Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1/3137302e3234342e3232392e302f32342d3234203d3e20323636353233.roa
File:                     3137302e3234342e3232392e302f32342d3234203d3e20323636353233.roa (raw, json)
Hash identifier:          FfR5XpK4HX45DIj3re7zaj0ED3czwp6pwy+8oZZ2xyk=
Subject key identifier:   52:80:D9:26:CE:29:A6:D1:10:DB:D6:96:C8:AD:8D:86:21:A1:5D:EF
Certificate issuer:       /CN=233E5651813B32F6D93026D88773CE8BDD6E8E0F
Certificate serial:       71B22153C5ECDB225DE8F5F0A5B76417E0BA6BCD
Authority key identifier: 23:3E:56:51:81:3B:32:F6:D9:30:26:D8:87:73:CE:8B:DD:6E:8E:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/233E5651813B32F6D93026D88773CE8BDD6E8E0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1/3137302e3234342e3232392e302f32342d3234203d3e20323636353233.roa
Signing time:             Fri 12 Apr 2024 13:10:23 +0000
ROA not before:           Fri 12 Apr 2024 13:05:23 +0000
ROA not after:            Fri 11 Apr 2025 13:10:23 +0000
asID:                     266523
IP address blocks:        170.244.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b2:21:53:c5:ec:db:22:5d:e8:f5:f0:a5:b7:64:17:e0:ba:6b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233E5651813B32F6D93026D88773CE8BDD6E8E0F
        Validity
            Not Before: Apr 12 13:05:23 2024 GMT
            Not After : Apr 11 13:10:23 2025 GMT
        Subject: CN=5280D926CE29A6D110DBD696C8AD8D8621A15DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:ff:e0:99:e4:a8:18:2f:dc:e1:23:41:0d:
                    91:1e:e9:d4:94:2f:8a:40:c1:ad:06:9f:dc:c3:c4:
                    1a:c9:2e:91:ca:5c:9c:40:09:48:d7:e2:5b:f4:8e:
                    49:03:31:57:68:2a:17:11:1f:84:31:6a:cf:56:23:
                    83:3b:53:e9:ba:8d:87:00:77:d8:49:98:2a:18:84:
                    61:76:70:f3:10:83:34:11:81:cd:8f:dc:b4:4f:ec:
                    7e:48:76:e7:fc:31:2b:9f:00:a0:91:d3:ab:28:90:
                    7a:76:4e:4b:db:4c:97:05:13:08:db:c0:1d:64:92:
                    a7:74:49:45:29:d3:39:5f:54:c5:5a:21:e5:bc:e1:
                    08:15:3f:eb:e9:c4:4e:f2:fd:49:f1:ce:98:b7:2d:
                    3e:c6:79:4b:b0:5e:6c:3b:d0:40:41:23:73:46:b7:
                    0e:db:a3:8c:81:9f:82:25:7c:9b:d3:26:17:7d:18:
                    78:0c:24:de:38:d4:88:c3:3d:61:0e:e1:4c:3b:a7:
                    e9:fa:93:ce:2d:1c:34:1c:7a:77:66:c4:51:e5:e2:
                    25:6b:44:ed:4f:cf:6d:79:66:7f:70:3c:c2:cb:b4:
                    94:81:ef:e3:d3:c0:5d:00:99:5e:25:01:a7:a9:a0:
                    4a:44:96:90:27:29:ec:04:3a:71:76:e5:26:53:2a:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:80:D9:26:CE:29:A6:D1:10:DB:D6:96:C8:AD:8D:86:21:A1:5D:EF
            X509v3 Authority Key Identifier:
                keyid:23:3E:56:51:81:3B:32:F6:D9:30:26:D8:87:73:CE:8B:DD:6E:8E:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1/233E5651813B32F6D93026D88773CE8BDD6E8E0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/233E5651813B32F6D93026D88773CE8BDD6E8E0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/1/3137302e3234342e3232392e302f32342d3234203d3e20323636353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:91:75:45:f1:f1:48:3b:4b:95:16:74:97:0a:4c:b3:28:df:
         26:fe:9e:66:bd:21:56:48:f3:94:45:83:6c:75:00:8b:d7:67:
         ba:7e:5d:88:e0:d7:0c:fd:91:2c:22:5e:06:67:36:ca:4c:87:
         8e:aa:2c:7a:13:4d:0e:e1:ed:da:8e:bb:22:1b:15:8f:81:5d:
         82:50:ba:ea:fa:db:00:5a:24:5d:aa:df:17:ef:c7:80:e8:21:
         25:17:6b:19:63:d6:9c:41:ba:25:8b:d1:cc:5b:fe:92:0a:72:
         7d:9e:78:44:1e:0b:15:de:7b:4b:21:42:e3:f1:71:d7:7d:0a:
         bd:0d:45:7b:c5:60:a2:96:a8:01:3a:77:5c:61:69:32:5b:78:
         22:c1:7e:3a:14:44:b0:09:28:cc:11:d7:3e:4c:22:7b:33:ea:
         16:ae:7b:d4:31:3b:bb:e1:0f:c1:0a:d4:89:84:64:20:05:23:
         31:5f:ee:5e:8c:48:e2:75:d5:87:1a:e4:3f:8f:d8:b7:4f:5c:
         2c:61:57:86:33:78:d2:46:0c:fa:82:28:d8:13:d6:ee:f6:08:
         7e:be:27:c2:fc:50:c8:cc:d3:f3:2e:d9:8c:ac:cb:bb:3d:8e:
         62:29:b6:e4:d7:8c:64:45:b4:b5:c1:fe:ec:5e:56:9d:48:69:
         b9:0f:e3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org