Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231382e302f32342d3234203d3e20323635313431.roa
File:                     3137302e302e3231382e302f32342d3234203d3e20323635313431.roa (raw, json)
Hash identifier:          Zu2nDP2myaHrm7KT52OCLeORTMCmk84goOxb5R8lMy0=
Subject key identifier:   CC:06:5B:93:68:EC:05:47:8C:B1:FA:D7:E8:7E:81:F4:55:C7:F2:67
Certificate issuer:       /CN=62B37CCC125D55890B860F9A69FABC5C13F4BC12
Certificate serial:       24AA24C1F0047B6C12815A033CA14A8726500DE6
Authority key identifier: 62:B3:7C:CC:12:5D:55:89:0B:86:0F:9A:69:FA:BC:5C:13:F4:BC:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62B37CCC125D55890B860F9A69FABC5C13F4BC12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231382e302f32342d3234203d3e20323635313431.roa
Signing time:             Sat 04 Feb 2023 23:13:12 +0000
ROA not before:           Sat 04 Feb 2023 23:08:12 +0000
ROA not after:            Sat 03 Feb 2024 23:13:12 +0000
asID:                     265141
IP address blocks:        170.0.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:aa:24:c1:f0:04:7b:6c:12:81:5a:03:3c:a1:4a:87:26:50:0d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62B37CCC125D55890B860F9A69FABC5C13F4BC12
        Validity
            Not Before: Feb  4 23:08:12 2023 GMT
            Not After : Feb  3 23:13:12 2024 GMT
        Subject: CN=CC065B9368EC05478CB1FAD7E87E81F455C7F267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:8f:a1:bc:61:56:2c:0c:0c:6d:1c:66:23:
                    7a:7f:f1:c1:0f:87:ee:f7:3a:6f:30:c9:c0:e8:5a:
                    e9:0c:89:89:c3:96:b0:e5:d4:71:73:ac:87:03:88:
                    31:ec:a2:bc:ee:dd:84:12:6c:1e:01:e1:9e:50:17:
                    22:c7:ca:ad:a6:e0:44:b1:0c:5b:5e:70:06:10:15:
                    09:31:20:bf:29:e9:39:d7:81:6d:3b:c9:ba:f1:35:
                    75:9a:b6:84:ea:4a:49:cd:3e:9f:1a:c3:b1:f9:ce:
                    ff:1e:11:32:ff:86:cd:af:41:38:6f:ce:aa:5c:6a:
                    9f:14:d7:ec:7d:23:ba:71:ba:c2:25:35:dc:c1:7d:
                    e9:cd:14:46:11:38:16:a9:de:9f:68:0b:23:d4:be:
                    69:92:8c:99:59:e7:64:15:87:d5:97:36:70:25:9f:
                    03:51:b0:91:32:2c:ac:92:3f:85:10:9a:2b:8c:26:
                    8f:3e:83:51:e1:64:b5:0c:4d:8e:05:d9:24:f4:91:
                    5d:12:35:79:4e:20:95:37:3f:dd:24:0f:c2:7a:e1:
                    88:f7:b2:41:27:91:e1:9d:e4:0c:c9:65:ee:2e:9f:
                    86:3c:9d:a0:a9:3e:4c:61:a1:74:67:cd:48:18:0c:
                    fa:37:c8:87:fd:94:28:d4:eb:38:9b:6a:41:b7:34:
                    ab:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:06:5B:93:68:EC:05:47:8C:B1:FA:D7:E8:7E:81:F4:55:C7:F2:67
            X509v3 Authority Key Identifier:
                keyid:62:B3:7C:CC:12:5D:55:89:0B:86:0F:9A:69:FA:BC:5C:13:F4:BC:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/62B37CCC125D55890B860F9A69FABC5C13F4BC12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62B37CCC125D55890B860F9A69FABC5C13F4BC12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231382e302f32342d3234203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:7b:5e:48:69:88:29:ca:b8:ce:b4:34:58:1e:57:ee:00:44:
         7e:4c:69:2d:ae:7d:60:94:77:d7:1c:bb:46:df:62:9b:b1:01:
         9f:7e:20:c1:e5:5f:d8:0a:a0:72:e8:3c:5d:8f:6a:25:64:e4:
         87:8a:93:03:f4:e1:13:25:49:c7:2d:ec:eb:2a:ef:29:dc:32:
         fb:6a:17:3d:eb:08:db:64:ab:7b:f3:c5:1d:9a:36:f5:87:17:
         c6:6c:a5:4a:48:ad:2a:a0:95:7b:8c:4f:2c:c7:45:d1:d9:9a:
         a4:07:cd:d1:af:40:72:4d:fa:27:e4:7a:7c:07:e2:6f:22:aa:
         0f:69:39:e7:a3:c5:d7:43:ad:d3:fb:3e:08:e5:bd:61:5b:cf:
         d6:c9:ad:65:d6:63:63:2a:b3:3e:e6:4b:ba:11:d2:3d:5b:c6:
         54:89:8d:b1:e2:6b:0d:b7:7f:6e:ad:7d:10:e2:d8:10:a9:3d:
         70:8a:0f:d8:4b:dd:be:e7:1f:0c:55:fb:7b:ec:8a:53:c8:5c:
         1d:33:34:94:4c:05:a6:5b:c0:49:c5:81:34:64:e0:5a:f4:ee:
         3e:62:07:09:95:98:cf:03:89:84:77:a3:43:c4:83:26:0a:5f:
         0d:54:47:57:11:5e:66:41:ad:e6:0d:52:90:36:c4:01:2a:d3:
         d9:1e:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org