Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134332e302f32342d3234203d3e20323635303137.roa
File:                     3137302e38342e3134332e302f32342d3234203d3e20323635303137.roa (raw, json)
Hash identifier:          5iOOHu95tNrCCkiamApd9wL3E/QYSh76EJ/QTDF2L+k=
Subject key identifier:   47:2F:4A:4C:76:AB:12:B7:E0:C4:B7:C9:2C:6C:44:BF:52:A1:A6:D3
Certificate issuer:       /CN=D21172D11F83AF970E477D1BEC091421032D8B92
Certificate serial:       29543E7B85F5665642414AB51B1962123F4EED1A
Authority key identifier: D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134332e302f32342d3234203d3e20323635303137.roa
Signing time:             Wed 03 Apr 2024 22:10:51 +0000
ROA not before:           Wed 03 Apr 2024 22:05:51 +0000
ROA not after:            Wed 02 Apr 2025 22:10:51 +0000
asID:                     265017
IP address blocks:        170.84.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:54:3e:7b:85:f5:66:56:42:41:4a:b5:1b:19:62:12:3f:4e:ed:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21172D11F83AF970E477D1BEC091421032D8B92
        Validity
            Not Before: Apr  3 22:05:51 2024 GMT
            Not After : Apr  2 22:10:51 2025 GMT
        Subject: CN=472F4A4C76AB12B7E0C4B7C92C6C44BF52A1A6D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:93:70:34:80:80:1b:70:0d:76:c0:36:a3:55:
                    f0:54:16:c9:22:81:54:66:bd:19:48:b5:99:e2:0a:
                    dd:80:eb:c9:29:aa:eb:9c:df:e3:80:3e:9e:c7:43:
                    54:81:82:be:ad:06:41:06:fe:6c:3c:4b:f6:3c:4c:
                    9d:d2:a7:e5:45:e8:ba:4e:ea:4e:dd:4b:bc:f7:e8:
                    81:4a:94:e8:b6:72:c0:01:d3:26:d7:f3:94:9c:b3:
                    cd:c9:f8:0e:fb:2a:64:0c:cc:81:c3:73:eb:77:51:
                    74:3f:18:d3:6f:22:0e:28:92:e5:91:e0:55:07:34:
                    47:77:8b:f0:6a:5c:e9:15:69:ac:15:28:de:6b:16:
                    44:9b:fe:cd:e8:9b:62:15:9d:5d:ba:00:bc:27:14:
                    b4:ee:f0:d1:49:e1:31:35:2a:ad:c7:bc:69:04:51:
                    f1:fc:ce:d2:ad:7c:11:6d:5e:3b:51:4d:89:cf:38:
                    27:f3:8a:a2:39:38:b9:a4:5e:00:25:9f:ec:31:e8:
                    54:b4:9b:4b:68:95:d7:00:ea:0a:8d:f0:2e:3a:a6:
                    59:6f:e8:0f:b2:73:ee:e8:56:2e:fd:14:1b:27:72:
                    3a:1f:73:d1:40:d5:1d:c3:ea:bb:41:96:fb:5f:bd:
                    8d:17:14:f6:e6:65:c4:90:e1:1a:06:1f:a1:31:6e:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2F:4A:4C:76:AB:12:B7:E0:C4:B7:C9:2C:6C:44:BF:52:A1:A6:D3
            X509v3 Authority Key Identifier:
                keyid:D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/D21172D11F83AF970E477D1BEC091421032D8B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/3137302e38342e3134332e302f32342d3234203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f9:4c:a5:fb:2d:af:53:ef:0c:81:f3:6a:30:db:b9:09:c3:
         00:79:ff:6c:a0:1f:85:e1:7d:86:9a:6f:24:25:f0:ca:45:12:
         28:8d:3f:94:90:12:97:5a:cb:88:bd:29:9f:42:28:86:81:e9:
         42:b6:3b:c8:a9:5d:4e:59:44:03:ca:11:02:5e:15:79:1b:c0:
         a9:b7:06:85:f0:54:97:2a:d9:65:4f:f1:3f:3f:26:19:a9:b8:
         60:92:5f:b6:2f:c5:55:be:41:70:da:35:95:17:8e:c7:c6:52:
         72:05:ed:ad:eb:85:cc:4e:f4:eb:36:d6:6c:b5:20:8b:61:16:
         64:8d:36:6e:06:ab:ae:d1:13:79:b2:04:c4:31:a0:55:41:d9:
         a1:ac:e0:6c:71:3c:be:75:93:b4:9b:38:cf:41:4e:40:d3:20:
         ee:fa:93:ef:71:3f:9e:65:c0:04:18:67:a5:79:e9:e2:26:fd:
         43:42:24:3f:16:0b:0c:8f:03:89:74:59:fa:13:d4:8f:59:55:
         ad:07:f7:37:52:84:db:3b:ae:bc:7f:d1:0d:cd:47:ae:dc:f1:
         99:99:ee:bb:b9:88:75:c8:ff:02:07:db:ca:10:6b:82:88:46:
         ad:d1:f8:82:e4:3c:7a:bc:c3:30:5f:6b:10:9c:56:bc:3d:9c:
         bd:97:de:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org