Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/3137302e3233392e3231342e302f32332d3233203d3e20323636333538.roa
File:                     3137302e3233392e3231342e302f32332d3233203d3e20323636333538.roa (raw, json)
Hash identifier:          /rg4ebTPczWl+VWVxv1JAYpquEoOL9prRcZXh5K+fUA=
Subject key identifier:   C7:DA:FB:8D:07:1D:6A:1A:34:E5:34:F5:E5:37:2A:E4:66:60:F2:9B
Certificate issuer:       /CN=689A0904150851FE4D3E06A04569C2EE6143E398
Certificate serial:       7B423D497F21D52F960305106E62FC706EBCEB2B
Authority key identifier: 68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/3137302e3233392e3231342e302f32332d3233203d3e20323636333538.roa
Signing time:             Tue 28 Mar 2023 18:48:04 +0000
ROA not before:           Tue 28 Mar 2023 18:43:04 +0000
ROA not after:            Tue 26 Mar 2024 18:48:04 +0000
asID:                     266358
IP address blocks:        170.239.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:42:3d:49:7f:21:d5:2f:96:03:05:10:6e:62:fc:70:6e:bc:eb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=689A0904150851FE4D3E06A04569C2EE6143E398
        Validity
            Not Before: Mar 28 18:43:04 2023 GMT
            Not After : Mar 26 18:48:04 2024 GMT
        Subject: CN=C7DAFB8D071D6A1A34E534F5E5372AE46660F29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:95:25:68:b8:ee:cd:9a:af:1f:4f:77:1c:
                    8e:9e:e3:20:3c:78:0d:dd:a5:9d:60:bf:fc:e3:8c:
                    88:b9:7e:4a:9e:62:6c:14:0f:d0:ef:75:91:56:94:
                    b9:91:3f:49:af:43:c3:39:88:59:36:d8:c9:2d:d9:
                    7b:7d:71:3a:b7:f6:7f:59:18:58:92:48:8c:79:ee:
                    11:dd:22:e9:36:14:2f:0f:37:e5:70:34:63:68:c0:
                    6c:b2:9c:0c:a4:16:cb:19:bc:12:c1:1d:bc:7e:6e:
                    4f:0e:ea:bc:16:4c:5c:6b:b7:c3:8b:ca:fa:7f:cd:
                    73:ec:46:4b:7d:c6:e5:c8:80:77:2d:4f:f7:27:6a:
                    d0:88:83:ff:38:f2:1c:f9:e8:db:82:e6:48:40:c8:
                    e9:ed:85:78:e3:f3:25:6b:00:55:2d:07:f9:94:f7:
                    92:67:77:18:f9:fd:21:c0:fd:e9:06:a1:56:4f:9f:
                    82:53:02:c4:f1:2b:17:94:ae:49:8e:5a:bb:68:ad:
                    0b:33:8f:20:61:a9:ea:80:2a:fc:7f:79:d5:de:94:
                    26:f9:51:2f:57:a8:3b:0c:ae:14:ff:dc:ae:e0:19:
                    da:ba:7e:3e:32:23:52:3f:24:ad:86:f6:bd:14:32:
                    38:19:b9:24:ac:d6:02:49:1f:0d:6b:75:59:10:fd:
                    6b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DA:FB:8D:07:1D:6A:1A:34:E5:34:F5:E5:37:2A:E4:66:60:F2:9B
            X509v3 Authority Key Identifier:
                keyid:68:9A:09:04:15:08:51:FE:4D:3E:06:A0:45:69:C2:EE:61:43:E3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/689A0904150851FE4D3E06A04569C2EE6143E398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/689A0904150851FE4D3E06A04569C2EE6143E398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8gwGQmVsyGMqLXfNhACZnm1kpnTV7PHRUys6VDgF4t6/0/3137302e3233392e3231342e302f32332d3233203d3e20323636333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:98:9a:b4:37:0d:34:b3:89:9c:68:14:49:e1:f9:ad:44:e4:
         1a:79:9e:af:ad:3e:d3:02:8f:2b:7c:bf:8d:c6:10:67:80:05:
         3c:b9:e8:ef:01:54:c7:9c:8b:da:0f:27:71:9c:41:d1:d9:0c:
         76:26:ef:d0:33:b1:7d:d4:fc:18:c0:4e:c6:3e:51:fa:39:81:
         ce:85:7d:e3:9e:19:8f:37:5f:3c:dc:6e:ec:78:21:72:82:ef:
         cd:54:fb:68:da:7c:f0:7d:95:0a:d4:09:3e:a3:3b:fd:6d:49:
         b9:4f:36:91:cf:d6:e9:80:e1:d6:0a:d6:27:0f:41:77:b7:33:
         3b:cc:d3:f5:c2:5b:64:28:e4:ad:c7:52:a1:af:ee:a1:66:12:
         d1:73:98:68:14:8f:76:02:d1:c6:3d:0f:11:af:03:45:a5:81:
         3c:e4:b8:37:57:08:f0:57:8b:2b:b2:90:7c:6f:ad:65:27:01:
         98:51:e4:48:6b:dc:3c:16:7b:8b:fa:64:c1:9f:df:ba:65:20:
         94:21:43:17:62:db:29:4d:a8:09:4d:a1:a8:0d:69:08:9f:58:
         70:fa:2c:ed:dc:77:e0:f8:90:f4:20:6b:e4:89:5d:e5:22:1b:
         39:89:39:b1:4f:35:d1:7e:5c:48:2a:93:44:2e:d9:2e:3f:2a:
         88:cb:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org