Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3137302e3135302e3131322e302f32322d3232203d3e20323633363635.roa
File:                     3137302e3135302e3131322e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          7gexmmZcSCYX7b/DGBqy7ePICmKjvNrOhYg81+aK2lw=
Subject key identifier:   7A:44:2B:F3:27:23:53:D3:1A:AA:6A:59:03:7F:A9:23:D2:D9:CC:FE
Certificate issuer:       /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial:       447449E3FC0C9AFF1A688DE006808920A63960EF
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3137302e3135302e3131322e302f32322d3232203d3e20323633363635.roa
Signing time:             Mon 08 Apr 2024 20:11:32 +0000
ROA not before:           Mon 08 Apr 2024 20:06:32 +0000
ROA not after:            Mon 07 Apr 2025 20:11:32 +0000
asID:                     263665
IP address blocks:        170.150.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:74:49:e3:fc:0c:9a:ff:1a:68:8d:e0:06:80:89:20:a6:39:60:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
        Validity
            Not Before: Apr  8 20:06:32 2024 GMT
            Not After : Apr  7 20:11:32 2025 GMT
        Subject: CN=7A442BF3272353D31AAA6A59037FA923D2D9CCFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:65:62:0a:a4:da:05:47:27:9a:9e:8d:0c:
                    13:c9:4c:11:a0:ff:ff:14:ba:db:cb:92:3a:81:f1:
                    7c:ef:9d:c0:4c:bc:41:ad:d6:99:3e:d2:7f:12:b4:
                    71:57:5e:0f:38:42:09:96:ec:5d:b7:86:af:50:18:
                    e4:a2:64:69:3e:ed:25:e2:08:29:ff:c8:28:9c:cd:
                    c7:f8:aa:58:31:5c:9b:a0:f8:58:99:4f:08:83:c9:
                    ad:1c:36:37:3b:d0:fb:40:3a:4a:07:69:8d:64:e7:
                    be:a0:cd:e1:da:20:c4:59:04:c3:51:28:85:39:ea:
                    b8:a4:b5:8d:d0:58:ae:56:66:ab:19:58:cf:e7:57:
                    03:f3:6b:92:8c:4f:ad:b2:6d:8c:ca:dd:7f:02:8e:
                    09:7c:57:61:a2:74:e5:85:22:d2:25:e4:03:65:b5:
                    7c:40:47:2d:82:6d:82:09:0a:f9:6e:0e:93:fa:bc:
                    d1:48:d5:1a:a5:b0:3e:5d:47:03:23:94:d9:0a:29:
                    de:c9:24:56:13:36:dc:fb:b4:20:0c:28:93:96:6f:
                    35:11:ba:4b:82:0c:ed:04:cd:fb:83:4f:db:80:5c:
                    e9:87:fa:b6:e4:f4:38:54:cd:b7:e4:b0:d4:9c:44:
                    1c:cf:b6:db:43:ab:54:07:aa:cf:78:7a:7c:65:62:
                    0b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:44:2B:F3:27:23:53:D3:1A:AA:6A:59:03:7F:A9:23:D2:D9:CC:FE
            X509v3 Authority Key Identifier:
                keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3137302e3135302e3131322e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:a4:b0:ab:40:31:fb:10:df:5c:7a:da:19:ff:5c:7d:dd:b9:
         4e:65:7c:f6:27:80:46:f8:c1:e8:8e:ba:25:d9:fd:a4:51:bf:
         f6:f1:4b:d3:eb:dc:b1:f3:ef:26:0a:e2:3d:e9:96:a2:8c:d6:
         68:9d:51:a4:9c:f5:d1:9c:4c:c5:15:c8:61:3d:10:11:bd:f3:
         3e:4e:89:e5:34:bb:54:71:83:46:29:d2:bd:51:6e:ba:73:6c:
         dd:99:5d:21:05:19:9f:f5:fd:2f:b2:81:b4:54:21:8f:59:80:
         e5:d6:8e:9f:90:d9:ed:df:fc:55:68:79:0b:f8:59:92:49:55:
         f5:a6:9c:f1:7a:04:ac:1b:1b:d3:e1:76:73:ee:e7:9a:5c:05:
         89:7b:f3:fb:c7:7f:86:62:0f:0b:14:2a:bf:08:c1:27:c5:53:
         6c:19:7e:ff:15:fb:69:fa:ab:f5:38:3b:23:6e:94:c9:95:81:
         fa:90:f6:b6:07:ef:5a:b6:37:bc:f8:99:85:c6:aa:88:a1:bc:
         6f:e0:8f:56:79:b6:1a:65:01:e1:1d:21:9b:ed:ae:f7:7d:a7:
         cf:a3:bf:76:5f:46:83:f3:d5:b6:f0:db:c8:a1:09:ea:b9:e5:
         95:65:8a:61:4a:d9:1d:14:52:2d:d0:d3:2e:0c:5e:d1:e4:10:
         50:bb:1d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org