Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32332d3233203d3e20323635303535.roa
File:                     3137302e3233312e3132302e302f32332d3233203d3e20323635303535.roa (raw, json)
Hash identifier:          S6hI559n95XwiZi+Z7/T6m+TjOyXBZUzsWwEIZ+j/GA=
Subject key identifier:   66:93:5C:A4:E1:8A:07:18:C1:7C:5E:69:37:36:D8:C1:CF:C6:76:69
Certificate issuer:       /CN=E4915C47C16EBCCA7D46320F123A76288C24B52A
Certificate serial:       662386D1CEDF9E4DBFD438A6FD141FD6BFFAC99A
Authority key identifier: E4:91:5C:47:C1:6E:BC:CA:7D:46:32:0F:12:3A:76:28:8C:24:B5:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32332d3233203d3e20323635303535.roa
Signing time:             Mon 19 Jun 2023 13:29:45 +0000
ROA not before:           Mon 19 Jun 2023 13:24:45 +0000
ROA not after:            Mon 17 Jun 2024 13:29:45 +0000
asID:                     265055
IP address blocks:        170.231.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:23:86:d1:ce:df:9e:4d:bf:d4:38:a6:fd:14:1f:d6:bf:fa:c9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4915C47C16EBCCA7D46320F123A76288C24B52A
        Validity
            Not Before: Jun 19 13:24:45 2023 GMT
            Not After : Jun 17 13:29:45 2024 GMT
        Subject: CN=66935CA4E18A0718C17C5E693736D8C1CFC67669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d5:56:f2:ba:11:52:14:a5:22:09:9d:58:1e:
                    81:26:3e:85:f5:b6:d0:98:ef:03:d7:66:64:ea:9c:
                    9b:06:c8:db:cd:a8:25:e4:a1:a5:d7:c8:1c:38:cf:
                    cf:04:af:69:17:18:f4:66:8d:cf:78:19:e1:9c:be:
                    86:30:63:1c:35:72:fa:b4:76:b8:74:ec:14:34:86:
                    8c:99:cc:7c:77:42:55:ff:cc:23:ca:50:41:19:f3:
                    b4:6a:af:c7:07:4c:79:64:b7:52:9b:2c:ae:bd:18:
                    07:4a:7b:ac:d2:1e:95:3c:fc:7b:95:bb:d6:32:c3:
                    1f:24:a8:f0:50:b8:bd:57:3a:bc:3e:0f:cc:f0:b7:
                    72:52:fc:2b:ff:c5:b1:6b:4d:03:db:79:df:cb:90:
                    c0:37:25:c9:0d:ec:e6:c1:a9:71:af:e2:8b:cb:41:
                    9a:65:cf:e8:40:ca:cc:b7:01:8f:96:9d:82:fe:51:
                    96:db:02:5c:23:4a:92:3d:57:c7:2f:df:8a:8d:2c:
                    73:cb:12:ca:58:87:b8:35:0e:93:c2:11:9d:85:5e:
                    08:d0:4d:f6:89:48:7f:c6:21:9c:83:5a:95:41:e5:
                    02:8c:37:42:9a:b6:2b:47:50:60:bb:2a:fc:a8:c0:
                    0e:bf:b9:57:9a:da:f6:59:c9:c4:2b:2d:15:69:ed:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:93:5C:A4:E1:8A:07:18:C1:7C:5E:69:37:36:D8:C1:CF:C6:76:69
            X509v3 Authority Key Identifier:
                keyid:E4:91:5C:47:C1:6E:BC:CA:7D:46:32:0F:12:3A:76:28:8C:24:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32332d3233203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:fa:28:1f:12:a0:73:5d:58:f2:01:0e:6a:37:01:41:50:fe:
         20:c5:6d:22:54:90:3c:fa:bd:cc:d9:66:df:40:a1:d0:33:19:
         a2:39:55:d7:b9:2d:07:44:1f:e5:d8:22:48:77:cf:fc:39:43:
         5f:cd:6a:a3:d4:46:6e:8b:32:f3:cf:18:cd:87:70:e2:12:7e:
         48:b4:d2:f0:fe:fa:a8:09:92:68:70:95:ce:1e:41:73:44:ef:
         b3:bc:aa:53:fe:57:1c:82:f2:47:36:d0:58:6e:9c:2e:cc:c1:
         98:f8:d7:a1:2a:c8:51:93:cd:6f:aa:e8:c0:33:48:eb:23:c3:
         0a:dc:b1:44:e8:21:3a:61:b3:e6:46:d7:9a:c4:13:19:fd:22:
         bd:88:ee:6e:1f:25:06:33:bb:0b:46:cc:a7:d6:5c:47:74:03:
         bc:b8:82:18:2a:49:df:d3:88:cc:5b:be:16:b9:d8:99:00:98:
         95:2a:d9:c0:89:fc:b5:a1:7e:4e:d3:97:45:6e:e6:2b:4d:8e:
         50:95:23:05:ce:ea:56:31:e0:85:49:c5:a2:f7:33:a3:71:64:
         3c:74:c2:6c:ae:2a:82:1c:67:e2:32:77:eb:99:c2:67:13:51:
         ff:91:66:b4:71:14:90:83:09:91:70:48:6f:b7:31:98:03:33:
         94:50:81:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org