Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/3135302e3136322e302e302f31362d3234203d3e20323633333030.roa
File:                     3135302e3136322e302e302f31362d3234203d3e20323633333030.roa (raw, json)
Hash identifier:          aq4X8E3EAfHwCzWsfwvRI5KKwI+gzY5ik+wXq3Rtwxs=
Subject key identifier:   FE:D8:08:40:A2:F0:87:EE:19:83:13:4A:2D:68:42:5C:20:D0:B5:36
Certificate issuer:       /CN=2CE1F8738603CEBF287DD62540FEF561C1AF87C5
Certificate serial:       14C14F98CFEB5533149401171925E962D7FDDA3B
Authority key identifier: 2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/3135302e3136322e302e302f31362d3234203d3e20323633333030.roa
Signing time:             Tue 23 May 2023 23:51:30 +0000
ROA not before:           Tue 23 May 2023 23:46:30 +0000
ROA not after:            Tue 21 May 2024 23:51:30 +0000
asID:                     263300
IP address blocks:        150.162.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c1:4f:98:cf:eb:55:33:14:94:01:17:19:25:e9:62:d7:fd:da:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE1F8738603CEBF287DD62540FEF561C1AF87C5
        Validity
            Not Before: May 23 23:46:30 2023 GMT
            Not After : May 21 23:51:30 2024 GMT
        Subject: CN=FED80840A2F087EE1983134A2D68425C20D0B536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:40:69:27:76:02:7a:ea:50:31:e0:0b:60:
                    2e:eb:96:cd:31:d2:17:79:3e:7e:f8:de:bd:ad:c7:
                    d1:f6:21:85:2b:e8:7e:59:e1:46:6f:b2:8a:c1:98:
                    2d:3f:42:dd:c6:3a:5e:80:d6:4d:71:98:9d:37:62:
                    8a:25:7d:df:3c:5f:d5:26:66:77:c6:03:2a:db:41:
                    33:27:5f:5e:e9:be:b5:8a:a0:94:bd:2e:6c:a9:85:
                    18:a2:47:96:21:9c:6a:d9:c8:ef:b9:27:21:8c:78:
                    c8:c2:0e:31:89:78:31:c8:80:c4:d1:7c:13:8f:48:
                    32:91:31:e6:46:f5:91:51:c0:bd:eb:a2:4a:e6:a2:
                    54:9e:98:f0:6f:de:9b:97:76:57:f1:23:07:16:3f:
                    75:80:c0:0f:e6:a3:52:71:21:e4:8a:64:d1:4c:bd:
                    6a:46:4c:68:a0:7f:24:6f:3b:45:79:ce:b9:d4:23:
                    1e:39:33:4d:a2:b7:6b:07:85:0e:c0:ce:7f:2c:15:
                    b0:24:d0:22:44:5e:2c:be:12:fc:49:09:cd:0b:de:
                    12:dc:92:3a:89:e1:a5:7a:97:1d:4d:f6:54:ae:aa:
                    5e:cd:03:a1:fa:f0:fd:df:5b:ff:6f:2d:6f:10:c8:
                    d7:ba:55:40:a8:0e:c4:b6:8d:5e:94:da:6d:d7:d8:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D8:08:40:A2:F0:87:EE:19:83:13:4A:2D:68:42:5C:20:D0:B5:36
            X509v3 Authority Key Identifier:
                keyid:2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/3135302e3136322e302e302f31362d3234203d3e20323633333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:f5:13:83:c6:0b:f6:19:fc:ba:e7:64:4c:f6:00:b3:be:5a:
         79:e1:74:72:3c:30:c1:75:23:05:c4:9b:00:44:b3:3a:81:dd:
         70:2a:ed:54:20:f8:ef:cf:2f:c8:76:7a:ea:88:2c:0e:ea:40:
         02:6e:9e:09:83:56:98:1e:56:7e:29:c4:2c:8b:8c:d6:3a:90:
         9e:87:2a:8c:54:bb:96:e5:74:5a:cc:b4:de:d8:ae:c6:9b:4d:
         6e:a3:08:de:87:77:d2:a2:1e:34:1f:46:15:fa:96:05:53:6d:
         80:19:d5:3c:e9:c3:84:2f:16:8c:82:0e:db:3c:20:31:cf:1e:
         72:1f:b0:e9:a2:64:33:99:77:f4:1e:66:43:01:33:69:04:0b:
         c0:b3:e1:a3:fc:6e:2f:28:f6:5b:25:c5:ef:da:83:9c:51:db:
         64:0a:33:11:7b:f2:2e:66:c2:c8:75:1d:78:cb:56:d8:e1:bb:
         63:89:4d:ef:b3:f4:f2:63:3a:68:4a:88:33:54:5a:a5:d9:40:
         65:86:a4:cd:cd:38:77:6a:8d:ce:a5:14:f9:48:5a:42:b5:34:
         4e:2b:c2:0a:69:f7:ef:1c:2f:ef:9d:a0:39:e9:1c:4f:ec:36:
         08:2b:f1:b5:6c:bd:94:60:1a:a2:41:ad:05:df:e3:f5:29:cf:
         7a:b0:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org