Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa
File:                     3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (raw, json)
Hash identifier:          +pgaVOG/3cYX7ZbomJ8/V31/XaGO7/cAAlAyEbYY7PI=
Subject key identifier:   CC:05:15:D5:FB:33:E4:F2:53:39:1A:0A:AA:9D:44:B7:45:30:B5:B4
Certificate issuer:       /CN=B4E2CEBFE3B84B40B7E2069624E8751BE40B580F
Certificate serial:       19CF2D1EAE29EE02E230DBBD73DA7B2B726723B0
Authority key identifier: B4:E2:CE:BF:E3:B8:4B:40:B7:E2:06:96:24:E8:75:1B:E4:0B:58:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa
Signing time:             Fri 22 Sep 2023 02:52:40 +0000
ROA not before:           Fri 22 Sep 2023 02:47:40 +0000
ROA not after:            Fri 20 Sep 2024 02:52:40 +0000
asID:                     266524
IP address blocks:        170.245.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cf:2d:1e:ae:29:ee:02:e2:30:db:bd:73:da:7b:2b:72:67:23:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E2CEBFE3B84B40B7E2069624E8751BE40B580F
        Validity
            Not Before: Sep 22 02:47:40 2023 GMT
            Not After : Sep 20 02:52:40 2024 GMT
        Subject: CN=CC0515D5FB33E4F253391A0AAA9D44B74530B5B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:75:9e:b9:dd:c8:49:05:1e:49:4c:5b:85:
                    03:9a:6f:bc:e3:20:9a:ed:5d:89:80:27:19:59:38:
                    c8:6b:15:2f:d8:cf:8b:ac:f2:bb:13:cc:8b:a8:4b:
                    4e:45:10:37:da:fd:d4:06:42:7e:db:fa:16:da:80:
                    95:bf:7c:2c:98:ca:7a:76:b4:82:13:3d:24:aa:f3:
                    26:ec:24:93:1e:59:7d:f1:43:95:7b:51:31:96:6c:
                    29:39:df:9d:66:0e:2c:07:fe:47:90:a0:88:b0:39:
                    eb:e0:8a:85:e7:fd:bc:04:62:bf:87:0c:69:7e:48:
                    cb:b5:3c:86:89:47:0f:1b:f5:52:73:14:7e:d7:4e:
                    4d:2b:45:06:aa:48:57:ce:a3:66:5f:d7:47:ed:f1:
                    2c:66:f3:fc:ae:19:b3:58:e3:81:6d:be:a5:91:1c:
                    cc:82:4f:06:0e:84:57:bd:cd:c9:7d:13:f0:96:de:
                    18:cc:9c:81:fa:0a:d9:94:d8:b2:65:3d:03:74:d1:
                    55:76:a9:88:41:6a:95:d6:ae:7f:6f:4e:17:e3:8d:
                    e9:f5:01:e1:04:f7:15:0d:dc:9f:e4:91:ca:65:bd:
                    45:b8:b8:13:f1:52:8e:b4:62:9d:c3:89:72:b2:18:
                    dc:b3:44:0b:86:78:2f:9f:50:89:dc:67:a0:c8:b4:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:05:15:D5:FB:33:E4:F2:53:39:1A:0A:AA:9D:44:B7:45:30:B5:B4
            X509v3 Authority Key Identifier:
                keyid:B4:E2:CE:BF:E3:B8:4B:40:B7:E2:06:96:24:E8:75:1B:E4:0B:58:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:28:9f:64:b3:07:83:3f:55:e7:18:69:a8:fd:c8:3f:95:fc:
         ed:f9:fc:ec:24:19:91:1e:04:c0:22:bb:26:7e:76:37:45:93:
         b0:88:9c:35:2b:26:ab:e4:53:a8:b9:09:b9:b7:f7:ee:3d:70:
         3e:0c:b2:80:95:1d:39:6c:64:a5:46:67:db:02:b8:80:a6:55:
         26:54:f1:7f:b0:aa:64:01:d4:38:c6:92:14:f4:19:b7:98:3c:
         a8:df:fb:26:e2:54:48:a8:96:16:62:ad:4e:89:ed:5d:c9:b9:
         7f:e5:27:ba:bd:53:60:ca:bd:18:f0:a0:2b:47:c2:bf:84:2c:
         ce:a1:6f:3e:a7:1f:a9:1d:30:69:01:04:d8:c4:d5:00:6c:a1:
         2b:aa:6a:fd:3e:de:70:54:e5:5f:fc:6d:38:49:fb:08:d1:92:
         f6:fd:ba:3f:aa:e3:d5:22:c8:02:df:6d:3a:5b:1f:26:5b:d0:
         a6:d4:03:bd:b3:55:9b:8b:9d:f2:4f:4f:c0:74:af:ab:e8:9f:
         f2:2a:80:28:db:37:8a:4a:f5:4d:50:0a:77:eb:03:e1:28:0a:
         f2:04:5d:e9:25:da:1b:f0:ed:44:88:5f:3d:0d:81:f3:52:3e:
         e6:56:40:9a:c5:53:52:57:b6:86:b3:7e:cd:d7:31:7e:3a:7d:
         5f:c2:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org