Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39392e302f32342d3234203d3e203631373438.roa
File:                     3137302e3234352e39392e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier:          RCWNVnWBpgMWL/V3YM8DwsOagg1hKeeioiM4j1XXjUs=
Subject key identifier:   78:4A:12:6B:77:65:A6:1C:2C:32:34:34:0F:75:12:B5:AA:EE:9F:3E
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       5377364F4291A8DC3ABBACA43969F0A00C442CAD
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39392e302f32342d3234203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:20:19 +0000
ROA not before:           Wed 10 Apr 2024 19:15:19 +0000
ROA not after:            Wed 09 Apr 2025 19:20:19 +0000
asID:                     61748
IP address blocks:        170.245.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:77:36:4f:42:91:a8:dc:3a:bb:ac:a4:39:69:f0:a0:0c:44:2c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:15:19 2024 GMT
            Not After : Apr  9 19:20:19 2025 GMT
        Subject: CN=784A126B7765A61C2C3234340F7512B5AAEE9F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:37:63:9f:b2:a1:2a:6a:52:87:9f:01:41:
                    6b:90:40:91:47:44:a9:1c:59:cb:0a:2e:ea:99:8c:
                    5c:3e:76:4b:bd:37:be:e4:87:fe:87:d5:43:7e:34:
                    dc:40:21:12:2a:99:e3:86:34:77:b6:ac:ca:c0:e0:
                    f6:64:4a:60:23:e5:15:32:d8:6a:3a:d7:15:8d:09:
                    73:15:c3:3d:f2:fb:b1:8c:e7:0b:97:01:51:ac:1c:
                    c0:7e:9b:f9:3d:ef:21:14:fc:ca:c5:f7:03:6b:49:
                    ae:ac:9a:00:4e:c7:20:3d:a5:7f:62:11:01:8b:ec:
                    de:a6:b7:b2:64:c1:13:0b:ec:36:c7:73:9c:b8:bc:
                    a5:63:63:70:15:6e:59:ae:b3:40:6b:ea:38:e4:b3:
                    21:95:ce:10:25:6a:ce:bd:ae:a5:73:2c:15:8c:a3:
                    4b:81:5a:8b:26:10:5e:6c:89:6b:65:03:4a:ca:a2:
                    ca:8a:cf:45:1e:c8:d3:51:6f:d8:d7:c6:a8:62:69:
                    db:af:c4:34:d9:4f:1e:55:87:cf:fc:59:b6:91:2f:
                    9f:95:c3:7e:9c:31:8d:91:38:2b:8c:ad:18:d0:28:
                    19:bb:75:20:f1:fe:3c:cf:1d:96:8a:be:b4:af:6e:
                    48:8e:4a:b5:e8:57:23:94:25:48:69:a7:09:52:af:
                    15:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4A:12:6B:77:65:A6:1C:2C:32:34:34:0F:75:12:B5:AA:EE:9F:3E
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3137302e3234352e39392e302f32342d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d6:ea:90:e9:29:71:db:d7:b2:6c:8b:16:ee:23:b0:8e:8e:
         3b:85:fb:73:86:be:d1:00:53:c8:66:48:11:bc:5d:7b:55:77:
         18:88:a9:11:ca:34:42:9b:ee:2f:a2:2a:dd:1d:c1:4d:0a:a8:
         7a:2a:e9:8c:79:26:2d:32:d2:97:0d:15:c2:23:36:99:70:3d:
         20:92:6f:34:e1:0f:6c:48:22:2f:1b:d2:b4:e8:fe:15:db:24:
         5c:6a:d6:16:d0:d2:c4:11:36:20:c7:bd:b4:06:3a:15:42:da:
         bf:1d:94:d0:ec:be:79:4d:b2:d6:b4:08:2f:1c:39:4f:5a:d8:
         0e:41:1c:89:17:17:9d:ce:35:d1:12:f3:86:6e:71:05:12:0e:
         f6:9b:61:a9:c6:2f:81:cd:8b:d2:2a:3d:23:78:84:b9:34:c9:
         a5:2b:fa:f9:a3:ff:ea:43:5b:23:77:b9:c9:43:d7:85:9c:58:
         4a:86:b9:fc:ed:98:3d:f3:33:68:1b:57:de:98:0b:a9:6e:a5:
         2e:7d:fc:12:65:b1:6b:e3:51:57:8f:90:3d:18:0e:76:1f:52:
         9b:b7:31:d5:27:d4:29:5e:59:3d:7f:4f:0d:3b:ab:5a:e6:85:
         7a:03:88:55:84:63:e0:11:70:2a:50:ed:f1:31:d1:ea:d9:1a:
         73:56:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org