Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32382e302f32342d3234203d3e20323639313934.roa
File:                     3137302e3234372e32382e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          P1dsRA/rLvZ0LAiilM25E8rnQdPvqIscZ2sHzMS4n1A=
Subject key identifier:   C8:44:50:E3:8B:AB:40:5B:F5:B8:22:73:B5:F2:F8:C4:8F:C9:1B:09
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       0E56A46F0CDDE4B10A29AC82B57ED343FDF9843B
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32382e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 19 Aug 2023 21:02:51 +0000
ROA not before:           Sat 19 Aug 2023 20:57:51 +0000
ROA not after:            Sat 17 Aug 2024 21:02:51 +0000
asID:                     269194
IP address blocks:        170.247.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:56:a4:6f:0c:dd:e4:b1:0a:29:ac:82:b5:7e:d3:43:fd:f9:84:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Aug 19 20:57:51 2023 GMT
            Not After : Aug 17 21:02:51 2024 GMT
        Subject: CN=C84450E38BAB405BF5B82273B5F2F8C48FC91B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:40:4c:cc:c0:e3:44:b3:f5:2a:ec:31:83:
                    94:b2:be:63:52:80:89:7b:e2:56:e2:d1:bb:06:65:
                    bf:5d:b8:d0:1d:93:00:37:fd:77:40:8d:ae:af:50:
                    00:b9:35:17:af:51:1e:84:32:f0:2f:32:72:da:17:
                    98:70:7c:ef:31:6c:46:e3:5b:0b:10:46:f1:8e:98:
                    4e:c0:b5:73:d7:77:6d:6e:e0:43:8d:ab:99:75:47:
                    06:34:a0:e6:ec:05:48:48:5f:ce:2a:7f:87:22:97:
                    f6:32:b3:ee:5f:22:7d:6e:e8:f7:02:d5:60:77:0c:
                    b0:34:15:a7:dc:bd:f2:ab:16:1f:2f:da:5f:ed:28:
                    06:6b:0c:8a:b9:8f:dc:9f:ec:69:ea:a9:e8:72:eb:
                    0c:58:5d:5a:66:74:3a:61:77:5f:08:fb:91:4c:54:
                    8d:12:82:a9:7f:cf:42:a4:cd:ca:fc:da:32:3b:0e:
                    1f:89:38:a4:8c:ca:fa:cc:92:54:17:db:62:83:ae:
                    de:2d:f3:c3:94:9d:8a:02:ae:9a:61:ff:59:4a:fe:
                    8d:33:2c:38:0e:57:04:fd:84:16:3e:11:71:b1:53:
                    8e:b7:52:02:47:5f:aa:f2:00:35:aa:9a:e4:87:fb:
                    46:c0:a4:fa:5d:53:b2:51:83:d7:d0:03:99:f3:86:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:44:50:E3:8B:AB:40:5B:F5:B8:22:73:B5:F2:F8:C4:8F:C9:1B:09
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32382e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:97:c4:f1:d0:8b:4c:bb:61:cd:4a:84:f5:29:70:51:32:d6:
         6f:3f:f4:a5:6a:cd:44:9d:cf:07:00:28:6b:49:39:db:17:0f:
         e2:5a:74:e0:7b:73:92:f3:38:a8:76:66:6f:fc:c2:c0:16:59:
         39:ac:71:12:fc:5f:37:e8:6c:b1:2b:4e:f5:ae:e2:e9:ca:2a:
         3f:fe:ed:b9:b1:7e:b2:18:b3:34:74:0f:8a:27:6e:7c:00:f8:
         fc:e2:69:38:f9:e3:e0:1b:44:22:27:d5:69:3d:f0:6c:ad:31:
         67:37:ce:6c:87:e3:60:24:24:63:8e:df:db:b6:bc:45:fe:04:
         25:36:0a:4d:d8:d5:4b:3e:15:59:aa:d5:a8:ca:74:9b:97:6c:
         a2:62:a7:b8:5e:7d:ce:23:d8:69:9a:c8:c1:50:c3:e0:ca:59:
         61:70:66:fa:bd:d5:7b:a1:27:cb:75:c6:eb:24:e2:18:4e:8d:
         2b:8d:7a:a3:4b:ed:6d:4b:91:16:fe:e7:d8:3c:56:23:75:49:
         b8:33:36:3e:24:a8:34:16:52:ee:08:9a:34:92:e2:f0:4b:79:
         c3:a1:f1:6f:61:14:7b:4f:33:9a:cc:2f:3b:a0:ca:ca:bb:20:
         fe:44:0a:34:e8:b7:64:16:e8:d8:14:a7:db:ca:5e:5a:c3:52:
         15:aa:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org