Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136382e302f32322d3232203d3e203631353834.roa
File:                     3137302e3235342e3136382e302f32322d3232203d3e203631353834.roa (raw, json)
Hash identifier:          lXA2RmJa3NYlk3lZasY8Uorzu6UopnivFt5Ega77a58=
Subject key identifier:   E9:4D:3A:BD:3D:BD:09:AC:B4:55:82:07:3F:9B:54:41:60:FB:A2:0B
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       4B6B63E41A51E33F7011EB677CB98747A8D5DFBA
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136382e302f32322d3232203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:33 +0000
ROA not before:           Mon 10 Jul 2023 19:01:33 +0000
ROA not after:            Mon 08 Jul 2024 19:06:33 +0000
asID:                     61584
IP address blocks:        170.254.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6b:63:e4:1a:51:e3:3f:70:11:eb:67:7c:b9:87:47:a8:d5:df:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:33 2023 GMT
            Not After : Jul  8 19:06:33 2024 GMT
        Subject: CN=E94D3ABD3DBD09ACB45582073F9B544160FBA20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:d4:21:07:6f:7b:16:5a:bc:ee:18:29:6d:
                    0f:9b:33:a8:33:6e:3c:6d:79:04:96:b9:dd:ff:5d:
                    87:7d:9e:82:9b:9f:ea:e5:67:f3:b2:53:50:f3:f2:
                    7b:6b:f2:f7:0f:c2:c4:0f:d1:ee:07:e4:df:8f:7f:
                    88:c2:8e:d4:6a:a9:f4:4c:0a:91:bb:b0:2a:a0:31:
                    13:54:3e:bd:76:fb:9e:f4:9c:64:62:4f:fb:90:f4:
                    72:96:1d:55:1f:0c:b0:7a:52:ab:f5:93:d2:45:15:
                    f2:bb:4f:d3:d5:2d:6d:71:66:0e:da:32:a2:b3:b6:
                    15:8f:d6:26:10:fa:14:c3:c5:79:21:5b:f3:61:69:
                    8c:73:8a:e9:5d:f7:13:3f:a2:bc:e1:aa:b1:e3:90:
                    5a:fb:21:8f:2e:32:bf:64:bc:17:9f:fb:55:4e:f7:
                    f4:b4:09:10:66:c8:fe:09:26:d6:dd:71:b8:53:5d:
                    ef:0f:b4:04:ba:e6:7c:2d:6b:ad:5c:ab:03:17:4e:
                    6e:7f:c5:f9:51:6b:8a:a7:a0:02:6a:94:13:c1:80:
                    b3:a0:1a:07:06:c5:15:db:46:ab:2b:2e:b9:57:c5:
                    a8:c4:27:4f:8f:55:79:32:fd:b1:45:b3:b7:5a:73:
                    bf:34:e6:4c:6b:ce:7b:12:f6:bd:f7:e9:36:0e:35:
                    95:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4D:3A:BD:3D:BD:09:AC:B4:55:82:07:3F:9B:54:41:60:FB:A2:0B
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136382e302f32322d3232203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:3f:a1:e7:d0:02:45:2c:e1:dd:21:2b:9a:38:20:95:0f:
         20:f2:d8:27:8d:a4:df:8d:36:26:e6:59:d2:e8:88:f7:4f:fa:
         71:b7:e2:7f:81:24:d6:90:79:4f:2f:98:3e:ea:83:ff:aa:5a:
         53:28:b4:29:93:c3:5b:c3:a1:13:61:3d:0c:ee:55:92:04:20:
         d7:dd:a9:68:7a:ca:c3:e9:4a:1b:03:36:33:40:da:5a:32:b9:
         4b:65:c6:97:09:7a:0c:73:1e:e0:4d:21:0f:69:f8:e5:5d:bb:
         ab:4f:8c:26:52:c2:93:1c:04:66:d1:68:6a:eb:9f:cd:6a:b9:
         6f:e0:2c:ec:ec:e4:76:a6:31:da:f3:83:fb:9e:42:38:56:3a:
         14:1c:43:ee:3f:5c:7b:52:b7:25:bb:56:6f:ed:67:a3:48:0a:
         a6:ec:43:93:27:d9:fd:0a:d2:cc:41:99:60:ae:54:22:8b:cc:
         6b:36:5c:0e:fc:80:05:e2:00:55:af:3c:f3:f5:b5:a6:88:8f:
         f2:ea:24:4b:5a:d3:48:31:d2:15:d2:76:63:62:0a:d9:19:84:
         b5:7c:ec:6f:db:fe:fb:26:d6:a1:85:77:13:80:d4:9f:cf:3c:
         17:bb:4b:df:fe:fd:3e:dc:c3:a3:c4:63:95:bb:ba:90:a0:48:
         de:a8:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org