Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1/3137302e3234342e3232382e302f32342d3234203d3e20323636353233.roa
File:                     3137302e3234342e3232382e302f32342d3234203d3e20323636353233.roa (raw, json)
Hash identifier:          7NmGDJbWlEoV+8PPf5B9M1ByiiDZ0Frc1WBS0eN83Rc=
Subject key identifier:   3B:59:49:90:0C:05:43:D2:D4:3F:A5:00:E1:BD:3D:72:A6:5E:E6:FA
Certificate issuer:       /CN=233E5651813B32F6D93026D88773CE8BDD6E8E0F
Certificate serial:       68AEC6A2C86009258F79F2B10E2226D4CAABA0AC
Authority key identifier: 23:3E:56:51:81:3B:32:F6:D9:30:26:D8:87:73:CE:8B:DD:6E:8E:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/233E5651813B32F6D93026D88773CE8BDD6E8E0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1/3137302e3234342e3232382e302f32342d3234203d3e20323636353233.roa
Signing time:             Fri 12 Apr 2024 13:10:10 +0000
ROA not before:           Fri 12 Apr 2024 13:05:10 +0000
ROA not after:            Fri 11 Apr 2025 13:10:10 +0000
asID:                     266523
IP address blocks:        170.244.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ae:c6:a2:c8:60:09:25:8f:79:f2:b1:0e:22:26:d4:ca:ab:a0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233E5651813B32F6D93026D88773CE8BDD6E8E0F
        Validity
            Not Before: Apr 12 13:05:10 2024 GMT
            Not After : Apr 11 13:10:10 2025 GMT
        Subject: CN=3B5949900C0543D2D43FA500E1BD3D72A65EE6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:6c:dd:f4:7f:ca:c9:42:34:9c:19:03:c6:
                    2d:87:cc:d1:77:c7:dc:e5:bc:6d:67:10:e9:e1:c7:
                    a5:fc:0f:3c:76:fa:4f:e2:00:30:4a:2b:30:e8:db:
                    e1:85:a8:98:55:c8:82:3f:26:47:e0:51:69:62:33:
                    af:bc:9c:1f:44:f0:37:a6:76:3a:41:95:e0:b6:5e:
                    f6:56:56:31:8e:06:d8:f5:08:be:ec:c5:cc:75:6c:
                    7e:2c:2b:17:5f:db:bb:9f:db:7f:59:e3:2c:1a:d2:
                    df:23:62:dd:26:d3:54:44:ca:61:a7:a8:49:05:5b:
                    53:38:8b:ae:fb:4e:e8:3d:6d:7d:19:78:5d:73:ee:
                    65:ac:30:19:4a:ae:12:74:e9:85:64:ce:e7:b5:f5:
                    4a:ea:73:1e:bd:8e:ff:80:2e:b2:dd:5d:ec:ba:30:
                    fb:6c:67:5d:60:f5:95:49:1d:26:ef:bd:0c:86:21:
                    5b:59:6e:02:8a:73:9c:4b:8f:2f:b7:2a:4f:6f:63:
                    75:9b:41:1a:7e:9e:64:16:26:1b:50:fa:5e:cd:97:
                    b1:11:ef:9e:4b:82:73:ee:6a:73:22:53:4a:b8:13:
                    a8:cb:e4:6c:72:ff:6b:6a:ee:65:f6:a1:37:32:92:
                    75:f8:35:ab:42:69:06:1a:73:01:bb:f4:49:4b:04:
                    77:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:59:49:90:0C:05:43:D2:D4:3F:A5:00:E1:BD:3D:72:A6:5E:E6:FA
            X509v3 Authority Key Identifier:
                keyid:23:3E:56:51:81:3B:32:F6:D9:30:26:D8:87:73:CE:8B:DD:6E:8E:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1/233E5651813B32F6D93026D88773CE8BDD6E8E0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/233E5651813B32F6D93026D88773CE8BDD6E8E0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1/3137302e3234342e3232382e302f32342d3234203d3e20323636353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:d1:e8:2b:55:95:2d:28:44:04:ac:20:44:d0:81:2a:55:
         f9:fd:0e:7d:a9:01:12:6f:da:1f:51:a6:26:ce:4e:3b:7e:a4:
         b2:07:85:73:35:9d:be:d7:25:f8:2a:7f:5a:a2:42:0a:46:75:
         5a:50:05:23:f2:16:30:fc:bd:7b:df:63:02:a9:e5:76:9c:60:
         95:e1:8b:49:fe:28:8d:99:d7:d4:8c:74:f0:35:9c:86:85:96:
         8d:e3:ac:f3:e2:ba:ba:04:bd:55:17:e6:6a:ba:09:ae:cf:75:
         9e:a9:90:23:2e:c5:2f:89:ca:f2:f6:74:69:d5:07:fe:aa:a0:
         42:7f:26:2e:63:05:61:03:fb:33:dc:d5:0c:f4:9f:54:a2:b0:
         59:08:e0:f3:e9:f6:6c:f6:95:be:e2:a4:11:4c:d9:81:e6:0d:
         7a:e5:77:24:59:48:e2:5d:61:cf:35:a4:84:26:1c:ae:82:39:
         f2:0b:37:e8:fe:5b:59:60:ba:d7:9a:24:f5:11:87:d0:09:19:
         20:d3:ca:f5:bb:0e:ef:c9:f9:7a:47:3f:0d:7a:b4:bf:d3:26:
         25:34:94:bb:a7:08:9b:90:8c:c1:08:f2:b7:a4:57:86:c4:8e:
         e8:05:85:01:45:f9:20:c9:97:e1:ef:e8:e1:dc:ba:c5:9d:c3:
         25:32:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org