Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132312e302f32342d3234203d3e20323635303535.roa
File:                     3137302e3233312e3132312e302f32342d3234203d3e20323635303535.roa (raw, json)
Hash identifier:          q4v1/EKqbzcQX0ESjfd/cW4e1Qovxcr94ZfMBZwdYZI=
Subject key identifier:   AC:FB:5E:A3:88:75:BA:7C:20:28:F9:5B:12:7A:D2:51:86:2C:EC:88
Certificate issuer:       /CN=E4915C47C16EBCCA7D46320F123A76288C24B52A
Certificate serial:       2137AAEF1E743F9D65F9DCA4751B885D38256F69
Authority key identifier: E4:91:5C:47:C1:6E:BC:CA:7D:46:32:0F:12:3A:76:28:8C:24:B5:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132312e302f32342d3234203d3e20323635303535.roa
Signing time:             Fri 21 Jul 2023 18:53:58 +0000
ROA not before:           Fri 21 Jul 2023 18:48:58 +0000
ROA not after:            Fri 19 Jul 2024 18:53:58 +0000
asID:                     265055
IP address blocks:        170.231.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:37:aa:ef:1e:74:3f:9d:65:f9:dc:a4:75:1b:88:5d:38:25:6f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4915C47C16EBCCA7D46320F123A76288C24B52A
        Validity
            Not Before: Jul 21 18:48:58 2023 GMT
            Not After : Jul 19 18:53:58 2024 GMT
        Subject: CN=ACFB5EA38875BA7C2028F95B127AD251862CEC88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:37:ee:6b:87:5b:16:71:b7:16:05:4a:b5:
                    e8:6f:c5:d5:b0:92:a2:ef:20:95:32:7a:3b:11:77:
                    93:27:5b:24:6e:d3:55:22:bb:39:09:99:00:fe:44:
                    be:44:df:ea:01:20:bb:11:e5:e1:b7:24:32:dd:0e:
                    ed:73:88:34:26:27:80:fb:22:c3:fc:f6:12:32:2a:
                    cd:ed:d5:a3:8e:32:7a:31:27:a5:fe:6f:73:8f:82:
                    1e:c9:df:b0:b4:67:1b:5e:55:50:44:b0:f3:c3:13:
                    69:45:e7:73:7d:a4:ec:04:1d:0c:d9:53:0d:8c:c1:
                    33:f3:16:f8:51:13:cf:e5:bf:76:36:b5:0b:26:79:
                    0a:93:af:72:cf:c8:4f:cd:7e:aa:63:76:81:79:10:
                    00:95:87:60:6a:5e:b8:17:38:30:f7:85:a4:e6:26:
                    80:72:39:05:0c:6b:8e:ac:19:bd:e5:fd:36:1d:49:
                    e1:c9:54:fa:49:58:37:d1:32:c3:ca:d4:17:61:af:
                    43:02:15:05:59:ce:4e:9f:e8:f0:9d:a4:20:bc:7d:
                    bb:89:58:79:a1:39:bb:60:60:78:8f:50:46:b0:d6:
                    4b:78:6c:46:f4:0a:2a:43:51:0b:03:e5:50:73:12:
                    8d:ea:b0:58:41:b2:f6:e3:03:a2:3c:79:18:0b:1f:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FB:5E:A3:88:75:BA:7C:20:28:F9:5B:12:7A:D2:51:86:2C:EC:88
            X509v3 Authority Key Identifier:
                keyid:E4:91:5C:47:C1:6E:BC:CA:7D:46:32:0F:12:3A:76:28:8C:24:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132312e302f32342d3234203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:81:4c:ae:b8:42:a5:32:67:5f:c5:4c:53:64:37:de:95:c5:
         9e:da:90:5e:fe:2b:71:a7:01:2f:55:02:cc:65:05:e6:16:20:
         ed:7c:80:d5:2b:51:6a:c1:a7:6f:29:7f:7d:53:c6:9b:b8:7d:
         c1:61:bf:88:0e:59:ec:f9:d7:a9:ca:c9:ea:09:ad:27:41:e2:
         d3:73:a0:b2:ea:3b:e4:a4:7a:6a:95:ef:09:57:60:90:b6:60:
         13:8f:2a:99:fb:5f:ea:48:d3:c3:a3:9a:e0:d2:82:27:c5:9e:
         26:54:b7:cb:1c:54:0c:29:a3:c3:df:d1:48:82:6b:2f:70:d1:
         39:03:dc:1b:0f:90:79:b2:e3:d3:bf:37:a5:34:62:ee:fc:08:
         5f:f5:7d:e8:5f:42:1f:62:83:f5:c2:61:43:05:82:98:31:32:
         d1:33:a9:8e:48:84:88:0f:7a:39:57:2d:d9:ff:51:6f:01:3b:
         6a:6d:5b:9f:91:52:77:be:e8:4b:7b:3e:f1:e5:d9:80:ce:92:
         e9:f0:13:b0:36:b6:d5:89:2b:33:98:12:d7:60:bd:a7:72:51:
         9c:d6:28:be:12:67:70:de:36:12:e5:a6:a4:c4:2f:b3:23:ad:
         c0:28:72:af:49:08:b2:77:35:b3:51:70:dd:fd:eb:3d:fd:35:
         90:5d:0a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org