Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/0/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa
File:                     3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          DkiU8p0D4id+j9UCnZxwWiQgrK17G5bQVpyrmTQBTQ8=
Subject key identifier:   9F:67:4E:43:3A:2A:B6:95:41:81:BA:92:BC:5D:3B:D5:8E:9D:DE:C3
Certificate issuer:       /CN=6E1F49096585EA92A58DE69B3A32E8ACDD07E7CE
Certificate serial:       60BD29B0510F8316A51416BCFAC458B13104A5A2
Authority key identifier: 6E:1F:49:09:65:85:EA:92:A5:8D:E6:9B:3A:32:E8:AC:DD:07:E7:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1F49096585EA92A58DE69B3A32E8ACDD07E7CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/0/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa
Signing time:             Mon 26 Feb 2024 17:00:00 +0000
ROA not before:           Mon 26 Feb 2024 16:55:00 +0000
ROA not after:            Mon 24 Feb 2025 17:00:00 +0000
asID:                     61918
IP address blocks:        170.150.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bd:29:b0:51:0f:83:16:a5:14:16:bc:fa:c4:58:b1:31:04:a5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1F49096585EA92A58DE69B3A32E8ACDD07E7CE
        Validity
            Not Before: Feb 26 16:55:00 2024 GMT
            Not After : Feb 24 17:00:00 2025 GMT
        Subject: CN=9F674E433A2AB6954181BA92BC5D3BD58E9DDEC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d6:16:ab:03:f3:ae:56:ce:f9:12:5d:6c:3e:
                    ac:53:e7:2e:8c:64:b2:0f:d9:45:6e:7e:ee:a2:b8:
                    ca:11:00:40:3a:16:76:ac:eb:fc:79:a6:ae:23:69:
                    4c:93:4b:4c:6f:b4:07:3d:c8:eb:75:b2:95:86:b7:
                    e9:d0:4f:27:95:a1:83:80:98:6c:79:35:c3:a1:a6:
                    74:91:ed:0c:21:a3:aa:5b:46:b9:13:4f:5b:a6:85:
                    da:5b:a3:51:30:c7:78:3c:59:97:46:fd:f6:c6:03:
                    c9:49:16:e4:06:65:ec:e6:d2:ef:64:53:d9:ad:87:
                    47:ef:27:cd:91:88:82:d8:e1:94:23:c1:9c:63:f7:
                    81:46:ae:8f:9e:c9:70:90:d9:be:a8:c5:68:54:22:
                    7a:df:7a:c6:ee:e5:47:5b:f6:47:94:a0:18:34:8d:
                    4c:51:99:8e:ab:15:18:28:8d:96:28:8f:9e:9a:9e:
                    62:f3:02:a4:f1:57:e8:54:dc:c2:64:59:09:58:24:
                    97:b9:62:83:c4:19:27:cc:04:e8:1e:5d:76:58:89:
                    ca:22:3a:c4:e5:d9:1e:21:55:95:d1:98:80:80:bb:
                    bb:ea:82:96:10:76:00:59:c7:1f:65:06:af:dc:26:
                    a7:64:78:2f:42:e9:bd:a4:3e:f5:ad:ac:a0:4e:aa:
                    3a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:67:4E:43:3A:2A:B6:95:41:81:BA:92:BC:5D:3B:D5:8E:9D:DE:C3
            X509v3 Authority Key Identifier:
                keyid:6E:1F:49:09:65:85:EA:92:A5:8D:E6:9B:3A:32:E8:AC:DD:07:E7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/0/6E1F49096585EA92A58DE69B3A32E8ACDD07E7CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1F49096585EA92A58DE69B3A32E8ACDD07E7CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/0/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ac:f2:2d:4d:4a:3c:de:1a:72:1e:b2:79:0a:92:c2:ff:03:
         1e:2a:5d:ab:c9:ad:a7:1d:ad:d8:dd:f7:17:0b:fd:9c:38:b0:
         bd:be:12:dd:30:25:7e:70:15:f2:6d:29:2c:7b:08:4a:7a:06:
         86:aa:4e:8a:76:c0:9e:c6:0d:42:16:b1:d2:43:1a:3c:c8:5b:
         75:99:01:40:2b:15:29:26:62:70:9f:a0:b6:84:bc:fd:4f:1a:
         f3:2d:fc:cf:60:c7:32:36:45:f8:ec:8a:39:7c:af:53:9d:04:
         07:1e:c5:2b:eb:d6:8b:15:35:35:c3:dd:19:b3:ae:b3:4c:ff:
         96:a1:aa:64:97:44:c7:61:eb:0d:7a:c0:59:ee:32:8e:d9:8c:
         52:4f:85:8c:71:0f:60:ed:d7:f8:0b:40:89:5c:cd:58:07:58:
         4e:46:4f:ac:d7:5f:d6:f4:d3:58:33:e1:05:80:b5:3e:f8:32:
         8c:1d:24:f6:b8:a8:be:7a:13:ab:2b:30:6c:6a:9f:45:30:59:
         77:4e:74:32:3b:c1:6f:9f:4c:66:48:8a:cc:f1:c9:a5:42:4f:
         af:b6:f5:d1:df:d0:49:6f:2e:85:60:2b:c9:d9:fc:af:ea:a8:
         e2:39:d5:18:5d:c5:9e:2b:19:c9:e5:26:73:6b:95:dc:be:d7:
         1a:20:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org