Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2/3137302e3233332e3234302e302f32322d3234203d3e20323731323933.roa
File:                     3137302e3233332e3234302e302f32322d3234203d3e20323731323933.roa (raw, json)
Hash identifier:          an6Xql2IlSIuphPWIesxQGrrFn/3aJ1xiR2Oa/zrkxQ=
Subject key identifier:   69:E2:70:49:22:AA:3F:73:D1:08:40:9B:6C:E9:D0:2E:8A:15:E8:79
Certificate issuer:       /CN=1BD3EE40DABA0B97635B081F90825C8429926014
Certificate serial:       703CF546687A4CF519016FDCEA785AF92898775C
Authority key identifier: 1B:D3:EE:40:DA:BA:0B:97:63:5B:08:1F:90:82:5C:84:29:92:60:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD3EE40DABA0B97635B081F90825C8429926014.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2/3137302e3233332e3234302e302f32322d3234203d3e20323731323933.roa
Signing time:             Fri 05 Apr 2024 04:19:19 +0000
ROA not before:           Fri 05 Apr 2024 04:14:19 +0000
ROA not after:            Fri 04 Apr 2025 04:19:19 +0000
asID:                     271293
IP address blocks:        170.233.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3c:f5:46:68:7a:4c:f5:19:01:6f:dc:ea:78:5a:f9:28:98:77:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD3EE40DABA0B97635B081F90825C8429926014
        Validity
            Not Before: Apr  5 04:14:19 2024 GMT
            Not After : Apr  4 04:19:19 2025 GMT
        Subject: CN=69E2704922AA3F73D108409B6CE9D02E8A15E879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:fe:c1:b8:19:28:ac:d4:c3:b3:aa:cf:87:
                    e9:b8:11:aa:d5:1e:37:c5:0d:73:16:88:2e:5b:14:
                    7a:53:c8:78:45:c7:0a:c3:c8:79:25:41:11:97:05:
                    69:13:27:60:92:ce:c6:c2:2f:6d:8d:11:eb:fc:a2:
                    06:3d:4e:b5:7e:13:8f:99:61:12:bc:9c:07:91:e2:
                    4d:f8:89:68:8a:18:81:15:33:4a:5e:6b:3a:b3:f1:
                    dc:00:8d:93:08:29:62:64:85:0a:c8:b4:ab:e4:47:
                    53:ea:54:84:6c:4d:02:95:da:4b:f5:42:ee:5b:63:
                    79:47:cf:af:34:75:d5:ec:a9:e9:2b:06:0b:3b:81:
                    82:31:6a:1a:b3:5f:1d:30:f1:67:95:41:d8:6f:22:
                    d2:db:ad:cc:2f:f2:e1:62:80:3b:c2:0b:7b:7d:61:
                    6c:92:3e:95:0c:2a:fd:19:d2:09:4e:e4:3d:73:3a:
                    de:ba:90:d4:4b:7f:fa:6a:a6:22:cc:35:ca:b1:db:
                    76:b1:76:db:e8:25:d4:41:34:45:1e:fe:f6:cf:0f:
                    08:30:06:c0:8a:54:f9:90:4f:ce:5f:a0:f0:14:96:
                    69:43:16:3d:ad:fa:b1:6c:5b:72:3d:d6:29:8e:7c:
                    28:77:ee:d9:a9:37:d8:61:52:03:84:34:53:38:5b:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E2:70:49:22:AA:3F:73:D1:08:40:9B:6C:E9:D0:2E:8A:15:E8:79
            X509v3 Authority Key Identifier:
                keyid:1B:D3:EE:40:DA:BA:0B:97:63:5B:08:1F:90:82:5C:84:29:92:60:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2/1BD3EE40DABA0B97635B081F90825C8429926014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD3EE40DABA0B97635B081F90825C8429926014.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2/3137302e3233332e3234302e302f32322d3234203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:29:ac:49:27:c5:77:fc:ec:53:07:5a:c6:0a:8b:2a:d4:e7:
         dd:eb:74:35:75:81:99:7c:dc:60:a3:62:47:75:c4:d3:bc:f1:
         ad:ee:d1:1d:34:c8:7e:a0:3d:49:42:f6:0d:d6:e0:3f:ae:f0:
         fa:db:db:71:8f:b7:f0:82:11:4b:cc:5d:7c:76:e4:50:59:ad:
         97:e4:3f:fb:84:70:c7:01:dc:66:f8:e0:b4:25:f7:00:3e:24:
         ba:cb:f7:22:6d:10:b5:1d:bc:30:de:00:5a:7a:aa:58:93:0a:
         bc:2c:ff:ec:ed:ac:d9:2a:44:94:3e:46:f8:1a:b8:0d:e3:8b:
         14:87:54:9b:b5:28:ca:1b:c4:c5:94:31:43:84:f6:51:6a:64:
         b7:1a:92:8c:58:c1:15:69:ea:76:ea:08:65:3f:bb:2a:d4:b1:
         07:1a:d6:05:f7:13:a1:78:82:c3:35:6a:96:d9:cb:ab:fb:73:
         e9:a9:ca:49:8e:8f:35:75:ce:38:fc:0c:60:ac:1c:ab:c8:db:
         78:68:ac:8b:a3:45:96:55:fc:e0:4a:16:f3:a7:86:c3:23:03:
         43:69:fc:d4:b2:ef:8b:d5:f5:02:d6:6d:93:28:1c:62:c0:b9:
         63:33:94:c8:bb:73:38:c3:90:ac:0f:44:44:28:54:0c:52:ff:
         53:00:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org