Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132322e302f32342d3234203d3e20323635303535.roa
File:                     3137302e3233312e3132322e302f32342d3234203d3e20323635303535.roa (raw, json)
Hash identifier:          Z5pbsF46fjL/Gl5iJo6asZAqNUsOQgUs2IlsRIVYdpg=
Subject key identifier:   E9:DD:2A:29:FD:AC:DD:D1:87:75:FD:47:75:5D:76:82:0E:08:06:19
Certificate issuer:       /CN=E4915C47C16EBCCA7D46320F123A76288C24B52A
Certificate serial:       544A76F6F4447D1E48BF7A77D812BCFCF342CB5E
Authority key identifier: E4:91:5C:47:C1:6E:BC:CA:7D:46:32:0F:12:3A:76:28:8C:24:B5:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132322e302f32342d3234203d3e20323635303535.roa
Signing time:             Fri 21 Jul 2023 18:54:14 +0000
ROA not before:           Fri 21 Jul 2023 18:49:14 +0000
ROA not after:            Fri 19 Jul 2024 18:54:14 +0000
asID:                     265055
IP address blocks:        170.231.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4a:76:f6:f4:44:7d:1e:48:bf:7a:77:d8:12:bc:fc:f3:42:cb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4915C47C16EBCCA7D46320F123A76288C24B52A
        Validity
            Not Before: Jul 21 18:49:14 2023 GMT
            Not After : Jul 19 18:54:14 2024 GMT
        Subject: CN=E9DD2A29FDACDDD18775FD47755D76820E080619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:d8:2a:d0:c8:00:f3:f0:b0:b8:94:c2:ed:
                    d7:bd:2e:ad:e7:a6:55:f5:bb:1d:22:5e:d6:50:66:
                    00:55:17:25:e5:f3:e1:73:86:b4:6a:cc:67:a0:c5:
                    22:5d:95:db:d0:dc:3b:e1:b0:c9:d2:45:a1:8c:80:
                    56:fd:2d:7e:e4:c7:d3:8c:6d:01:a8:89:9d:5f:76:
                    59:b5:2a:24:41:47:5b:ae:9a:44:27:a5:39:27:14:
                    e1:0f:06:fd:82:24:7f:a1:5f:32:15:2f:14:f1:b8:
                    5a:f0:e2:a4:d8:ca:81:15:f2:a4:45:fd:0a:31:95:
                    e4:28:14:60:a7:17:f0:90:a2:28:7d:c3:79:fa:b0:
                    82:2c:07:4a:9a:a7:42:eb:43:4c:88:7d:3d:51:41:
                    d4:2b:8c:2f:48:55:eb:ad:7d:85:cc:0e:17:83:5a:
                    3e:5e:10:8f:b6:e5:10:20:a6:c5:cc:35:da:b4:4c:
                    43:b2:c9:71:be:cf:33:56:a7:bd:4f:de:ea:72:ac:
                    7e:02:d8:30:91:70:0b:4e:b7:c1:36:19:e9:f8:d7:
                    ba:c0:ed:cd:b2:ed:9b:fc:5a:25:78:53:e5:b4:55:
                    d0:cf:0a:9a:cc:10:91:f9:bf:91:96:11:66:40:c2:
                    ed:6c:0d:1d:38:13:9c:70:1a:63:a9:a6:b3:9b:79:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DD:2A:29:FD:AC:DD:D1:87:75:FD:47:75:5D:76:82:0E:08:06:19
            X509v3 Authority Key Identifier:
                keyid:E4:91:5C:47:C1:6E:BC:CA:7D:46:32:0F:12:3A:76:28:8C:24:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4915C47C16EBCCA7D46320F123A76288C24B52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132322e302f32342d3234203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:87:47:60:42:9f:e5:f1:ba:94:6e:c1:98:29:09:ab:c3:40:
         a6:11:b4:bc:b0:14:eb:40:8f:7e:f4:64:7e:3b:65:31:7d:56:
         e1:33:02:8b:76:41:a3:87:d4:77:8d:79:44:72:c5:9d:08:fe:
         02:88:ed:85:05:db:8c:2b:87:e1:27:18:35:9e:87:cd:30:a8:
         2c:e7:4c:bc:71:58:74:cb:ba:38:b2:9d:12:90:ae:d9:cb:41:
         85:db:88:cb:7e:69:e3:f9:1b:e5:da:12:03:eb:b5:7f:3c:e6:
         4a:a9:c3:e4:de:15:f7:35:f5:0b:7d:5d:00:d6:dd:52:60:5e:
         1f:f8:1f:a9:fb:7b:e0:05:26:d4:d7:b6:97:58:72:65:b6:6e:
         ce:bb:92:26:b5:8f:9c:b2:a1:ab:ee:91:eb:f9:d3:29:d0:db:
         38:87:06:75:f3:b3:2c:60:56:20:75:ee:ac:13:db:df:13:e8:
         42:7a:93:61:ac:39:8c:de:ce:b1:01:7a:7f:b4:6d:c8:2b:79:
         36:07:a7:8e:d1:c7:1c:09:44:83:36:66:e9:37:ba:d1:15:88:
         ce:61:c2:f7:be:df:3f:43:e2:56:4a:13:3f:4c:a6:62:80:0c:
         fb:84:2f:1f:2c:20:d7:e8:c9:1f:6e:05:41:c1:56:76:db:f6:
         78:15:c0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org