Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231382e302f32332d3233203d3e20323635313431.roa
File:                     3137302e302e3231382e302f32332d3233203d3e20323635313431.roa (raw, json)
Hash identifier:          iEI2hq7avai9JD+D1FMGaLZrKrSH1WqBVl7fuQYY/ro=
Subject key identifier:   AF:96:E0:E4:46:C4:94:76:92:A9:CD:99:D9:17:97:4E:99:24:CE:C3
Certificate issuer:       /CN=C50C0F5F7C229DF4C9B9D3F1E6485770288CA544
Certificate serial:       6AF6FFCCB4CF1AC31054E4E6BB5DA0C74C4703D1
Authority key identifier: C5:0C:0F:5F:7C:22:9D:F4:C9:B9:D3:F1:E6:48:57:70:28:8C:A5:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C50C0F5F7C229DF4C9B9D3F1E6485770288CA544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231382e302f32332d3233203d3e20323635313431.roa
Signing time:             Thu 04 Jan 2024 16:47:23 +0000
ROA not before:           Thu 04 Jan 2024 16:42:23 +0000
ROA not after:            Thu 02 Jan 2025 16:47:23 +0000
asID:                     265141
IP address blocks:        170.0.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f6:ff:cc:b4:cf:1a:c3:10:54:e4:e6:bb:5d:a0:c7:4c:47:03:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C50C0F5F7C229DF4C9B9D3F1E6485770288CA544
        Validity
            Not Before: Jan  4 16:42:23 2024 GMT
            Not After : Jan  2 16:47:23 2025 GMT
        Subject: CN=AF96E0E446C4947692A9CD99D917974E9924CEC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:d0:34:44:69:33:39:1b:c4:17:71:0f:51:
                    78:53:f7:a8:a9:e9:a1:21:a1:c8:03:c5:61:bb:39:
                    ad:70:f0:f7:72:cf:2e:ac:fa:71:e1:86:ba:de:22:
                    1d:f6:19:a9:ad:f2:19:00:f8:cd:24:f2:12:00:ee:
                    64:b9:f0:27:88:b3:ea:f4:1d:d2:fa:43:42:98:d6:
                    d1:a1:43:b5:2d:45:a1:e4:24:b9:4d:ec:32:4a:95:
                    a7:55:c3:6a:9d:7d:8a:c0:34:20:e9:42:46:c2:96:
                    f4:96:e4:c7:f4:93:f0:c6:7d:59:45:16:54:b5:98:
                    04:9d:fb:bf:08:18:0f:88:e5:fb:70:11:72:70:91:
                    65:64:65:dd:c7:db:58:af:83:7a:0c:62:51:6a:a5:
                    e8:50:e3:f9:63:67:22:fe:76:3c:02:cb:dc:cb:3d:
                    04:17:65:e7:bd:3c:ce:2d:8e:f6:1f:42:07:10:e7:
                    7d:21:1e:3c:2d:ac:a4:d0:67:8d:00:ea:fb:90:6c:
                    c6:66:ec:3b:f0:36:9a:16:24:7d:b8:e0:b9:a7:cc:
                    03:50:85:2c:95:b6:75:7d:7a:b3:fd:bc:8b:9a:fa:
                    54:79:6e:36:0e:74:30:8d:23:4f:e0:02:e4:1f:a8:
                    aa:46:0d:27:c3:1f:ec:30:29:b4:ff:75:04:16:53:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:96:E0:E4:46:C4:94:76:92:A9:CD:99:D9:17:97:4E:99:24:CE:C3
            X509v3 Authority Key Identifier:
                keyid:C5:0C:0F:5F:7C:22:9D:F4:C9:B9:D3:F1:E6:48:57:70:28:8C:A5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/C50C0F5F7C229DF4C9B9D3F1E6485770288CA544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C50C0F5F7C229DF4C9B9D3F1E6485770288CA544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231382e302f32332d3233203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:85:71:13:b0:4c:af:8d:0a:da:46:64:a4:52:41:ba:4a:be:
         82:8b:f8:21:a3:03:9e:61:51:17:aa:85:8b:eb:9b:39:35:e8:
         91:df:bd:9e:e9:f1:09:64:98:4a:7b:ba:4d:8e:08:ca:04:f7:
         33:cf:7a:85:40:30:61:b1:24:50:a7:c2:e3:8f:fa:c1:eb:76:
         fa:5f:11:19:3a:04:f0:5c:b3:76:b0:ce:8c:64:86:e5:9c:75:
         05:4d:94:a8:d1:22:0e:f9:de:51:09:be:d5:37:8e:53:1a:af:
         74:33:0a:1c:78:3c:cc:b5:62:19:de:2d:43:de:5d:ce:ec:8d:
         a6:ea:3d:98:10:34:16:97:b5:2f:37:3a:01:a5:37:75:47:ae:
         a5:9d:3d:50:72:69:93:52:f5:17:04:a4:db:25:27:27:5e:d9:
         24:2a:5b:cf:29:f1:2d:90:b2:95:64:60:18:5e:c8:2b:17:3f:
         91:24:e0:85:de:b7:8e:31:91:72:75:d3:50:9a:ce:16:f3:a7:
         c9:53:68:f2:00:d8:da:19:0d:f4:e2:fc:ae:c5:63:8b:e2:80:
         85:3b:48:6e:cd:0b:71:f6:e3:1b:ae:eb:1e:7e:55:a6:cf:70:
         e1:c1:92:b3:af:c4:9c:2e:8d:1a:f2:87:79:7b:2d:44:02:d1:
         dc:59:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org