Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32322d3232203d3e20323634393938.roa
File:                     3137302e38342e3135362e302f32322d3232203d3e20323634393938.roa (raw, json)
Hash identifier:          XRldTcCqebG7rPK16dNVuf54KQ7d43mkPkL6eei5Px8=
Subject key identifier:   2F:37:10:72:D2:E4:07:12:7E:0D:96:17:29:0A:97:C9:66:EA:B6:81
Certificate issuer:       /CN=5F14B964EDC0AB5C2D826C5B7822688ABC4578BF
Certificate serial:       059565468015B6FDE1E33E3872BCB36460955A48
Authority key identifier: 5F:14:B9:64:ED:C0:AB:5C:2D:82:6C:5B:78:22:68:8A:BC:45:78:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32322d3232203d3e20323634393938.roa
Signing time:             Mon 19 Feb 2024 17:40:56 +0000
ROA not before:           Mon 19 Feb 2024 17:35:56 +0000
ROA not after:            Mon 17 Feb 2025 17:40:56 +0000
asID:                     264998
IP address blocks:        170.84.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:95:65:46:80:15:b6:fd:e1:e3:3e:38:72:bc:b3:64:60:95:5a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F14B964EDC0AB5C2D826C5B7822688ABC4578BF
        Validity
            Not Before: Feb 19 17:35:56 2024 GMT
            Not After : Feb 17 17:40:56 2025 GMT
        Subject: CN=2F371072D2E407127E0D9617290A97C966EAB681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:df:b7:d7:ee:a7:ab:aa:2f:3b:44:7d:08:
                    49:15:c6:99:71:16:40:7d:d7:0b:58:4c:1e:4e:99:
                    66:96:8a:44:02:23:f8:a8:83:ed:2c:ac:0b:09:df:
                    94:50:a8:cf:96:5c:a9:98:0b:4b:bd:c1:1d:31:0e:
                    15:f1:44:52:3d:1b:10:94:0e:f6:98:9b:fe:db:9e:
                    aa:dc:ab:f6:b3:2f:a6:53:2f:8e:8f:c8:a7:e2:36:
                    cb:38:6c:66:7b:0d:ec:be:35:a4:5f:35:0f:8b:5e:
                    b6:b1:d8:58:a3:ae:ae:0c:bf:e3:20:b7:2e:e7:8d:
                    55:68:0a:ed:2c:7a:b6:65:7a:da:f3:ca:97:5d:67:
                    12:d4:1b:c6:ee:96:7e:fa:8b:3f:f2:90:9f:f9:21:
                    75:15:20:8c:18:f8:13:de:2c:9c:45:a3:2e:6a:d5:
                    3d:a3:cd:80:be:e7:9a:ef:6a:69:6c:ac:b0:6b:3b:
                    0f:67:6b:ce:9d:f3:3f:43:11:18:06:8e:dc:3c:50:
                    79:72:29:91:35:38:33:ee:7e:80:42:b4:69:26:c8:
                    f5:34:df:15:85:f8:4c:6e:90:81:a4:eb:b8:17:a7:
                    3e:64:1a:fd:bc:5e:43:26:b8:47:51:38:e8:4d:f4:
                    ee:6a:4d:21:85:ca:68:ef:a4:a9:24:61:fa:af:16:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:37:10:72:D2:E4:07:12:7E:0D:96:17:29:0A:97:C9:66:EA:B6:81
            X509v3 Authority Key Identifier:
                keyid:5F:14:B9:64:ED:C0:AB:5C:2D:82:6C:5B:78:22:68:8A:BC:45:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F14B964EDC0AB5C2D826C5B7822688ABC4578BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/0/3137302e38342e3135362e302f32322d3232203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:33:8a:7f:8d:0d:95:28:03:e8:1e:1e:86:fb:23:2e:2b:f9:
         85:cd:89:0b:a7:74:86:4e:05:24:f5:c2:2e:51:f0:0e:20:a8:
         9a:9b:36:ce:9b:f1:00:b3:ed:71:c2:f2:d3:0e:d6:23:04:7a:
         01:d2:fa:32:1f:95:ff:08:b1:f3:0c:5b:35:60:dd:18:41:7a:
         07:aa:b5:ac:27:3d:29:83:53:8c:8d:9b:b8:69:05:a6:29:be:
         b8:91:bc:f3:a9:2e:45:04:6a:93:2f:52:e2:b8:3e:96:0b:dd:
         cd:15:11:8e:ad:14:6c:4d:19:87:4a:82:28:84:21:f5:7d:61:
         0b:1e:9e:35:61:a7:15:bd:f7:5f:41:ec:05:85:1d:e1:3d:a1:
         54:9c:59:b4:d2:26:fb:a6:39:ea:f1:b1:a0:25:f8:21:91:ea:
         80:fe:39:57:e8:5a:37:fc:0f:bd:f2:23:c4:65:78:73:5f:3c:
         58:34:91:f1:cd:0f:47:87:b9:ba:07:8c:f7:64:03:10:d6:a6:
         85:a3:81:71:bc:71:e7:39:73:89:5c:af:96:44:72:6c:05:b8:
         34:dc:81:f9:32:25:37:14:87:43:00:06:58:bd:30:fc:2c:84:
         9d:b0:2f:74:38:c2:70:72:78:8e:a0:b8:65:21:d8:b0:82:fe:
         fb:2a:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org