Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232322e302f32332d3233203d3e20323634313337.roa
File:                     3137302e302e3232322e302f32332d3233203d3e20323634313337.roa (raw, json)
Hash identifier:          hz4DGK9Q8ixybZJWSx7Toj/6BQw5RIFd9BwZPfwg2o4=
Subject key identifier:   0F:D8:49:B6:45:01:7E:C4:30:0E:0B:76:FB:9D:EB:A6:02:53:42:4F
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       61A90B43982BDC30D6F6432B36ADDF97AF44B994
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232322e302f32332d3233203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:35 +0000
ROA not before:           Mon 11 Dec 2023 14:00:35 +0000
ROA not after:            Mon 09 Dec 2024 14:05:35 +0000
asID:                     264137
IP address blocks:        170.0.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a9:0b:43:98:2b:dc:30:d6:f6:43:2b:36:ad:df:97:af:44:b9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:35 2023 GMT
            Not After : Dec  9 14:05:35 2024 GMT
        Subject: CN=0FD849B645017EC4300E0B76FB9DEBA60253424F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:5c:f3:94:83:b3:ff:e9:7e:71:3b:62:17:
                    1f:94:7b:c4:a0:19:de:8b:84:76:52:ef:af:72:44:
                    9b:6e:34:a9:4a:68:fc:bd:66:e3:63:71:8b:66:14:
                    59:0b:bb:c4:aa:ad:1b:3f:5b:1f:49:e7:96:6b:0d:
                    7f:4a:87:9a:0a:e1:d8:96:29:22:a7:8b:62:d7:08:
                    86:f6:04:72:dd:04:4d:f9:4e:1c:9b:ce:42:9b:13:
                    da:78:e3:5b:76:89:47:3e:71:13:1a:38:1a:ea:db:
                    de:5f:2b:5d:18:14:9f:f4:76:1e:1f:90:78:d5:f0:
                    68:3c:88:4f:41:48:e7:f5:1b:f6:c0:43:6b:58:48:
                    cc:b2:95:ed:4f:b0:44:98:31:11:7d:ab:04:b2:22:
                    e2:7d:d8:ab:29:d3:9c:96:b6:f7:96:a8:9c:b1:67:
                    69:94:95:09:34:b1:4f:08:1d:f3:bc:5f:e2:37:37:
                    fb:e9:c6:4e:f6:70:d5:eb:78:59:90:f0:99:9a:0c:
                    90:ab:38:f1:07:f0:b0:03:cd:b1:73:d8:50:3b:2a:
                    24:32:5d:9b:15:24:d4:cf:81:d4:22:c7:c1:39:21:
                    0d:97:3a:e1:65:3c:56:10:01:ab:cb:0a:63:b2:b8:
                    2b:a2:85:64:9d:95:5a:86:4d:a6:2b:62:6b:e7:f4:
                    5a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D8:49:B6:45:01:7E:C4:30:0E:0B:76:FB:9D:EB:A6:02:53:42:4F
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232322e302f32332d3233203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:9c:ef:be:1e:1d:d2:1d:a4:b7:ba:1f:fe:ce:2e:0b:46:7f:
         a7:41:af:c5:6e:71:6c:10:6a:ad:90:62:f4:1e:20:f6:21:c1:
         de:e5:49:b6:7b:ea:b9:6d:3f:88:3b:0e:7a:53:56:b6:a3:8d:
         5b:9f:f8:b8:02:2a:2e:74:be:ab:7f:f5:fd:54:19:16:17:5f:
         ab:96:64:dd:28:7f:58:a8:00:dd:b2:bc:cb:a7:03:6f:bf:c8:
         01:a3:70:1f:14:55:03:a0:b6:f7:9d:ce:b7:c3:5f:cb:2f:54:
         e6:94:ed:21:e2:76:2f:74:94:9d:c2:a1:23:29:22:09:bc:35:
         c3:f3:c4:32:76:35:a2:ea:6d:ee:10:de:4c:af:ea:54:9c:94:
         26:0e:c9:8d:eb:4c:da:e8:a3:1d:68:26:64:f4:ae:2f:37:1a:
         04:81:c2:b2:b7:0a:8c:21:46:7e:ce:63:61:37:21:39:1a:62:
         6d:d5:37:eb:41:a4:f7:e5:4b:d6:5e:ca:a0:da:8e:26:07:04:
         2a:ec:1d:7e:df:c0:3e:c1:12:08:e1:a8:0c:c9:f0:c9:ed:c5:
         a1:24:6c:20:b9:d1:12:43:0b:6d:fc:09:02:d3:97:d6:1e:44:
         75:18:60:6c:3a:a4:3a:da:bd:10:5d:4d:59:84:14:4e:c8:da:
         72:6f:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:26 2024 by rpki-client on console-ams.rpki-client.org