Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235322e302f32332d3233203d3e203532353834.roa
File:                     3137302e3235342e3235322e302f32332d3233203d3e203532353834.roa (raw, json)
Hash identifier:          1p7mzZQ340QQtZYM/ElQbO/0aHYnHIxkctJhLA7obzY=
Subject key identifier:   D9:B3:77:94:4B:B1:29:98:AB:1E:DA:F8:9D:1B:14:7F:04:93:0E:77
Certificate issuer:       /CN=47BA6BB953DA3A2A66142690DBB7E840D669B5F3
Certificate serial:       4002D8FE242621C4B2D0E16B9863B751475CB674
Authority key identifier: 47:BA:6B:B9:53:DA:3A:2A:66:14:26:90:DB:B7:E8:40:D6:69:B5:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235322e302f32332d3233203d3e203532353834.roa
Signing time:             Thu 15 Feb 2024 20:44:45 +0000
ROA not before:           Thu 15 Feb 2024 20:39:45 +0000
ROA not after:            Thu 13 Feb 2025 20:44:45 +0000
asID:                     52584
IP address blocks:        170.254.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:02:d8:fe:24:26:21:c4:b2:d0:e1:6b:98:63:b7:51:47:5c:b6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47BA6BB953DA3A2A66142690DBB7E840D669B5F3
        Validity
            Not Before: Feb 15 20:39:45 2024 GMT
            Not After : Feb 13 20:44:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a9:a2:12:65:00:5c:16:fc:9f:2c:66:4a:43:
                    21:37:e5:d7:49:f7:27:44:02:26:1b:14:ab:89:09:
                    dd:63:4c:b4:8a:c8:54:96:e7:90:fe:1c:30:6a:47:
                    58:8b:6b:71:8d:1d:75:92:4e:7b:b0:5b:2b:d0:f1:
                    31:97:a9:dc:b5:c8:3a:0c:2c:7e:3a:c0:25:9a:b9:
                    a0:da:73:80:ba:24:e4:ac:de:a4:75:29:3e:f7:d6:
                    01:4d:0d:df:c8:4c:0d:eb:e0:dc:ec:d9:2e:26:db:
                    e3:7e:67:dd:7c:d6:07:49:53:6d:ab:08:0e:b0:48:
                    bc:31:ed:89:03:81:da:2d:78:13:a4:b9:78:36:00:
                    dd:fb:46:39:57:ae:9b:1b:b2:95:b4:89:5d:c9:0a:
                    8f:c8:7c:e9:ae:ab:30:87:89:1e:46:39:7a:8c:6b:
                    12:57:a1:4a:24:15:d8:29:17:a8:4e:b1:cf:38:2f:
                    23:bd:09:9d:4a:18:54:c0:1e:3f:c0:8f:d6:01:13:
                    bd:10:ed:ce:c2:82:14:1d:3b:2f:67:4e:e9:68:d4:
                    b1:89:d1:96:44:56:c9:d0:04:54:d8:42:85:b3:61:
                    af:fa:53:82:19:02:ee:fe:9d:b7:35:34:5c:f9:b6:
                    43:7c:ea:63:61:84:05:b2:2a:12:e5:6a:26:a1:97:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B3:77:94:4B:B1:29:98:AB:1E:DA:F8:9D:1B:14:7F:04:93:0E:77
            X509v3 Authority Key Identifier:
                keyid:47:BA:6B:B9:53:DA:3A:2A:66:14:26:90:DB:B7:E8:40:D6:69:B5:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235322e302f32332d3233203d3e203532353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:dd:62:aa:84:66:62:a9:df:c5:56:b3:90:9b:2e:c8:cb:44:
         04:20:ce:9e:bf:8b:7f:d1:05:e2:9d:c8:32:b5:c9:48:54:81:
         3b:e3:ee:07:ec:45:3e:75:91:9f:cd:6b:e5:0f:38:86:6c:af:
         44:93:aa:82:74:9f:ba:55:c9:32:99:d9:fe:d2:1d:85:f4:95:
         24:a1:73:ae:50:e7:21:46:3d:19:f8:28:ff:3c:b0:9e:11:0d:
         c4:91:93:6f:21:8f:1b:2b:f0:11:73:b0:39:06:fa:2d:c4:ca:
         23:86:1b:60:00:16:8c:85:bb:4f:95:36:c0:09:fa:ba:e9:1c:
         1f:d7:ad:7c:1c:63:d0:46:16:0c:a9:71:3d:1a:14:cf:7a:b0:
         e0:15:d6:df:33:d6:bb:e6:74:6c:26:9f:69:52:ba:19:94:b0:
         9d:36:a5:a2:7b:a3:06:b7:3c:ed:c5:8e:e8:23:ce:b1:2f:1c:
         c0:f3:f3:9d:df:b7:80:ac:8e:13:fa:06:2d:5f:6a:83:18:af:
         e4:1e:5c:4f:0f:dd:2e:bf:c3:0b:66:2f:e9:0d:20:cf:51:23:
         10:cb:ab:6e:be:b7:57:71:80:72:d7:e3:2b:1c:8b:ed:3a:5c:
         75:a8:56:c0:df:f1:34:c2:ff:23:a9:70:fc:68:39:37:e1:e1:
         7a:74:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org