Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136392e302f32342d3234203d3e203631353834.roa
File:                     3137302e3235342e3136392e302f32342d3234203d3e203631353834.roa (raw, json)
Hash identifier:          QdrTHhnK2lz4Ix7fcQXM1Jlsurit205bC+1fOvLpFto=
Subject key identifier:   F7:8B:83:E0:AE:03:75:09:BC:F2:BC:65:03:28:37:E1:5B:3B:4D:21
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       192156930377A8C6D95BEB168E6107CE708C1F01
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136392e302f32342d3234203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:33 +0000
ROA not before:           Mon 10 Jul 2023 19:01:33 +0000
ROA not after:            Mon 08 Jul 2024 19:06:33 +0000
asID:                     61584
IP address blocks:        170.254.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:21:56:93:03:77:a8:c6:d9:5b:eb:16:8e:61:07:ce:70:8c:1f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:33 2023 GMT
            Not After : Jul  8 19:06:33 2024 GMT
        Subject: CN=F78B83E0AE037509BCF2BC65032837E15B3B4D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:f9:7c:28:15:42:07:e1:34:60:e3:df:0c:
                    38:2d:53:0a:f8:37:14:79:32:05:03:a6:1c:e0:8a:
                    43:f6:77:f6:7b:a9:24:d5:0f:3d:eb:48:76:3b:f2:
                    c9:4f:35:90:85:79:3a:b5:2a:46:ff:a2:60:90:ad:
                    9e:8d:55:23:cb:ae:d8:d5:b9:42:ec:f6:12:db:bd:
                    1b:05:b5:90:eb:58:33:52:80:78:74:3c:f7:ce:28:
                    24:1c:2b:ac:ce:81:2e:9e:94:fa:13:57:d8:c4:cf:
                    e5:25:04:f1:1a:58:9e:b5:4d:c3:6c:e0:f8:09:6a:
                    a4:8b:ce:a4:88:51:65:1f:c0:06:ed:9b:48:ad:57:
                    2d:80:94:9a:3b:05:c2:0a:d6:ce:e1:0d:48:f8:8e:
                    6b:e9:68:c3:f1:4b:e6:f2:f7:2f:18:76:d1:b5:e1:
                    22:7a:a7:1a:fe:6f:e9:75:44:4a:54:54:d8:58:e8:
                    eb:95:2c:7c:3f:7b:9f:c2:6f:6f:4c:a4:8a:1b:d3:
                    40:e2:9a:49:80:72:38:8b:e1:f3:80:31:31:aa:51:
                    bc:b2:97:62:94:4a:4c:8c:ee:77:85:e9:ae:95:fa:
                    f5:fa:1a:5f:b9:51:67:b4:fb:78:86:16:b6:6d:5c:
                    97:13:94:ba:0b:00:ae:b4:fd:f6:a6:24:ce:87:8f:
                    ef:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8B:83:E0:AE:03:75:09:BC:F2:BC:65:03:28:37:E1:5B:3B:4D:21
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3136392e302f32342d3234203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:60:96:71:60:6f:c7:06:bd:8d:6f:76:a5:f3:a4:d1:a5:0b:
         3a:97:ac:cb:68:6d:fc:23:9f:b0:8b:e9:67:4b:a7:27:a1:7c:
         ba:d6:3a:e2:62:50:96:60:b5:72:3e:e0:a3:68:25:41:12:37:
         2b:e2:56:28:bc:14:11:4f:e5:79:45:aa:52:70:ff:1a:2a:be:
         ad:20:a1:d5:fe:e7:50:7b:97:82:1f:3f:81:91:76:9f:98:e5:
         68:34:dc:0b:1a:56:67:b8:a0:26:32:05:c5:da:24:97:da:41:
         06:46:5f:50:61:75:b2:38:9d:c0:7a:45:26:a2:c4:8d:af:d2:
         9e:bd:f8:43:ca:99:2d:30:2e:8a:92:5c:2e:c3:80:50:5a:d5:
         d6:fb:49:b5:36:e6:b1:52:a1:c6:71:8d:09:23:d3:f5:e6:41:
         13:4b:58:ea:e1:76:22:9e:fa:c9:76:6b:07:b7:9d:40:71:15:
         5a:5e:bb:b8:fc:33:ec:cd:ef:df:4a:68:aa:98:1d:a9:1f:6b:
         02:fd:35:cd:76:0d:34:ad:24:5d:89:41:7c:97:b5:dc:15:c0:
         63:2e:10:51:e4:bf:36:da:98:5e:a9:96:85:45:c8:48:0f:c5:
         f7:fc:28:19:e7:64:ea:ec:62:7b:93:c6:16:5e:03:71:86:7f:
         f7:65:41:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org