:a0:d7:a2:c1:63:d3:39:c3:2d:2d:68:
         83:f8:15:5c:2e:56:fb:62:34:e3:d3:d2:42:ef:af:9d:ae:44:
         01:fd:b3:20:4e:74:e0:fe:ec:46:68:3e:b2:25:49:2b:f7:e4:
         4d:b2:52:0a:4c:2a:d3:0f:fb:6b:38:00:bc:30:b1:12:4a:a8:
         7c:f7:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:26 2024 by rpki-client on console-ams.rpki-client.org