Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3137302e302f32342d3234203d3e203631353834.roa
File:                     3137302e3235342e3137302e302f32342d3234203d3e203631353834.roa (raw, json)
Hash identifier:          r+8Agw/yH4jeGoCsK3g3NqScv4cPLGzKyEwTl/AqFyc=
Subject key identifier:   73:40:57:A0:77:82:C2:62:AF:A5:72:96:98:04:FF:B5:20:43:44:EA
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       2A4820C93C1190628BCDE5D9805CF224AD7F13E6
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3137302e302f32342d3234203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:33 +0000
ROA not before:           Mon 10 Jul 2023 19:01:33 +0000
ROA not after:            Mon 08 Jul 2024 19:06:33 +0000
asID:                     61584
IP address blocks:        170.254.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:48:20:c9:3c:11:90:62:8b:cd:e5:d9:80:5c:f2:24:ad:7f:13:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:33 2023 GMT
            Not After : Jul  8 19:06:33 2024 GMT
        Subject: CN=734057A07782C262AFA572969804FFB5204344EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:6c:bf:9c:53:d4:8c:32:7e:6a:02:1d:9b:d7:
                    f7:0b:e5:39:10:d7:8c:66:bc:14:58:ef:af:f0:06:
                    01:d7:3a:34:cf:c4:33:1b:4f:36:03:3d:00:0b:70:
                    f5:18:02:64:39:0b:70:4e:39:83:b2:17:8c:7b:13:
                    00:34:a7:04:73:69:fd:4f:f7:3a:46:bf:eb:4f:b0:
                    71:94:7f:d9:df:2e:83:aa:6f:87:ca:fd:5f:25:af:
                    a9:7e:ad:fc:3b:4f:e8:29:4d:93:22:6f:26:dd:06:
                    2f:ee:7a:0e:7b:c0:06:09:89:62:dc:cb:08:87:f9:
                    01:4f:ae:e9:a3:f9:3d:86:1c:26:cc:2d:e6:f3:f4:
                    ee:15:cb:a2:55:18:c4:32:c4:f1:ca:63:c7:bd:4e:
                    5a:00:4f:d8:56:77:25:d8:a8:eb:43:9a:e2:38:22:
                    0f:73:13:0a:5b:bd:e6:31:ae:86:2b:cf:13:f3:c2:
                    16:90:0b:c2:32:32:7b:6c:c3:77:ea:68:5b:55:f2:
                    c2:de:8d:9e:1f:35:b2:6e:2d:7f:41:6a:46:56:f6:
                    28:65:1c:ce:a3:85:2d:ec:06:ba:8f:96:56:12:66:
                    da:7e:ab:33:46:35:aa:07:4b:1f:fe:69:dd:54:9f:
                    b0:20:86:2b:e4:f7:7b:1e:5d:b0:be:75:d7:99:27:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:40:57:A0:77:82:C2:62:AF:A5:72:96:98:04:FF:B5:20:43:44:EA
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3137302e3235342e3137302e302f32342d3234203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e6:a7:dd:92:ee:1a:90:60:95:30:de:fb:c0:75:c4:45:bd:f2:
         6b:eb:d8:5a:50:63:00:01:f7:2e:34:44:18:8f:75:7c:02:7d:
         31:fa:b2:60:ee:b4:a0:40:cb:c4:d5:81:13:91:58:f3:d3:00:
         ec:d6:b6:97:53:3e:33:26:83:4a:ba:68:6e:ed:37:bb:1f:16:
         db:ed:15:6e:19:63:bb:b6:4a:9a:db:73:e7:53:ea:cd:d8:d7:
         88:e7:dd:92:72:c1:48:ab:4b:cf:aa:79:2a:ba:79:78:1f:ed:
         d5:3b:c9:85:66:e3:e5:0b:78:49:18:15:71:ca:50:4e:cb:9c:
         53:c2:73:e6:34:17:e5:f1:04:a3:15:11:ef:57:3b:d0:d7:89:
         91:c3:6a:16:3a:65:59:a8:c5:99:f2:9d:cb:76:93:bb:29:e5:
         16:11:06:31:53:a0:3e:92:4a:af:84:a6:ee:43:23:3d:e9:06:
         35:88:10:58:1c:89:63:64:0a:73:75:14:53:16:52:4d:0b:7d:
         0d:2d:a9:72:a4:26:1d:15:a2:39:ce:2a:c9:4d:7d:f0:0b:5d:
         fb:14:20:62:28:11:df:a6:8e:cd:c1:8c:b7:b1:25:29:f2:34:
         26:f8:8e:0f:1d:f7:c5:ac:70:e7:ea:69:61:ef:c6:8a:ad:4f:
         a7:cb:c5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org