Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137302e3233332e3136382e302f32322d3234203d3e20323633343431.roa
File:                     3137302e3233332e3136382e302f32322d3234203d3e20323633343431.roa (raw, json)
Hash identifier:          lSGnGwRnnWGMip2MfMuVGmDWx/Th1a/HucRm+4Af2xc=
Subject key identifier:   CE:83:9A:25:CA:5C:54:4F:4B:8B:BA:BB:CD:23:74:F3:B3:41:E4:57
Certificate issuer:       /CN=9AF759E568BE2FC7F28D74D12598B32A1F937C25
Certificate serial:       66C953A361DC779FB269BE0539F66ED4478F2B10
Authority key identifier: 9A:F7:59:E5:68:BE:2F:C7:F2:8D:74:D1:25:98:B3:2A:1F:93:7C:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137302e3233332e3136382e302f32322d3234203d3e20323633343431.roa
Signing time:             Fri 02 Jun 2023 02:46:05 +0000
ROA not before:           Fri 02 Jun 2023 02:41:05 +0000
ROA not after:            Fri 31 May 2024 02:46:05 +0000
asID:                     263441
IP address blocks:        170.233.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c9:53:a3:61:dc:77:9f:b2:69:be:05:39:f6:6e:d4:47:8f:2b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF759E568BE2FC7F28D74D12598B32A1F937C25
        Validity
            Not Before: Jun  2 02:41:05 2023 GMT
            Not After : May 31 02:46:05 2024 GMT
        Subject: CN=CE839A25CA5C544F4B8BBABBCD2374F3B341E457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:ee:4f:32:bb:28:e4:5c:43:f7:ef:b8:53:
                    7a:e5:db:dc:f0:31:48:75:8a:b5:71:0e:81:a6:3c:
                    74:0c:fa:2b:6e:a2:94:3b:7c:7c:ee:7c:6d:75:bd:
                    1a:b1:b2:41:88:f2:0e:da:9e:2f:3d:06:27:d2:4a:
                    95:9c:8c:9d:9e:37:29:9c:ea:a8:ad:09:7b:bd:80:
                    f6:8b:78:30:45:bc:94:74:bc:10:bd:0d:f8:6b:d2:
                    8b:1f:29:a4:f8:fb:17:8d:ca:16:ed:7d:b6:3b:29:
                    64:2e:ef:7f:0d:da:fe:f7:e8:56:f5:bb:37:e0:18:
                    73:1e:72:bd:ad:2f:92:d7:02:f4:15:af:9f:40:37:
                    ed:b0:24:eb:84:e7:6e:38:e2:50:bb:c9:e5:c3:05:
                    f8:41:41:37:b1:e7:e5:f0:7e:dd:27:c4:0b:db:df:
                    75:c5:cd:32:70:14:79:42:f4:9e:b3:7c:0b:d7:e1:
                    7a:0a:8e:11:e3:a9:dd:c2:f2:a8:d0:76:64:fd:c4:
                    f7:61:27:cf:cf:b5:76:9e:da:df:e2:84:80:e8:96:
                    6c:9f:de:7e:aa:5a:60:01:00:08:d7:34:41:ef:f8:
                    10:ae:e6:4a:cd:01:34:4c:b6:dc:3c:7a:a4:52:10:
                    3f:23:4c:f9:03:51:34:3b:9d:e2:54:18:a0:98:5f:
                    84:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:83:9A:25:CA:5C:54:4F:4B:8B:BA:BB:CD:23:74:F3:B3:41:E4:57
            X509v3 Authority Key Identifier:
                keyid:9A:F7:59:E5:68:BE:2F:C7:F2:8D:74:D1:25:98:B3:2A:1F:93:7C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137302e3233332e3136382e302f32322d3234203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:75:65:06:7a:5a:0d:dd:5b:0c:01:3f:93:33:71:b8:3a:52:
         9f:70:42:3c:41:75:5e:f6:a8:f9:30:83:7e:48:ad:c2:7a:10:
         58:de:37:71:65:fa:e4:fd:41:77:81:d3:77:4c:74:1d:bb:1a:
         43:69:44:43:fb:bd:13:ce:73:d3:da:77:ff:26:c5:74:40:a5:
         4e:ad:ce:27:d9:26:7e:b4:e3:e3:ac:e6:5c:33:d4:1d:9f:36:
         6a:59:3f:ae:0a:b4:63:09:41:08:b2:27:b2:c7:b2:45:a7:ae:
         2b:29:3e:79:b4:5b:0b:f0:1d:28:2c:4b:94:6c:56:59:b0:69:
         59:93:e9:13:76:32:eb:c7:8a:4f:28:e4:fa:3f:c0:fe:e8:6a:
         5c:a2:53:5f:13:65:fd:b5:06:8d:87:39:cb:72:0b:7e:ce:82:
         23:f7:16:3a:26:f7:a2:f9:7c:9c:5b:9a:27:5d:4c:28:c1:11:
         25:d2:b8:09:d0:61:2b:58:19:20:a4:62:60:c9:32:df:2e:34:
         fb:54:34:9f:27:47:56:95:0f:1f:36:fb:d5:9f:ed:ef:9b:7b:
         b7:19:25:3f:9c:56:d3:82:61:0a:17:ec:4c:d6:93:57:83:fd:
         05:0f:4d:27:ce:37:8d:57:35:03:b8:78:99:98:23:ce:c8:90:
         e5:24:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org