Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39362e302f32332d3233203d3e203631373438.roa
File:                     3137302e3234352e39362e302f32332d3233203d3e203631373438.roa (raw, json)
Hash identifier:          WV/dLfQUVfMQXSgUh5ZvBkpWh+hiZYR+2HgTEgZXNC8=
Subject key identifier:   E4:3A:F4:50:9B:C2:5E:EE:F7:66:7B:F0:50:FA:A5:42:AF:78:3A:14
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       65EEEC6450CA01C8CBF3033694EA897E4B20D885
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39362e302f32332d3233203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:19:53 +0000
ROA not before:           Wed 10 Apr 2024 19:14:53 +0000
ROA not after:            Wed 09 Apr 2025 19:19:53 +0000
asID:                     61748
IP address blocks:        170.245.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ee:ec:64:50:ca:01:c8:cb:f3:03:36:94:ea:89:7e:4b:20:d8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:14:53 2024 GMT
            Not After : Apr  9 19:19:53 2025 GMT
        Subject: CN=E43AF4509BC25EEEF7667BF050FAA542AF783A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8d:3b:32:60:aa:e2:f5:65:22:6a:74:06:e8:
                    54:a3:e4:fe:35:fb:ff:53:eb:86:65:b1:46:d7:d3:
                    e6:01:70:10:a5:57:d7:62:b2:39:a1:ce:36:d9:0d:
                    23:36:40:3b:34:5e:1e:54:80:21:74:bb:35:0c:95:
                    ea:4b:65:7a:69:20:4d:b4:0e:80:32:f7:87:35:8a:
                    87:eb:2e:77:4c:8a:1e:b4:9c:a9:0e:26:97:f7:bd:
                    9a:c9:12:50:28:e1:df:c7:9f:f8:c7:66:12:95:0c:
                    39:8b:b7:4a:cb:1e:27:a1:e7:a2:39:48:cf:28:1f:
                    61:18:b5:99:a7:6c:37:11:10:51:bf:23:10:a1:bd:
                    0c:88:94:72:9f:7f:1a:aa:ed:cb:44:4b:fe:da:ad:
                    c9:96:65:22:5f:83:8e:41:cc:af:0e:f8:82:08:ce:
                    bd:d6:95:3f:c8:6f:8c:a7:4c:3c:1d:58:60:ce:5e:
                    ec:b1:0a:4f:48:38:d3:b8:1d:dc:bb:11:fa:4b:15:
                    71:d3:af:f6:f7:af:2a:26:6b:49:71:d7:48:c4:07:
                    a7:81:85:c5:fa:54:8f:a7:70:f2:30:d4:3c:18:b9:
                    60:cd:a8:24:c1:88:57:f9:44:d5:41:c7:27:a8:a2:
                    a0:11:ae:8f:c9:23:7e:3c:fa:c0:8f:a3:ae:cc:da:
                    72:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:F4:50:9B:C2:5E:EE:F7:66:7B:F0:50:FA:A5:42:AF:78:3A:14
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39362e302f32332d3233203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:53:42:74:05:8a:c1:6a:8c:0e:f4:28:98:b7:ac:1f:a6:7e:
         e6:5d:cf:f1:a0:b7:a4:de:e0:52:4e:95:48:76:69:ed:15:7f:
         e1:50:c8:6c:dc:e9:27:84:31:cf:75:bd:2d:f8:9b:19:b1:5f:
         74:9d:91:a5:5c:5a:68:d5:22:e2:71:fa:83:41:ff:94:b8:f0:
         50:19:32:ad:9e:21:87:f6:1d:56:3f:f7:d7:c5:91:40:dd:e0:
         dd:9c:a5:fa:58:2d:de:0a:87:54:98:81:8f:b5:6c:b7:a5:da:
         57:f4:e0:2c:24:0c:bf:d8:f9:2f:31:06:12:a2:61:87:e8:c9:
         65:b1:02:36:55:48:c4:f5:d7:e1:57:8a:04:19:ec:09:a7:15:
         f4:c8:6f:60:09:90:ca:4d:00:09:2d:0e:d2:40:f8:78:3a:08:
         9d:5e:ab:0f:d2:9b:cf:af:1e:64:d4:54:fb:1d:a1:11:1b:5d:
         6a:d8:7b:61:8f:ed:e4:22:8d:99:c3:37:7f:81:d5:24:8c:f0:
         c0:c7:a0:a4:d2:d4:e3:e8:34:e7:6a:31:37:81:d2:f0:01:9a:
         4c:2e:46:86:b4:9f:44:f6:ac:61:36:25:d1:32:73:8c:d1:60:
         75:2e:0f:3f:37:7b:03:ad:d8:a9:60:c4:54:14:37:5d:67:1b:
         4d:a6:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org