Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3135302e37362e302f32322d3234203d3e203532393133.roa
File:                     3137302e3135302e37362e302f32322d3234203d3e203532393133.roa (raw, json)
Hash identifier:          r3qLdelA1NzoM4QhxWQwZp/VyrVIGG6SqCVYfooBAmM=
Subject key identifier:   1E:27:49:59:10:74:90:6B:65:62:76:3E:1D:59:B3:75:0C:6A:A0:9B
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       0E87C02E50F461B83EEBC9827781C3EF9DC183C3
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3135302e37362e302f32322d3234203d3e203532393133.roa
Signing time:             Fri 22 Mar 2024 18:30:17 +0000
ROA not before:           Fri 22 Mar 2024 18:25:17 +0000
ROA not after:            Fri 21 Mar 2025 18:30:17 +0000
asID:                     52913
IP address blocks:        170.150.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:87:c0:2e:50:f4:61:b8:3e:eb:c9:82:77:81:c3:ef:9d:c1:83:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar 22 18:25:17 2024 GMT
            Not After : Mar 21 18:30:17 2025 GMT
        Subject: CN=1E2749591074906B6562763E1D59B3750C6AA09B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:56:bf:b4:8c:b3:ca:5d:99:2a:d6:18:e6:fb:
                    c8:ae:58:11:dd:bb:0c:e0:5c:cc:c9:5c:73:80:20:
                    12:7d:6d:1f:de:61:d4:40:f7:cc:89:79:2d:ce:7e:
                    a2:33:d0:23:a7:8f:df:c6:a1:62:0a:1f:53:b9:15:
                    a0:1d:3e:d5:8a:f9:85:92:43:f1:5b:ca:99:c9:63:
                    e0:30:a4:81:70:ae:5c:1c:a8:3e:cb:a5:dd:9b:be:
                    b8:9e:e4:e9:51:34:d0:56:a4:99:8b:02:16:c7:38:
                    44:65:76:55:43:17:ad:8a:da:aa:cf:43:5e:26:26:
                    f5:f7:59:de:e8:83:00:1b:5a:70:a9:98:ec:96:bf:
                    31:98:e1:4e:70:ad:38:d2:44:a9:19:70:63:a1:a3:
                    74:e3:9e:e4:21:14:9e:ac:20:a8:6f:99:2a:b1:0e:
                    f7:53:b8:f4:0c:ff:0c:8d:35:3b:27:2a:0a:42:0c:
                    43:0b:c5:4b:a7:ea:eb:69:7e:f4:c1:27:75:07:db:
                    0b:38:98:0b:d4:4b:4a:0e:b7:fd:ac:b4:ee:9a:df:
                    91:7f:d3:9e:6b:92:35:5a:7d:a5:9b:29:fe:1c:d8:
                    c7:89:fb:24:5f:99:26:7f:9e:be:af:53:08:ff:fa:
                    2d:ef:b2:c6:21:35:c9:e6:9d:af:fd:7f:e6:4d:61:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:27:49:59:10:74:90:6B:65:62:76:3E:1D:59:B3:75:0C:6A:A0:9B
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3135302e37362e302f32322d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:6c:06:60:33:e7:fc:f0:4c:22:0c:e3:f5:eb:a1:19:7e:fa:
         1e:ef:15:78:59:8d:4e:2a:96:98:76:bf:8c:11:96:6e:ae:45:
         96:38:ff:8e:89:b7:5e:b8:20:ec:2c:31:11:53:d1:07:23:22:
         52:72:04:f0:15:6c:f4:06:3b:a6:91:08:5d:5f:e5:11:c9:72:
         e2:ea:e5:d1:49:75:92:7d:cc:08:bc:36:25:d4:fb:be:2a:f3:
         97:38:5c:1e:94:47:84:f7:95:c1:76:db:2b:a2:1c:86:6d:95:
         c2:15:7a:c1:2b:e3:54:4e:83:9f:98:56:f2:b0:a3:10:4a:6c:
         ee:51:48:7c:5c:71:e3:97:2f:95:1e:f3:bc:cf:98:6a:f2:32:
         9c:ff:df:2e:a3:4e:08:fd:49:74:8a:1f:f7:d5:9f:b5:c1:07:
         a0:36:0a:54:55:a9:bc:d2:17:c1:8d:92:5d:79:ac:1e:a8:11:
         4d:fd:d6:1f:12:0c:75:95:37:df:2c:7e:34:fd:17:39:ac:00:
         ff:44:d5:e2:f1:72:9d:c1:01:82:3c:29:05:7d:f5:7a:df:b6:
         68:64:a1:ac:e7:71:29:04:40:23:67:30:d6:8e:22:dd:d7:4e:
         44:98:62:6d:30:cd:8f:f6:8d:d6:fd:bb:3d:7a:86:08:51:76:
         f9:36:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org