Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/0/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa
File:                     3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa (raw, json)
Hash identifier:          EIbnv4/WbqXVdd8WX53KYHsG39hw16dPEb3Tx6wV1pU=
Subject key identifier:   92:FD:C8:DC:39:4C:C1:EA:47:70:01:CC:FE:D3:BB:BD:AA:71:BC:C9
Certificate issuer:       /CN=93B22D1C8D79AC32084C436604802BA8B3A61E1F
Certificate serial:       26C2FE1E92F6912322CF1041CE842F934CB48F4A
Authority key identifier: 93:B2:2D:1C:8D:79:AC:32:08:4C:43:66:04:80:2B:A8:B3:A6:1E:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93B22D1C8D79AC32084C436604802BA8B3A61E1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/0/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa
Signing time:             Wed 10 Jan 2024 14:01:23 +0000
ROA not before:           Wed 10 Jan 2024 13:56:23 +0000
ROA not after:            Wed 08 Jan 2025 14:01:23 +0000
asID:                     265036
IP address blocks:        170.150.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c2:fe:1e:92:f6:91:23:22:cf:10:41:ce:84:2f:93:4c:b4:8f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B22D1C8D79AC32084C436604802BA8B3A61E1F
        Validity
            Not Before: Jan 10 13:56:23 2024 GMT
            Not After : Jan  8 14:01:23 2025 GMT
        Subject: CN=92FDC8DC394CC1EA477001CCFED3BBBDAA71BCC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:a9:08:21:cd:0e:0b:22:53:13:d8:44:55:
                    23:80:dc:a9:78:9d:50:84:b0:6e:c1:ca:ad:ea:56:
                    9d:95:77:10:0a:23:d2:f8:76:9b:66:59:1e:d8:f1:
                    33:32:e6:58:e9:3e:43:4c:f7:26:f3:b7:65:07:c6:
                    dc:8f:4a:e8:ca:d6:d2:06:84:a0:02:ba:19:f8:ae:
                    77:ea:c0:b3:e2:12:d9:07:a8:73:22:b3:74:0e:ef:
                    4f:d0:14:74:b2:55:81:9c:14:83:cb:45:d5:3e:88:
                    08:af:18:6a:13:19:c9:fd:c1:02:c0:1b:be:62:09:
                    c3:ea:dd:f1:f3:b9:43:2f:89:22:f1:f9:09:56:e6:
                    58:6b:2e:c1:59:5a:f9:d6:b3:36:c5:7f:95:53:c8:
                    02:eb:37:47:41:90:0b:e9:8c:77:a6:d1:45:f5:6f:
                    8f:22:05:93:23:cd:ac:8f:02:9a:88:60:cf:49:55:
                    e3:2e:b5:57:95:a8:cf:fe:31:27:9a:01:e3:7a:88:
                    34:36:8b:48:81:ee:95:49:0a:7a:ca:36:80:47:20:
                    f0:49:ab:f6:5d:97:c2:82:54:a7:e5:f3:5a:36:5d:
                    48:7d:39:0d:c8:c9:16:fa:d0:04:15:b1:63:62:ba:
                    19:30:4c:a5:49:22:12:31:dd:e1:f2:85:dd:7a:53:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FD:C8:DC:39:4C:C1:EA:47:70:01:CC:FE:D3:BB:BD:AA:71:BC:C9
            X509v3 Authority Key Identifier:
                keyid:93:B2:2D:1C:8D:79:AC:32:08:4C:43:66:04:80:2B:A8:B3:A6:1E:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/0/93B22D1C8D79AC32084C436604802BA8B3A61E1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93B22D1C8D79AC32084C436604802BA8B3A61E1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/0/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:2a:0d:b5:bc:3a:9a:25:19:8b:a8:cf:14:b5:53:e1:f5:76:
         9d:c0:09:c7:42:98:06:12:86:18:44:60:5d:57:81:da:27:2a:
         7c:f2:fa:4a:5c:bd:28:75:3f:7f:fb:ea:75:83:51:07:18:74:
         64:cf:db:4c:60:08:8d:a0:1a:38:3e:5c:c8:a5:ab:d4:8f:a6:
         2d:08:ed:10:84:75:b3:23:f5:3a:d1:0f:3d:1a:52:44:33:04:
         92:5f:78:95:49:99:a4:ad:b3:89:05:fd:fd:45:e5:ab:66:c7:
         0f:36:16:f1:72:a8:8f:fd:cf:98:e1:99:73:44:cf:b0:73:e7:
         08:cb:e2:03:cf:a7:70:73:f1:17:79:1c:36:5a:d9:85:15:02:
         f4:2f:84:3a:14:36:76:b4:80:14:fd:e4:cf:58:ec:b2:42:33:
         59:01:e9:ea:89:87:dd:7d:eb:25:b4:9e:8f:1a:8f:55:75:0c:
         79:4e:39:c7:69:05:f5:e7:0d:a5:75:aa:2d:98:c5:f0:cb:5e:
         33:5d:2f:8f:9c:16:ea:51:f3:43:1b:54:66:ae:4a:8a:80:d1:
         17:f4:59:75:4e:f1:78:2d:f1:47:43:58:79:74:cb:44:1e:66:
         c6:98:14:07:94:71:bb:cb:a6:0e:50:7f:6d:f3:ca:97:2e:c4:
         b4:28:e5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org