Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/3137302e3233332e32302e302f32322d3234203d3e203631383537.roa
File:                     3137302e3233332e32302e302f32322d3234203d3e203631383537.roa (raw, json)
Hash identifier:          O4ocvb1WsVQePNCLsLGegPO6C4h/1lT2ySkNWaTTpsE=
Subject key identifier:   35:1A:EA:8C:5D:93:85:04:C9:4D:60:6E:00:68:6F:7D:5C:82:74:45
Certificate issuer:       /CN=41FB4D498A5F809C2A7531D26B5715142440352C
Certificate serial:       5B2F16D507A280346379525CE10327B88A53802A
Authority key identifier: 41:FB:4D:49:8A:5F:80:9C:2A:75:31:D2:6B:57:15:14:24:40:35:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41FB4D498A5F809C2A7531D26B5715142440352C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/3137302e3233332e32302e302f32322d3234203d3e203631383537.roa
Signing time:             Wed 17 Jan 2024 18:07:27 +0000
ROA not before:           Wed 17 Jan 2024 18:02:27 +0000
ROA not after:            Wed 15 Jan 2025 18:07:27 +0000
asID:                     61857
IP address blocks:        170.233.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2f:16:d5:07:a2:80:34:63:79:52:5c:e1:03:27:b8:8a:53:80:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41FB4D498A5F809C2A7531D26B5715142440352C
        Validity
            Not Before: Jan 17 18:02:27 2024 GMT
            Not After : Jan 15 18:07:27 2025 GMT
        Subject: CN=351AEA8C5D938504C94D606E00686F7D5C827445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:74:15:da:6e:c3:a3:4f:c2:c7:bf:f5:e5:bc:
                    f9:e7:c9:e1:f7:bf:48:f7:6f:29:a0:7c:86:9c:6b:
                    5a:ea:95:53:20:d8:45:bc:f9:06:aa:bb:ea:e9:7e:
                    a4:81:2a:66:f3:04:f6:2a:6b:ad:c3:42:90:e3:33:
                    c5:17:de:55:8e:c0:38:fb:3c:c4:d8:83:9c:1a:5a:
                    8a:29:70:70:03:ab:3d:43:43:25:73:8d:40:83:24:
                    bb:1c:41:9f:78:3c:a2:f5:09:c1:a3:5d:7e:84:0d:
                    18:15:f6:61:7b:a5:5c:39:f6:6f:33:1c:11:d5:e2:
                    3e:e5:ac:ef:2f:de:cf:e1:17:58:6a:10:ed:17:b4:
                    d5:00:2a:eb:73:69:77:d0:ee:22:f9:3f:1b:b1:f2:
                    ec:fd:8c:f3:fb:0c:eb:6f:7c:55:df:3f:fe:7c:30:
                    9c:36:4a:48:37:c2:b8:a3:84:30:bf:83:c2:84:e6:
                    79:eb:b7:21:6c:68:00:b1:87:72:48:6e:fd:ac:06:
                    39:b7:c3:ea:91:76:62:05:0e:f7:7e:75:45:04:5f:
                    10:4a:e5:bd:2d:73:cc:6c:81:9f:95:66:d3:3e:cc:
                    b9:ac:01:01:be:48:94:4b:1a:69:79:9b:77:c9:d5:
                    7c:04:3a:2d:ab:51:71:fa:a7:f9:a9:b4:73:e1:f6:
                    83:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1A:EA:8C:5D:93:85:04:C9:4D:60:6E:00:68:6F:7D:5C:82:74:45
            X509v3 Authority Key Identifier:
                keyid:41:FB:4D:49:8A:5F:80:9C:2A:75:31:D2:6B:57:15:14:24:40:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/41FB4D498A5F809C2A7531D26B5715142440352C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41FB4D498A5F809C2A7531D26B5715142440352C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/3137302e3233332e32302e302f32322d3234203d3e203631383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:4f:4c:0c:34:62:1b:8a:3f:f0:ec:7c:7a:b7:81:19:df:75:
         79:00:58:22:17:6c:0c:75:9e:87:47:9c:fe:44:08:1e:b4:17:
         ca:00:0d:2a:e5:40:21:94:87:74:71:78:94:4e:f0:03:67:a6:
         71:41:79:43:be:64:da:fd:c3:dc:f8:26:ef:4d:cf:00:b7:d0:
         db:2f:96:7a:c2:cb:92:23:45:61:d8:3d:64:55:0a:6c:29:f6:
         a7:e7:86:b9:68:8f:fe:4c:a4:87:8f:55:39:17:a0:85:04:28:
         32:47:a3:78:f9:a6:9d:82:7c:40:bf:74:ea:3d:ea:5c:6b:ff:
         24:6f:6b:7f:80:a7:ed:38:46:a9:82:c3:5a:e3:5f:86:75:69:
         d3:91:1a:8a:0d:44:61:3d:98:99:19:34:52:66:32:de:15:dd:
         15:fa:ce:ff:9c:dd:13:13:ed:1f:6a:96:92:a1:c8:92:d5:32:
         62:c9:c1:42:91:f8:7a:8e:0f:e5:56:05:d2:0e:51:a5:ce:cf:
         23:7e:59:d5:36:25:a2:c5:19:72:23:30:53:37:71:b6:a0:53:
         99:b5:04:a6:03:d7:b5:8a:80:5d:71:70:52:3a:15:eb:99:bb:
         b7:fe:81:b4:0c:63:40:3d:92:34:f0:1a:92:8e:54:77:d5:5a:
         40:4e:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org