Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/3137302e3135302e36382e302f32322d3234203d3e203238363336.roa
File:                     3137302e3135302e36382e302f32322d3234203d3e203238363336.roa (raw, json)
Hash identifier:          X1+jdjhJTWt9typX0Y16TkHkrFj1CvacTkacU+qv6JM=
Subject key identifier:   FF:08:96:6B:9E:45:62:1B:99:27:60:1A:BC:83:E9:7D:96:6D:A5:D0
Certificate issuer:       /CN=A9F6427C32C617D9FC68BBA56D31A88E88DAFF54
Certificate serial:       0D8DB6A8F54D6143A4BDF43585B1A44792685FA4
Authority key identifier: A9:F6:42:7C:32:C6:17:D9:FC:68:BB:A5:6D:31:A8:8E:88:DA:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/3137302e3135302e36382e302f32322d3234203d3e203238363336.roa
Signing time:             Thu 04 Apr 2024 08:55:05 +0000
ROA not before:           Thu 04 Apr 2024 08:50:05 +0000
ROA not after:            Thu 03 Apr 2025 08:55:05 +0000
asID:                     28636
IP address blocks:        170.150.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8d:b6:a8:f5:4d:61:43:a4:bd:f4:35:85:b1:a4:47:92:68:5f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F6427C32C617D9FC68BBA56D31A88E88DAFF54
        Validity
            Not Before: Apr  4 08:50:05 2024 GMT
            Not After : Apr  3 08:55:05 2025 GMT
        Subject: CN=FF08966B9E45621B9927601ABC83E97D966DA5D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:47:93:c9:ab:eb:3c:aa:00:90:53:06:3a:ab:
                    f6:f5:e0:7d:f5:58:4d:24:4e:fa:05:0f:e5:bc:84:
                    b0:7a:0e:14:30:31:ed:54:d2:a9:79:e3:5d:b0:c8:
                    54:f5:67:78:b9:7c:50:f5:25:bf:4e:03:0a:98:bd:
                    6c:90:7d:43:fc:83:c8:32:c9:f1:9e:71:39:8a:20:
                    96:40:12:5f:12:a4:14:51:8f:86:b6:20:5a:f2:eb:
                    5f:ee:9b:3f:a2:d1:93:bb:07:f6:ae:ce:40:01:19:
                    dc:68:ab:1f:32:f1:7c:96:53:cb:34:9a:a8:54:d1:
                    34:14:72:bb:47:42:44:b5:e5:a7:c0:cb:95:c5:0b:
                    04:82:2c:bd:75:cb:40:02:9b:49:5e:d3:b5:1e:2c:
                    36:f6:2f:d6:6f:7e:cb:95:be:c5:b5:4e:df:65:b3:
                    75:59:2f:63:e6:ed:99:b0:91:c0:2b:a5:04:48:01:
                    3b:e7:55:d8:4b:16:4e:53:82:f2:ec:80:a4:97:81:
                    c9:c3:57:64:d3:23:42:61:3b:d6:fe:f2:0f:bf:74:
                    c6:52:b7:2f:d0:a1:85:3f:68:81:d8:0e:dd:8d:7b:
                    b7:a9:14:07:e0:85:32:d6:b1:47:e5:2b:5a:01:00:
                    4e:1e:7e:92:61:aa:78:c1:9d:29:2e:4d:5f:12:ae:
                    31:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:08:96:6B:9E:45:62:1B:99:27:60:1A:BC:83:E9:7D:96:6D:A5:D0
            X509v3 Authority Key Identifier:
                keyid:A9:F6:42:7C:32:C6:17:D9:FC:68:BB:A5:6D:31:A8:8E:88:DA:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/3137302e3135302e36382e302f32322d3234203d3e203238363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:83:22:82:52:14:83:2b:90:10:e2:38:b0:1e:4a:e1:78:e9:
         11:57:35:c5:f1:0e:f1:e7:48:ef:6a:d4:83:11:69:bf:cb:23:
         a8:94:87:4d:97:7a:47:0b:9e:c5:86:e9:cc:9f:c5:86:87:1c:
         06:67:a3:f1:f4:04:5f:b5:43:ac:5a:60:7f:71:0e:a2:42:44:
         41:ec:4f:d8:9a:e6:d5:51:dc:68:3f:a6:96:38:3c:c0:a1:76:
         c6:cd:1e:9e:5d:c0:18:8c:f0:de:1d:d3:53:61:d1:29:4e:18:
         67:f2:c6:8d:74:19:c0:14:aa:f7:fa:c3:42:26:90:df:eb:97:
         74:56:00:3c:92:c0:ce:fa:b8:92:06:c8:9b:f7:81:79:e5:82:
         c7:da:89:07:0f:9f:ee:40:ae:53:bb:f5:8e:09:6c:81:67:2e:
         ae:33:17:c4:33:e0:39:d4:30:0e:73:ed:d1:51:fd:d7:e4:85:
         74:61:46:2c:e5:73:63:80:33:c7:06:c9:5e:a3:40:c8:55:60:
         18:22:78:44:55:b0:ac:ee:17:49:3b:04:71:cb:36:e8:2f:90:
         0c:23:64:e0:43:06:19:ce:5b:f9:98:db:b9:47:d1:c0:3a:f3:
         f9:27:be:d4:fd:58:8b:db:41:3d:ca:dd:ce:d5:fc:fb:cd:49:
         f9:4e:36:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-ams.rpki-client.org