Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235332e302f32342d3234203d3e203532353834.roa
File:                     3137302e3235342e3235332e302f32342d3234203d3e203532353834.roa (raw, json)
Hash identifier:          0JdphUlsFHwE+O49h2HuITsHo105v8F/WnWnuOPeFIY=
Subject key identifier:   80:21:30:D0:98:9B:FA:E7:91:41:4E:57:83:DC:97:63:74:A2:CB:50
Certificate issuer:       /CN=47BA6BB953DA3A2A66142690DBB7E840D669B5F3
Certificate serial:       067C94DA3497834CBB906D04BC06549218043C8C
Authority key identifier: 47:BA:6B:B9:53:DA:3A:2A:66:14:26:90:DB:B7:E8:40:D6:69:B5:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235332e302f32342d3234203d3e203532353834.roa
Signing time:             Thu 15 Feb 2024 20:44:46 +0000
ROA not before:           Thu 15 Feb 2024 20:39:46 +0000
ROA not after:            Thu 13 Feb 2025 20:44:46 +0000
asID:                     52584
IP address blocks:        170.254.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7c:94:da:34:97:83:4c:bb:90:6d:04:bc:06:54:92:18:04:3c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47BA6BB953DA3A2A66142690DBB7E840D669B5F3
        Validity
            Not Before: Feb 15 20:39:46 2024 GMT
            Not After : Feb 13 20:44:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:37:56:ed:ec:0a:dc:73:70:00:19:94:37:8e:
                    29:fb:7b:be:f5:a4:b4:78:76:5d:c0:be:bb:5f:cb:
                    0c:fd:6c:07:74:4b:b4:c9:48:e2:0f:fc:bb:47:00:
                    00:10:cf:46:06:4e:99:7d:cb:68:7e:50:58:e9:c8:
                    e1:97:c3:51:d6:1c:1f:c1:ff:4f:81:1a:2b:97:a5:
                    fc:10:37:00:01:b7:d3:1a:c9:b7:61:10:9b:50:13:
                    7d:7d:c8:e4:02:3e:bb:7d:3c:14:e3:fa:8f:a9:9e:
                    98:c0:6e:c3:8a:75:8d:e3:6d:ab:62:1c:c3:5e:97:
                    f5:ef:ef:65:64:07:08:58:7c:27:4d:6f:8b:3c:9b:
                    d7:f9:8d:c6:36:82:03:28:14:8c:b9:8f:50:61:e5:
                    fb:fc:06:48:3b:f3:2f:c8:e4:2e:8a:d7:fc:94:e6:
                    16:ea:3b:d5:14:c0:de:3a:0d:a3:d7:fe:cf:7f:ee:
                    44:a5:d3:de:76:ec:36:d4:32:35:44:04:dc:87:e0:
                    63:8b:fe:0b:4d:d9:e1:72:ae:5e:6b:2d:c4:af:b4:
                    3c:27:ae:b1:95:23:73:3b:0e:39:b0:2f:d7:9d:9a:
                    90:b0:65:a7:e3:dd:d0:12:e5:67:74:69:4a:e3:1b:
                    dc:b3:af:45:7b:af:82:e0:6e:c6:d4:5f:b2:2a:b7:
                    3b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:21:30:D0:98:9B:FA:E7:91:41:4E:57:83:DC:97:63:74:A2:CB:50
            X509v3 Authority Key Identifier:
                keyid:47:BA:6B:B9:53:DA:3A:2A:66:14:26:90:DB:B7:E8:40:D6:69:B5:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47BA6BB953DA3A2A66142690DBB7E840D669B5F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/3137302e3235342e3235332e302f32342d3234203d3e203532353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:fb:1e:83:0c:ed:95:b1:2f:1a:11:5e:57:24:83:31:f6:ef:
         72:9e:f3:61:a1:97:45:58:15:03:af:39:ee:78:68:1d:ba:c7:
         a9:41:34:d2:9d:3a:90:00:88:66:78:7f:95:4d:ec:2b:a4:ed:
         99:e2:6d:b1:69:a9:67:4e:44:8c:d7:e3:6e:1d:49:aa:bd:96:
         ff:ef:f2:82:ec:f4:7a:be:f4:b3:0a:64:7a:20:f8:75:8e:8f:
         f1:1d:0d:3e:6a:01:fc:d0:c6:c2:54:56:81:5b:2c:e8:9d:26:
         ad:28:b2:f4:96:67:4a:eb:b2:d3:76:51:c6:5a:08:e7:6c:f9:
         db:63:65:e2:25:0f:92:dc:f9:cd:e8:3c:9c:68:e6:fa:b1:9e:
         e9:b7:54:1a:b1:05:91:47:e8:76:c6:1b:c2:b1:ab:06:bd:e1:
         99:c5:a2:40:0f:60:d0:c4:25:dc:ea:88:df:a5:8f:a2:f7:d4:
         ad:9d:df:34:01:c6:3a:ec:19:ed:7d:28:63:52:be:34:4c:23:
         79:1c:70:3b:3f:4c:e5:94:7c:68:22:89:37:03:2f:97:30:36:
         26:88:19:16:35:38:a8:d7:c1:79:0e:bc:03:e0:45:14:8b:f1:
         6b:c7:b5:da:d4:16:85:df:a5:93:59:61:d9:88:d3:1e:11:7e:
         e9:f5:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org