Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37342e302f32332d3233203d3e20323632353639.roa
File:                     3137302e38322e37342e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          4OZ1d5svEHxYvIOTTrJYqLxci/6bvjXKl7w7z+6J8PI=
Subject key identifier:   1F:51:DF:CB:B6:A6:26:23:4E:F4:82:8D:68:78:9F:D1:E3:82:94:8C
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       07FA8AC8691E8F3236BD5D3D2B5DBBDA3C583C09
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37342e302f32332d3233203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:20 +0000
ROA not before:           Sat 30 Mar 2024 00:56:20 +0000
ROA not after:            Sat 29 Mar 2025 01:01:20 +0000
asID:                     262569
IP address blocks:        170.82.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fa:8a:c8:69:1e:8f:32:36:bd:5d:3d:2b:5d:bb:da:3c:58:3c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:20 2024 GMT
            Not After : Mar 29 01:01:20 2025 GMT
        Subject: CN=1F51DFCBB6A626234EF4828D68789FD1E382948C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:19:4b:21:15:7b:19:6b:d0:7a:1f:ba:5f:
                    56:38:d7:3b:b5:04:a5:eb:63:f3:d3:03:ea:7c:9f:
                    dc:3b:8b:1e:12:5c:d1:02:c5:fa:e6:e1:e8:1d:b5:
                    aa:11:d2:e6:fb:51:41:4f:3e:74:52:35:b0:07:89:
                    f9:37:7e:2e:c8:9c:d7:4b:27:a6:f2:ee:50:77:57:
                    10:16:57:5f:e8:94:dc:1a:0c:f6:59:b0:53:aa:af:
                    82:48:bf:00:ae:d2:0f:5d:b9:cc:e2:9a:88:e0:63:
                    5d:dc:4b:68:11:00:2f:d1:5e:5f:a0:19:84:b7:f7:
                    60:88:d3:c1:73:8b:48:82:e6:48:75:17:59:45:7f:
                    0d:b3:69:e2:6d:cd:86:62:6e:89:de:43:04:d8:38:
                    9b:0d:96:f5:3e:59:f6:9e:84:6a:df:3f:23:d5:fd:
                    6a:7e:31:ef:55:cd:08:fb:cf:5d:b9:d0:4b:ec:6b:
                    5d:b2:9e:53:ce:95:c7:e7:64:82:66:f5:6f:01:71:
                    26:57:2a:db:77:28:39:34:00:ea:16:47:ed:79:8b:
                    cb:1e:37:27:8a:79:5f:e1:dc:f0:10:c5:06:17:4c:
                    4a:0c:c0:01:64:c8:3c:a7:45:4b:b7:ad:38:bb:63:
                    dc:16:d4:7a:b8:35:ad:68:3b:10:0b:48:f5:a5:66:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:51:DF:CB:B6:A6:26:23:4E:F4:82:8D:68:78:9F:D1:E3:82:94:8C
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137302e38322e37342e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:36:62:a5:7b:e3:ab:1e:b0:ad:c6:16:56:07:1d:4d:13:
         ee:00:be:4d:97:c7:f6:ff:81:80:08:ec:6c:37:1c:57:29:ca:
         8d:b8:5c:27:54:37:e4:8a:06:d1:9f:9d:a2:be:9a:13:af:12:
         f4:09:33:9a:21:ad:b7:b2:85:32:05:1c:38:58:48:47:41:78:
         cd:45:ce:62:fb:1c:a2:61:62:98:16:52:68:4f:13:a7:59:4c:
         c7:8a:8f:d7:5b:4a:fb:e1:39:c2:97:30:c1:2f:a5:dc:9b:d1:
         1d:e1:91:53:86:ec:c0:27:ba:19:17:56:c2:7b:eb:e0:ba:d5:
         77:f0:09:84:4f:2b:66:48:2d:24:7c:92:6b:c5:e0:f2:b0:35:
         2b:69:ed:c3:3e:3a:eb:1c:ca:62:b8:c3:bb:4f:5a:e2:d5:88:
         22:a1:3e:9a:fd:3c:e9:7f:33:bb:ba:ae:1b:e9:6a:68:c0:52:
         ca:a7:c3:46:0f:ce:e8:32:f2:62:0e:72:ec:11:b3:f8:55:ef:
         a5:dc:67:35:2f:d6:0c:8d:b9:b3:99:22:f2:5c:a2:01:02:33:
         8b:71:3e:c1:11:44:29:25:2e:9b:bc:d3:34:bc:f6:85:cf:94:
         fe:e4:fb:da:cd:52:bc:4a:71:e0:a0:06:fa:59:bb:47:07:fb:
         9a:a0:64:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org