Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137302e3233392e3136302e302f32322d3234203d3e20323633343135.roa
File:                     3137302e3233392e3136302e302f32322d3234203d3e20323633343135.roa (raw, json)
Hash identifier:          06BQb7U4w9NR+GBVuFBEnVF7bIVJwMsJ4ZT001XwT8s=
Subject key identifier:   18:90:61:27:A2:B5:68:BB:72:7A:18:BF:60:24:F3:C9:AE:55:2B:D5
Certificate issuer:       /CN=265FF6128F4192BD65ACCC1DF4F204B9FE5DEE52
Certificate serial:       198636B6EA443E0EE6C47CC991899B21391D4E3A
Authority key identifier: 26:5F:F6:12:8F:41:92:BD:65:AC:CC:1D:F4:F2:04:B9:FE:5D:EE:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/265FF6128F4192BD65ACCC1DF4F204B9FE5DEE52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137302e3233392e3136302e302f32322d3234203d3e20323633343135.roa
Signing time:             Thu 07 Mar 2024 19:08:28 +0000
ROA not before:           Thu 07 Mar 2024 19:03:28 +0000
ROA not after:            Thu 06 Mar 2025 19:08:28 +0000
asID:                     263415
IP address blocks:        170.239.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:86:36:b6:ea:44:3e:0e:e6:c4:7c:c9:91:89:9b:21:39:1d:4e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265FF6128F4192BD65ACCC1DF4F204B9FE5DEE52
        Validity
            Not Before: Mar  7 19:03:28 2024 GMT
            Not After : Mar  6 19:08:28 2025 GMT
        Subject: CN=18906127A2B568BB727A18BF6024F3C9AE552BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:19:8e:b7:37:06:6e:6e:e1:26:53:03:09:
                    d0:5e:f6:68:46:bc:b3:20:08:3d:65:55:5c:46:07:
                    3d:bf:ae:0c:0b:72:3d:69:85:92:b2:2b:19:fd:7d:
                    ce:2b:57:e8:f8:33:d0:ff:64:b1:c7:ba:62:36:5d:
                    c9:fd:fb:c8:64:8d:ee:19:42:3c:70:aa:26:08:30:
                    1f:2d:b9:9a:f3:e1:6b:8a:93:be:3e:be:6e:af:cb:
                    19:66:a9:c2:d4:9d:e4:58:75:0a:db:4f:5e:68:4f:
                    fc:cd:48:53:68:6a:f2:46:d9:f6:f4:84:f7:73:f8:
                    d0:78:b4:fd:81:2c:de:50:52:e8:0d:34:ab:0d:0c:
                    52:e7:25:3e:f6:fe:d1:31:06:cb:18:68:54:6a:60:
                    d6:64:02:9d:02:9e:cb:7f:92:bd:d6:26:e3:23:26:
                    9a:bc:6a:3a:7a:58:50:06:c5:28:81:9b:fd:54:52:
                    f8:0c:8f:46:dc:ac:8c:28:e5:ac:aa:07:de:57:0d:
                    8c:25:c2:0a:f7:e0:c6:02:ac:e4:a1:b3:38:2d:16:
                    39:36:01:b3:6f:d4:b9:e3:25:b6:13:67:7c:3f:90:
                    e6:c1:41:7c:bc:03:62:be:5d:bf:af:84:29:e0:39:
                    89:45:1d:fc:44:1c:b8:f8:2d:db:a6:50:d7:84:66:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:90:61:27:A2:B5:68:BB:72:7A:18:BF:60:24:F3:C9:AE:55:2B:D5
            X509v3 Authority Key Identifier:
                keyid:26:5F:F6:12:8F:41:92:BD:65:AC:CC:1D:F4:F2:04:B9:FE:5D:EE:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/265FF6128F4192BD65ACCC1DF4F204B9FE5DEE52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/265FF6128F4192BD65ACCC1DF4F204B9FE5DEE52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137302e3233392e3136302e302f32322d3234203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:00:50:5d:00:42:8c:6b:7f:86:a0:f3:bf:18:6f:62:19:c1:
         2e:a0:8e:de:65:8c:c1:b6:da:ea:f4:a0:6e:b5:2a:ff:96:9b:
         23:03:a5:3d:03:1b:62:84:ce:45:4d:04:6c:52:e8:0a:8b:a3:
         12:40:67:f1:7c:f0:e5:a2:a9:b1:49:fb:1f:57:94:d6:e7:fe:
         55:bf:c5:6f:ab:06:f3:f6:b2:b0:92:ae:30:37:0a:86:d6:6e:
         87:83:c4:4c:05:da:da:90:33:58:22:07:00:1f:24:55:8d:b8:
         fb:5a:9c:0d:bd:fc:d4:ba:25:a3:07:c4:ec:e5:eb:7d:21:91:
         6b:bb:0f:a0:af:13:21:54:54:da:06:f5:32:66:2f:4a:12:6c:
         c9:36:8c:d5:2d:b4:c6:c1:11:5a:fb:77:f9:bf:2e:88:fa:3e:
         0c:38:61:82:d8:9c:a5:0d:eb:a9:89:7c:92:f1:29:9a:c3:79:
         61:78:33:5e:21:07:87:79:05:a6:a0:7e:5c:22:26:40:6c:73:
         e7:7a:c5:8d:34:5d:86:cd:0c:63:bf:01:d8:8c:21:6c:04:7f:
         70:3f:a5:02:8d:c8:97:06:59:56:a6:8d:2a:0c:fd:5e:38:81:
         52:47:e0:30:fb:b6:74:34:d1:75:e7:29:a8:b5:21:a5:9a:e4:
         d7:1b:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org