Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e20323633363635.roa
File:                     3137302e3135302e3230342e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          /pzDMAa4tmeIoT7H+SqA/DhfPYQCmEDyRHI7NSXaGTE=
Subject key identifier:   6A:93:56:9E:DC:92:8C:0B:CC:88:2F:1A:65:B6:84:53:02:07:D4:A5
Certificate issuer:       /CN=9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A
Certificate serial:       062884B98D12FAE3E4A6B0FD8378A6F73AC69E45
Authority key identifier: 9A:F4:CE:ED:37:1E:AA:FF:F9:2E:8E:45:A5:53:7E:65:10:B1:EF:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e20323633363635.roa
Signing time:             Thu 13 Oct 2022 21:19:40 +0000
ROA not before:           Thu 13 Oct 2022 21:14:40 +0000
ROA not after:            Thu 12 Oct 2023 21:19:40 +0000
asID:                     263665
IP address blocks:        170.150.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:28:84:b9:8d:12:fa:e3:e4:a6:b0:fd:83:78:a6:f7:3a:c6:9e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A
        Validity
            Not Before: Oct 13 21:14:40 2022 GMT
            Not After : Oct 12 21:19:40 2023 GMT
        Subject: CN=6A93569EDC928C0BCC882F1A65B684530207D4A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:00:af:40:e0:99:e8:e7:9f:72:87:86:5d:
                    c0:3b:92:f0:7b:d8:f1:b9:9e:42:d4:da:1f:25:60:
                    26:4a:a6:3d:7e:62:2b:6c:a7:24:fb:a5:e4:56:92:
                    c1:a5:94:fc:e2:e0:d3:5f:16:b6:35:c7:55:48:03:
                    52:a7:2b:09:ba:f0:e7:18:07:cd:34:1a:b9:f1:12:
                    60:ff:d1:98:05:be:55:76:26:b1:94:a2:a6:05:2b:
                    3b:cc:2e:43:a1:8a:d0:88:9a:99:4f:82:d9:05:16:
                    49:52:10:0f:f5:9c:04:10:a7:c4:24:0e:fd:80:68:
                    fa:3e:56:8b:2a:c8:c8:bf:9c:9f:bb:64:d9:be:f8:
                    42:31:3b:a7:10:72:21:37:e1:93:69:04:55:45:d5:
                    2c:89:bc:8c:dc:1b:c5:df:9a:7b:a5:d6:c6:96:75:
                    64:02:f9:0d:0b:d6:bb:43:aa:03:6f:97:1f:af:c0:
                    ed:e1:bf:7a:bb:f5:db:e9:13:d4:1f:36:80:d5:c8:
                    73:cb:58:ee:68:d1:dd:97:69:79:3c:9e:6c:05:dc:
                    d4:f2:0e:82:cd:6c:d1:c0:6f:1f:8e:4d:b4:34:d3:
                    6e:57:58:72:cb:91:19:8f:da:88:eb:b5:85:a6:62:
                    22:1c:09:c6:cc:d6:f3:df:fe:49:cc:7c:83:b2:e7:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:93:56:9E:DC:92:8C:0B:CC:88:2F:1A:65:B6:84:53:02:07:D4:A5
            X509v3 Authority Key Identifier:
                keyid:9A:F4:CE:ED:37:1E:AA:FF:F9:2E:8E:45:A5:53:7E:65:10:B1:EF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF4CEED371EAAFFF92E8E45A5537E6510B1EF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:56:49:c8:c8:47:0b:22:12:76:82:43:43:e8:6b:0b:e2:ac:
         36:5c:73:54:14:cb:41:06:38:65:7a:fe:e5:7e:3c:6a:bf:91:
         a8:0c:de:e3:0a:1d:93:4b:00:ed:26:be:64:44:63:4f:00:61:
         a5:f1:b0:49:e3:10:4b:42:c3:6c:ca:dd:8c:13:ed:d2:41:f7:
         1d:a9:5f:0c:14:57:d6:39:02:bf:f7:76:e4:d1:f8:eb:a1:f0:
         86:97:61:3e:6c:74:68:7c:61:ec:03:07:19:2f:96:cb:e1:6c:
         4b:67:58:4c:d2:6f:af:48:86:96:0b:7b:b0:d2:0a:7a:86:6d:
         ac:02:61:67:5f:a6:51:7c:76:a4:32:d9:ef:0e:9f:05:db:ee:
         ca:b3:bb:6f:b2:0c:c2:e9:a7:da:95:21:9d:00:ce:f5:1b:e2:
         07:1a:92:f2:25:b5:31:7e:60:fe:46:93:ba:20:0b:1d:80:03:
         91:b2:82:3b:51:7f:59:4e:2d:53:b1:a9:db:ff:4a:f5:3c:bf:
         f3:5e:f5:1e:5b:b7:f0:ba:c5:03:dd:ff:76:ae:31:6a:32:31:
         cf:c3:2e:b2:43:01:f1:46:0f:3b:0d:34:f7:a5:95:96:40:87:
         69:0d:dd:b0:59:59:2b:f3:b1:f2:7a:cc:de:cf:ff:76:2e:13:
         0a:46:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org