Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32392e302f32342d3234203d3e20323639313934.roa
File:                     3137302e3234372e32392e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          RR1B1i3CIhuC6bq6sMjnoO2Qx7sAjiJgtDuu33c8W5M=
Subject key identifier:   10:07:1C:96:2D:9C:68:91:94:6C:E1:88:5A:70:41:8A:8F:1C:69:DE
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       7234DB3F1AF9E5A5C3FD956B26998046A9919A65
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32392e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 19 Aug 2023 21:02:51 +0000
ROA not before:           Sat 19 Aug 2023 20:57:51 +0000
ROA not after:            Sat 17 Aug 2024 21:02:51 +0000
asID:                     269194
IP address blocks:        170.247.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:34:db:3f:1a:f9:e5:a5:c3:fd:95:6b:26:99:80:46:a9:91:9a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Aug 19 20:57:51 2023 GMT
            Not After : Aug 17 21:02:51 2024 GMT
        Subject: CN=10071C962D9C6891946CE1885A70418A8F1C69DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:9f:49:a4:63:ba:2f:d0:0f:a2:9b:24:a3:
                    18:80:b4:3e:22:08:e3:ed:71:4c:e8:40:40:ac:d5:
                    1c:32:4e:e5:96:76:6b:8c:f6:84:2d:95:d5:e9:60:
                    52:ef:9c:24:d0:c5:dd:be:9c:60:2a:16:ed:eb:1e:
                    42:14:d4:73:18:2d:05:72:55:a7:7b:04:3a:c2:8d:
                    ec:f1:d5:0b:ea:ad:4b:79:0d:95:4f:3a:b0:24:51:
                    d2:7c:4b:dd:c2:0b:00:31:3a:be:99:d4:51:7e:3f:
                    21:f6:5c:9e:a0:cd:7d:1d:d5:af:ba:0e:72:ab:06:
                    62:f5:26:e0:f3:75:a9:4e:6a:b6:f6:ea:86:98:3a:
                    4d:1d:9f:a6:c7:03:17:07:ba:f5:b2:a0:c4:27:46:
                    a8:2d:d0:3f:64:06:5c:4a:82:56:00:b6:e1:80:c8:
                    7b:e9:65:a7:91:62:62:56:da:df:48:eb:64:a5:88:
                    aa:fc:4a:f7:54:3d:63:fb:c7:20:87:82:02:89:b4:
                    a0:48:70:e2:c1:5d:32:16:9f:7f:2c:9c:eb:3e:70:
                    d0:40:a9:e9:ea:db:5a:09:96:91:d1:ae:59:bc:bf:
                    26:d1:62:6d:4a:d8:69:5f:74:c5:8e:7e:10:fb:dd:
                    ab:35:f3:59:ef:f1:c9:50:86:dd:f0:bc:9c:ac:17:
                    a3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:07:1C:96:2D:9C:68:91:94:6C:E1:88:5A:70:41:8A:8F:1C:69:DE
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32392e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:b7:d9:91:ef:a1:9d:cf:10:85:2e:0c:0f:76:57:06:5b:
         2b:bb:ce:6f:1d:44:d1:d9:5a:e8:59:5f:7d:d4:d4:ca:f3:2c:
         43:74:13:76:29:2a:7d:06:8e:fa:31:8a:66:f3:f7:ee:44:df:
         43:49:7e:63:63:6a:06:62:78:da:3b:98:11:87:e2:52:1c:ce:
         4b:f7:78:ba:2e:24:76:38:7f:db:8e:e4:9f:da:de:3d:bc:d0:
         f0:71:c9:52:2e:88:4f:c1:82:42:d2:c7:ec:36:53:60:b3:4a:
         ab:0d:8f:e4:d6:d1:9e:a7:6e:63:36:11:8d:27:3b:5a:f4:c1:
         48:cb:56:18:11:1f:92:ba:f8:ff:26:e2:24:4b:37:37:09:45:
         34:a8:7e:73:c3:2e:22:aa:25:28:bd:15:99:5a:1f:94:0c:2b:
         f0:4e:fe:7b:c6:e7:9a:54:c8:71:41:2b:76:01:47:84:30:1d:
         bb:8e:97:ad:e2:de:54:0c:69:ab:53:f1:ec:5e:d0:e0:50:c5:
         97:9b:c5:2b:b3:64:24:e0:b6:9f:50:0b:90:2d:55:51:20:b6:
         2d:2e:7f:2f:50:36:0a:00:1e:ed:46:08:42:a4:22:ed:35:1b:
         82:c7:63:0e:12:a7:53:95:84:7b:3d:58:e1:e0:6a:08:9e:b0:
         86:7e:02:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org