Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33372e302f32342d3234203d3e20323634353234.roa
File:                     3137302e3234372e33372e302f32342d3234203d3e20323634353234.roa (raw, json)
Hash identifier:          fhKGzxxq8T8020PkN08hIG7XM8Lvx4/fPoJ+hxQ9txs=
Subject key identifier:   4A:21:2C:86:FF:E9:DD:A3:31:DF:50:30:B4:90:28:3E:E2:39:DF:A4
Certificate issuer:       /CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
Certificate serial:       7C667861FD98A876D68088DFE439FB1AE3DA4CC8
Authority key identifier: D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33372e302f32342d3234203d3e20323634353234.roa
Signing time:             Mon 04 Mar 2024 19:26:12 +0000
ROA not before:           Mon 04 Mar 2024 19:21:12 +0000
ROA not after:            Mon 03 Mar 2025 19:26:12 +0000
asID:                     264524
IP address blocks:        170.247.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:66:78:61:fd:98:a8:76:d6:80:88:df:e4:39:fb:1a:e3:da:4c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
        Validity
            Not Before: Mar  4 19:21:12 2024 GMT
            Not After : Mar  3 19:26:12 2025 GMT
        Subject: CN=4A212C86FFE9DDA331DF5030B490283EE239DFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:c9:0d:0b:f0:9b:bc:2a:c2:24:f1:cb:33:
                    b1:bc:d1:a4:52:f7:cb:b7:40:73:36:ee:ea:16:61:
                    ab:a8:d2:23:53:fb:5b:13:ed:48:ad:8b:9f:2a:f3:
                    a7:1c:5c:a8:e0:30:70:0a:4e:c8:79:d8:3b:95:ab:
                    71:f7:1a:cb:1c:14:c7:92:43:cc:5b:2a:10:5a:f0:
                    b5:87:88:e9:ea:f7:e2:9c:41:24:08:c8:f2:f1:cd:
                    85:ac:cc:f2:17:33:30:dc:87:f8:82:d4:31:a7:32:
                    6a:c5:3d:3b:36:56:9b:29:66:2f:aa:59:e5:bd:8a:
                    81:3b:71:a2:95:81:3f:22:77:3f:75:09:98:09:f6:
                    77:ce:ad:49:3c:79:0d:32:7c:6e:74:99:15:e3:f4:
                    10:82:37:ce:f5:d8:c1:34:7c:47:e5:eb:3f:53:c4:
                    b6:ca:40:b8:3a:50:12:1a:90:e1:6f:1b:c5:d4:08:
                    04:2e:40:d9:9e:5c:1f:ae:fd:5d:ca:ac:91:d6:c8:
                    6d:db:f7:64:2c:02:f5:0c:78:d7:32:05:d9:d0:7d:
                    94:a8:cb:93:06:a7:9e:d3:89:32:86:cf:73:90:3b:
                    46:e1:d5:c8:69:dc:c2:e5:82:25:7d:63:88:dc:9d:
                    d4:7a:87:c9:0c:54:84:83:bc:9d:4a:3e:c1:68:a4:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:21:2C:86:FF:E9:DD:A3:31:DF:50:30:B4:90:28:3E:E2:39:DF:A4
            X509v3 Authority Key Identifier:
                keyid:D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3137302e3234372e33372e302f32342d3234203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:38:21:47:32:2d:8d:c1:b7:a6:2b:66:d4:7a:b6:fc:dd:f4:
         dc:35:a6:00:74:b7:1f:9d:8c:e7:b8:28:49:ae:93:11:bd:c2:
         f8:3a:9c:ec:81:70:7c:1e:47:aa:99:36:cf:f1:25:c8:1c:02:
         5b:b2:56:d4:d7:e2:27:5d:f4:d7:e0:10:4c:9f:66:aa:41:26:
         a8:3e:43:a5:d7:e4:bf:66:15:6f:7f:ae:3d:0b:f8:90:64:ec:
         40:4c:3e:e1:eb:f6:72:95:d3:1d:1b:b7:c4:2e:f6:3e:f1:08:
         bb:23:58:cf:b6:e2:df:fe:c9:7d:ac:31:f0:8b:ce:8c:15:e0:
         42:2c:fc:20:d9:5a:b5:45:9e:f4:be:bc:94:90:4f:bd:2f:b7:
         81:82:0e:f5:ae:a4:94:51:a1:20:48:8d:66:04:96:21:27:8a:
         d1:ef:da:18:67:d1:92:0c:c7:fd:24:55:48:db:c5:7e:43:a3:
         d3:a9:f7:36:ab:f1:68:f0:6a:1b:9d:fe:8d:29:bf:15:87:b0:
         9f:f0:05:3a:4d:05:db:82:ee:52:c3:90:50:a7:e9:f3:ab:5e:
         b4:7d:c1:d6:01:8f:f8:41:ac:37:f8:3b:93:4f:80:8b:74:84:
         a1:f2:8f:48:fd:4f:ee:19:25:f8:26:0e:b4:dc:98:74:fc:97:
         47:df:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org