Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3137302e3234342e3230302e302f32332d3234203d3e20323636303133.roa
File:                     3137302e3234342e3230302e302f32332d3234203d3e20323636303133.roa (raw, json)
Hash identifier:          VahuK7a9HEiqxlFtUrMXeYP9eCDnp87T9PS7SKyyBBA=
Subject key identifier:   9B:FB:7E:C3:52:55:E2:6C:A7:92:E2:D2:FF:F6:B7:CF:7D:85:99:7C
Certificate issuer:       /CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
Certificate serial:       1CED21C0CE3E65452DD18A1FBF948478E20D5C4F
Authority key identifier: 3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3137302e3234342e3230302e302f32332d3234203d3e20323636303133.roa
Signing time:             Tue 27 Jun 2023 15:30:30 +0000
ROA not before:           Tue 27 Jun 2023 15:25:30 +0000
ROA not after:            Tue 25 Jun 2024 15:30:30 +0000
asID:                     266013
IP address blocks:        170.244.200.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ed:21:c0:ce:3e:65:45:2d:d1:8a:1f:bf:94:84:78:e2:0d:5c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B
        Validity
            Not Before: Jun 27 15:25:30 2023 GMT
            Not After : Jun 25 15:30:30 2024 GMT
        Subject: CN=9BFB7EC35255E26CA792E2D2FFF6B7CF7D85997C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:b8:09:99:28:d6:95:09:be:33:ae:7e:b5:
                    2b:99:e9:c0:28:e8:2d:d3:72:bc:c7:02:d4:7b:7c:
                    ef:f9:2c:ef:80:b3:31:e9:d4:c6:61:4a:de:75:51:
                    91:b3:6e:a5:d1:83:25:74:2f:e9:a0:f3:d7:66:49:
                    fd:9a:8c:e3:38:fe:af:37:df:69:5f:ab:2f:8e:b9:
                    62:74:00:2e:13:bd:c2:2f:2a:5d:9f:08:73:36:c9:
                    3c:6f:4f:de:7a:c8:0b:f1:18:fd:4a:65:29:e9:ea:
                    21:79:da:6d:65:ef:47:ae:b8:be:5f:78:ab:f2:0a:
                    93:77:f7:6e:1d:a3:f2:28:04:cf:9b:f8:99:ba:ff:
                    48:b7:ce:7e:27:5c:c3:88:ef:a6:88:81:c9:b6:15:
                    17:a3:1a:61:e8:9b:5c:dd:f4:7d:79:7d:40:54:1e:
                    5a:5d:56:14:a8:b9:15:e1:cd:eb:56:b3:36:11:dc:
                    07:47:8e:fe:31:91:ac:55:e7:37:55:1e:61:52:d0:
                    14:d7:a7:ec:d9:f2:ff:66:4b:df:ec:c1:6b:44:9a:
                    f6:17:9d:60:e7:da:21:dc:ba:34:7f:ea:6f:13:f3:
                    29:e3:fd:21:e2:49:cc:f4:83:e1:73:8b:43:35:d7:
                    8e:69:f1:b9:a1:4f:4c:fc:32:d0:b5:44:3b:bf:ee:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FB:7E:C3:52:55:E2:6C:A7:92:E2:D2:FF:F6:B7:CF:7D:85:99:7C
            X509v3 Authority Key Identifier:
                keyid:3E:39:1C:DC:3C:C1:BD:EE:C2:74:36:2D:8C:82:DA:54:38:3D:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E391CDC3CC1BDEEC274362D8C82DA54383DDA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFKEnx9WWdpy6bfnULB87wKJLDYsxmQK5JRhfahZqNWM/0/3137302e3234342e3230302e302f32332d3234203d3e20323636303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:6a:99:d9:af:26:cf:83:9b:39:f2:7b:50:a8:67:4c:a1:ed:
         dd:a3:17:32:7d:fe:58:0d:e2:8f:5c:ea:be:90:1e:93:b1:85:
         56:55:ad:e0:fd:c2:13:e1:39:21:00:eb:66:ed:f5:9d:e0:04:
         62:44:62:eb:d7:7d:ce:8f:7e:f7:1f:37:e0:28:3a:27:c8:60:
         e6:39:cc:9e:b0:51:af:28:61:b5:29:d9:48:16:e8:92:8e:0b:
         24:22:5f:52:e6:ae:53:0d:50:c2:90:92:e9:8d:81:8e:6e:7a:
         3b:91:e4:f4:57:96:b1:6d:fa:4b:28:2a:11:f1:82:32:8d:da:
         de:fd:31:91:77:a1:4d:b8:23:09:28:3c:ea:65:e1:ef:10:6e:
         87:e2:99:02:a0:c7:af:6a:c9:a7:11:bd:30:48:e5:b2:0c:d7:
         bd:d3:98:0c:99:42:b9:8a:56:13:ef:4c:eb:2a:26:aa:36:ed:
         a4:29:a5:67:d8:4c:54:53:a8:64:ec:4b:fa:35:b6:53:ac:d4:
         95:22:94:77:f6:84:28:70:fa:00:a0:be:45:96:1d:de:54:fb:
         dd:5f:ab:78:02:d3:32:7e:53:30:59:0a:2c:7d:42:58:59:bf:
         2f:51:ab:07:73:ae:ad:41:2d:e8:b2:15:88:73:83:f8:fe:f6:
         5a:63:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org