Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa
File:                     3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          l6aTQdyScpDw0dSZKch8CY1W4mAym1AmP/C+/R0VH0s=
Subject key identifier:   B9:7C:80:05:5A:0E:93:05:B1:36:AD:02:9E:B4:E9:BA:04:A6:2C:A1
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       0BE5E8F7681D55328B4FA39A986C9323493B2416
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa
Signing time:             Mon 08 Apr 2024 20:10:46 +0000
ROA not before:           Mon 08 Apr 2024 20:05:46 +0000
ROA not after:            Mon 07 Apr 2025 20:10:46 +0000
asID:                     262493
IP address blocks:        168.121.150.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e5:e8:f7:68:1d:55:32:8b:4f:a3:9a:98:6c:93:23:49:3b:24:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr  8 20:05:46 2024 GMT
            Not After : Apr  7 20:10:46 2025 GMT
        Subject: CN=B97C80055A0E9305B136AD029EB4E9BA04A62CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ae:0a:ae:19:c6:19:0e:b3:09:3b:82:b0:fe:
                    b1:d8:8e:ab:39:73:9b:c6:f0:17:f3:f0:95:6e:09:
                    c2:23:55:bc:9c:13:d6:d8:93:94:7b:60:42:8d:2e:
                    e7:1a:31:ff:ac:a9:bc:93:54:69:35:ed:01:e7:30:
                    c1:74:98:8b:cd:e5:bf:6c:f6:70:57:c8:37:d9:ee:
                    4e:7b:0f:4f:6d:1f:b2:10:da:c2:9c:ba:cb:6c:9e:
                    09:a5:57:37:9c:65:c1:4f:f8:fc:4b:ce:54:94:aa:
                    e5:69:3a:92:6e:53:81:cd:11:41:df:1a:74:c9:ee:
                    33:f5:b7:46:13:95:37:b9:cc:bb:f2:e0:d1:93:21:
                    91:13:8a:d5:83:a2:c1:35:54:7a:57:5b:e8:ad:04:
                    03:c8:9e:3b:1d:4a:5f:3f:ca:23:0f:17:21:72:b5:
                    89:1d:13:28:25:85:3d:9f:8e:19:f4:99:d7:72:9b:
                    7c:e1:36:76:6c:0c:41:17:aa:c5:5c:6d:81:79:a1:
                    c8:f0:0b:17:78:4d:34:2d:32:60:07:e5:bc:47:06:
                    8d:ab:0d:ee:c0:d0:bd:ad:b4:1c:50:00:27:8b:04:
                    c4:cc:a3:fa:4c:78:16:d4:4e:85:27:72:72:31:b3:
                    3c:bb:f5:a2:ed:f2:7b:c7:8b:14:0b:2e:7f:27:2c:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7C:80:05:5A:0E:93:05:B1:36:AD:02:9E:B4:E9:BA:04:A6:2C:A1
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3136382e3132312e3135302e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:32:1d:6a:33:75:b0:5a:18:ec:33:5a:9e:1d:3e:fd:92:a1:
         4c:0b:6c:1a:8b:7a:3b:c5:17:06:b0:ad:1a:4b:38:3e:87:ec:
         f3:ad:da:b7:ea:f8:f3:8f:45:00:1d:a4:b5:84:16:eb:0a:15:
         cc:0c:40:56:c6:38:22:cf:eb:5f:63:7f:cd:0b:0b:9d:ed:43:
         78:22:d6:61:a7:ea:d3:52:46:a2:69:f1:eb:61:35:7e:eb:a0:
         86:f0:5b:84:36:0d:53:37:1f:81:c6:8c:df:2e:3a:c2:89:92:
         bc:4c:cd:1a:d9:c8:77:7d:1d:af:b1:1d:38:25:5a:64:4b:84:
         3a:df:65:ba:af:85:07:75:d5:4b:73:14:b5:ba:87:66:e9:8e:
         97:3a:be:ba:eb:ed:b9:e8:8b:23:c1:4b:45:27:2f:4d:0b:12:
         0f:00:d7:f7:67:b1:85:86:7b:7f:97:e1:5f:75:b1:9f:6a:eb:
         d8:d4:ab:d8:1c:10:d8:b7:91:f0:f2:85:e7:2d:63:43:ac:36:
         9f:6d:96:35:4d:e2:ee:d7:03:9d:98:eb:3f:1e:ad:dd:8e:cd:
         ea:ff:5b:2a:0d:cd:7e:39:ad:4f:68:df:14:29:56:d6:5b:79:
         b7:16:f6:b4:64:a0:70:33:89:8f:01:3c:2b:63:66:fb:70:61:
         2e:6a:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org