Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/1/3137302e3233332e33322e302f32332d3233203d3e20323635303836.roa
File:                     3137302e3233332e33322e302f32332d3233203d3e20323635303836.roa (raw, json)
Hash identifier:          4C7RbhjTG8/mZ85DaTVagkWIK1fwER2WU/zjNdo0Glw=
Subject key identifier:   F0:49:03:AE:21:1D:A4:C7:27:C4:C7:C1:9E:D6:55:7B:85:77:33:6A
Certificate issuer:       /CN=93764B1F87D55A2888FF3D1906B289FD50CF8145
Certificate serial:       1EE422386096E60FA796C753C7692053BC988055
Authority key identifier: 93:76:4B:1F:87:D5:5A:28:88:FF:3D:19:06:B2:89:FD:50:CF:81:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93764B1F87D55A2888FF3D1906B289FD50CF8145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/1/3137302e3233332e33322e302f32332d3233203d3e20323635303836.roa
Signing time:             Tue 09 Apr 2024 18:08:23 +0000
ROA not before:           Tue 09 Apr 2024 18:03:23 +0000
ROA not after:            Tue 08 Apr 2025 18:08:23 +0000
asID:                     265086
IP address blocks:        170.233.32.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e4:22:38:60:96:e6:0f:a7:96:c7:53:c7:69:20:53:bc:98:80:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93764B1F87D55A2888FF3D1906B289FD50CF8145
        Validity
            Not Before: Apr  9 18:03:23 2024 GMT
            Not After : Apr  8 18:08:23 2025 GMT
        Subject: CN=F04903AE211DA4C727C4C7C19ED6557B8577336A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0e:e0:78:39:e4:84:7b:c3:e3:64:57:1a:dc:
                    8f:6a:eb:a0:81:99:6e:e0:63:6b:0b:d3:e9:63:92:
                    6f:26:7d:e9:46:ba:a7:97:04:d7:13:e4:ca:58:e9:
                    85:3f:68:8d:54:f5:49:33:3e:85:8d:ba:44:2b:99:
                    23:0a:6a:91:f5:17:61:c8:db:35:41:20:d3:52:45:
                    95:59:d2:7d:00:c6:fd:fa:e4:59:0c:97:f9:13:d0:
                    52:66:47:a4:e6:bc:d7:35:f6:4e:5c:49:89:64:92:
                    1f:41:82:a0:ba:7b:96:37:7a:47:3f:f6:9b:ff:9f:
                    d4:24:b1:d5:32:a1:58:16:9e:a6:a8:36:9a:8c:e5:
                    04:0f:d6:a7:76:25:7b:5a:2b:28:48:6a:c3:b9:a3:
                    a8:e1:87:be:72:de:c9:b0:b1:4c:d7:d9:03:87:7a:
                    c0:c1:b3:fe:42:37:dc:af:9e:a9:37:d3:9d:de:7f:
                    1b:b3:9e:10:66:f5:4e:58:8d:c2:8e:8d:d6:57:5c:
                    d4:ce:fc:7e:89:d2:31:d9:f9:36:cb:a6:0e:8d:a3:
                    b3:5e:fa:76:93:a0:7d:3f:bd:d0:45:29:ef:bb:ad:
                    7e:b2:59:b5:12:21:23:12:b6:b4:be:eb:5f:c3:be:
                    58:ef:05:23:a7:4c:09:2b:f9:c6:d1:45:11:ee:8d:
                    71:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:49:03:AE:21:1D:A4:C7:27:C4:C7:C1:9E:D6:55:7B:85:77:33:6A
            X509v3 Authority Key Identifier:
                keyid:93:76:4B:1F:87:D5:5A:28:88:FF:3D:19:06:B2:89:FD:50:CF:81:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/1/93764B1F87D55A2888FF3D1906B289FD50CF8145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93764B1F87D55A2888FF3D1906B289FD50CF8145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/1/3137302e3233332e33322e302f32332d3233203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:c7:d9:2d:e2:1f:44:7b:4c:01:61:e8:94:66:1e:76:79:20:
         4e:56:97:a6:bf:35:0c:b9:b7:7d:ac:3d:42:7d:03:c2:ce:65:
         2f:e6:8d:a5:49:0a:64:44:13:ea:78:ff:9c:ef:4a:c1:3b:48:
         45:ff:cd:dc:52:8e:fb:8b:c5:f5:a9:41:ba:1e:c6:ec:84:23:
         97:7a:71:1a:06:90:ed:c1:61:41:fe:ce:e5:c0:a4:29:55:d8:
         a0:0f:49:1f:28:ff:25:51:30:45:67:cd:5a:2d:fb:17:0b:a2:
         44:26:b9:59:bb:66:00:53:82:b9:0b:2a:dd:73:94:44:aa:cb:
         31:2b:b1:53:dc:e3:4f:95:4d:f1:c3:5f:a9:95:5f:48:76:15:
         ce:18:92:bb:ff:42:da:a1:f0:d4:0e:14:4d:e3:72:48:6b:72:
         5f:12:cc:e0:b7:b2:c3:52:1c:24:f3:d5:bc:a4:5c:ee:bd:d8:
         37:d3:ca:ca:c3:64:60:02:b4:15:d9:da:4d:b5:e5:f4:4d:f2:
         d4:32:80:3c:bd:bf:d9:80:b4:fc:f4:ca:0e:ef:fd:89:dc:a1:
         37:ed:e8:33:00:f9:97:11:65:c5:f1:42:34:0d:90:93:e0:0e:
         38:f4:6b:9b:0e:97:d9:fa:97:95:3c:21:23:e1:d7:c0:ce:76:
         85:96:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org