Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/0/3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa
File:                     3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa (raw, json)
Hash identifier:          IWfGs+yD1FXuBciCou7MMbwOSpZbjE9mh4Tlm5eoV1w=
Subject key identifier:   5C:1B:64:AA:5F:B3:6E:5A:93:C5:A6:0F:63:47:D0:A8:C3:25:78:70
Certificate issuer:       /CN=6E1F49096585EA92A58DE69B3A32E8ACDD07E7CE
Certificate serial:       42231D1A883E377C95F0B44B9324421C35D7F126
Authority key identifier: 6E:1F:49:09:65:85:EA:92:A5:8D:E6:9B:3A:32:E8:AC:DD:07:E7:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1F49096585EA92A58DE69B3A32E8ACDD07E7CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/0/3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa
Signing time:             Mon 26 Feb 2024 16:00:00 +0000
ROA not before:           Mon 26 Feb 2024 15:55:00 +0000
ROA not after:            Mon 24 Feb 2025 16:00:00 +0000
asID:                     61918
IP address blocks:        170.150.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:23:1d:1a:88:3e:37:7c:95:f0:b4:4b:93:24:42:1c:35:d7:f1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1F49096585EA92A58DE69B3A32E8ACDD07E7CE
        Validity
            Not Before: Feb 26 15:55:00 2024 GMT
            Not After : Feb 24 16:00:00 2025 GMT
        Subject: CN=5C1B64AA5FB36E5A93C5A60F6347D0A8C3257870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:67:97:fe:ba:e8:f8:23:e8:86:24:6c:dd:15:
                    f3:74:4a:0e:78:c3:10:cf:ad:ec:0d:84:3a:a7:28:
                    f5:d7:20:32:81:f0:3e:a3:97:91:8e:40:9d:18:02:
                    86:27:58:22:06:7d:7b:3e:a8:7b:1f:bd:37:29:71:
                    44:27:e8:26:a6:f8:17:8f:94:2d:9d:2f:d9:8d:10:
                    b2:de:a1:da:38:83:a6:2c:58:07:11:b8:ae:cb:b9:
                    82:bc:92:60:80:c5:92:4f:2a:be:c0:36:d0:93:0a:
                    16:8e:46:aa:e4:6b:06:c6:cc:fb:3b:0b:4a:04:98:
                    1a:b4:86:80:f9:3b:43:b5:af:37:b2:fb:63:13:1a:
                    06:21:e0:68:ce:50:01:ea:6e:9b:52:d6:ef:7b:6b:
                    19:06:7b:44:88:e4:ac:ae:71:d6:5d:e4:da:81:84:
                    06:be:b1:c5:56:d9:89:fc:43:0b:4e:d0:9f:c8:66:
                    57:12:08:22:03:48:11:60:99:5a:b6:a8:c1:01:d6:
                    fa:9f:e8:e1:12:b9:6c:f1:b0:9b:d7:06:a5:ea:bf:
                    93:47:8e:37:3e:48:36:68:bd:44:ff:83:33:f8:11:
                    58:f4:28:9a:44:09:ef:f1:7b:af:48:c3:92:19:8f:
                    70:89:e4:9a:2a:c6:9f:ea:c4:2a:df:dd:72:f2:70:
                    25:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1B:64:AA:5F:B3:6E:5A:93:C5:A6:0F:63:47:D0:A8:C3:25:78:70
            X509v3 Authority Key Identifier:
                keyid:6E:1F:49:09:65:85:EA:92:A5:8D:E6:9B:3A:32:E8:AC:DD:07:E7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/0/6E1F49096585EA92A58DE69B3A32E8ACDD07E7CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1F49096585EA92A58DE69B3A32E8ACDD07E7CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/0/3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:70:e1:c8:db:6b:bc:0c:1d:36:97:e3:1d:96:32:78:39:a3:
         66:f9:ff:61:08:a5:93:2b:fd:32:46:f4:23:06:6f:c1:24:d4:
         f4:2a:6a:d7:82:4b:37:7f:d2:54:97:9f:86:3c:e8:50:43:78:
         c6:00:7f:83:c2:6e:51:04:3c:91:49:8e:94:b4:4c:25:72:26:
         e7:c9:88:7a:bc:50:a2:70:6c:ce:17:52:1d:f0:76:0b:05:a6:
         dd:03:07:20:5d:b7:49:9f:60:91:4f:a3:78:fb:9b:03:ae:d5:
         5e:6e:15:2c:ae:3e:2a:72:6b:10:ec:01:c4:3e:e2:cd:7b:f1:
         1f:d1:4c:a2:77:b3:84:1b:3d:b0:5f:eb:36:03:98:7e:dd:0d:
         de:ea:1b:f8:da:a3:24:1b:bd:6f:65:89:a4:14:8d:58:a3:45:
         74:a3:e5:73:8a:a8:11:fd:25:ce:c3:b8:27:a9:0d:8d:ce:0d:
         11:1f:84:ca:e1:49:30:57:ce:70:43:3c:dd:87:75:26:1e:a4:
         2e:7c:40:2c:f5:a3:8c:ad:59:21:25:d8:8f:39:4d:09:e1:0e:
         f4:6a:b1:53:5f:87:54:2e:23:e5:a4:f9:4b:b5:8b:d8:9b:97:
         d2:68:9f:c8:55:d3:58:7b:b4:e0:a7:67:8b:b7:53:e7:db:56:
         21:95:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org