Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3230312e3135302e39302e302f32332d3233203d3e20323633303930.roa
File:                     3230312e3135302e39302e302f32332d3233203d3e20323633303930.roa (raw, json)
Hash identifier:          BsklibaumEGZvkOSAYVU57vNbBS0H6DQulygpysrqrg=
Subject key identifier:   22:E9:37:9D:AA:00:66:00:11:F2:C4:E4:DE:77:47:B7:D9:21:CE:92
Certificate issuer:       /CN=9669B55ACA2805661E847E4C5F8AC24659AC717D
Certificate serial:       4EEA0BE5DA91D0FDD8FAA55507625277DD08D571
Authority key identifier: 96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3230312e3135302e39302e302f32332d3233203d3e20323633303930.roa
Signing time:             Thu 01 Dec 2022 17:58:37 +0000
ROA not before:           Thu 01 Dec 2022 17:53:37 +0000
ROA not after:            Thu 30 Nov 2023 17:58:37 +0000
asID:                     263090
IP address blocks:        201.150.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ea:0b:e5:da:91:d0:fd:d8:fa:a5:55:07:62:52:77:dd:08:d5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9669B55ACA2805661E847E4C5F8AC24659AC717D
        Validity
            Not Before: Dec  1 17:53:37 2022 GMT
            Not After : Nov 30 17:58:37 2023 GMT
        Subject: CN=22E9379DAA00660011F2C4E4DE7747B7D921CE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:2f:7e:f0:d1:1c:eb:22:dd:5c:99:bd:30:
                    b8:74:3b:49:65:1d:6e:b9:48:e6:6d:3d:f0:98:ec:
                    9a:17:f3:4c:22:8f:cc:bb:c2:c2:2e:d5:9b:e4:ed:
                    7c:a1:3c:4b:15:82:af:5f:8a:e9:05:93:17:d6:f6:
                    2a:67:2c:0d:7a:4b:18:d0:81:50:98:ef:d6:70:b3:
                    da:7a:24:a6:cf:a4:79:9f:cc:17:a7:a7:b1:f6:e6:
                    92:49:99:59:3a:87:bd:b1:38:a4:c3:3b:17:a1:bf:
                    35:5b:a5:9b:46:98:f1:6c:70:cb:55:0f:c4:7b:6a:
                    d4:37:68:ca:d6:94:20:dc:61:18:2c:61:55:dd:b0:
                    96:0f:a4:06:ad:22:9e:da:7e:91:25:61:6f:9d:e5:
                    12:3c:d5:b9:80:6c:13:96:06:95:3c:55:6f:2e:ff:
                    6d:b7:58:0d:6a:2f:9e:6b:e5:6f:97:ab:e8:9b:f4:
                    51:d5:60:8b:21:aa:f4:14:37:09:72:e5:ac:97:64:
                    06:dd:fa:36:3b:60:7d:5e:bb:25:99:6d:c8:14:f1:
                    76:ec:c8:66:c9:53:ef:6a:71:8b:53:c2:7d:8e:21:
                    72:ab:12:55:6f:5d:73:d3:8a:26:aa:15:64:2e:21:
                    48:7b:ae:05:6c:c7:82:a9:61:93:2c:99:61:0f:d1:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E9:37:9D:AA:00:66:00:11:F2:C4:E4:DE:77:47:B7:D9:21:CE:92
            X509v3 Authority Key Identifier:
                keyid:96:69:B5:5A:CA:28:05:66:1E:84:7E:4C:5F:8A:C2:46:59:AC:71:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9669B55ACA2805661E847E4C5F8AC24659AC717D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KjQUzDPmgKjq5GUnKohcqcz1zrbUAXzruSTopEp7pHU/0/3230312e3135302e39302e302f32332d3233203d3e20323633303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:2c:2f:67:f2:45:47:72:d7:bc:57:76:0d:21:85:0e:3d:73:
         b9:99:96:2b:3b:5b:7c:fe:7d:f0:fe:d6:48:2c:26:16:e2:23:
         5c:f3:8f:cf:23:7e:74:2c:17:68:42:3f:10:46:f2:20:1c:3f:
         4e:bc:86:30:22:15:0b:71:8a:e7:93:6c:47:18:c6:f3:80:07:
         26:30:cb:88:8f:d5:17:24:c7:f9:42:39:50:2f:b4:8d:3d:d4:
         52:2a:65:b0:92:23:d8:b3:0c:c3:99:3d:05:d5:0e:59:7e:5f:
         34:c4:16:1f:8b:77:72:0a:d5:28:7f:4e:f2:1b:76:98:ea:72:
         62:b2:0e:17:c8:3f:79:01:2b:af:8b:35:fd:da:dd:89:62:11:
         f8:21:07:4b:11:99:5d:42:72:da:e9:48:ec:43:d4:b3:03:6a:
         f8:3c:b6:28:9c:25:23:cd:83:83:fe:0c:ef:72:e1:41:bc:a4:
         0f:1b:24:ec:b5:85:ed:02:90:4a:61:b4:be:5b:0f:ae:0a:c4:
         25:17:87:79:de:dd:17:6f:0b:b6:00:e3:d5:41:d9:33:8b:a3:
         38:4f:83:7e:37:46:3d:9f:26:ca:49:aa:61:c8:83:52:a6:5d:
         f2:39:41:75:05:b5:f1:2d:c9:39:ef:cf:1f:f9:7a:35:ce:e4:
         5b:05:3e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org