Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa
File:                     3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa (raw, json)
Hash identifier:          qalKWSCjGCetPT3aMXJXQaHOvjzpnisbUyui+ewTGlA=
Subject key identifier:   EB:4C:2A:1E:AB:6B:5E:8F:5F:D3:5F:FF:19:C3:43:F2:1B:A2:C6:7F
Certificate issuer:       /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial:       0FFA98CB793432568EC9480A6E01CD7EE05D699D
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa
Signing time:             Mon 08 Apr 2024 20:11:30 +0000
ROA not before:           Mon 08 Apr 2024 20:06:30 +0000
ROA not after:            Mon 07 Apr 2025 20:11:30 +0000
asID:                     265039
IP address blocks:        170.150.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fa:98:cb:79:34:32:56:8e:c9:48:0a:6e:01:cd:7e:e0:5d:69:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
        Validity
            Not Before: Apr  8 20:06:30 2024 GMT
            Not After : Apr  7 20:11:30 2025 GMT
        Subject: CN=EB4C2A1EAB6B5E8F5FD35FFF19C343F21BA2C67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:10:f5:64:2a:2e:b4:82:c4:2b:09:3a:84:
                    55:ea:eb:6d:17:bf:ae:fe:14:e5:5c:35:47:50:ab:
                    92:27:1b:6a:64:4c:48:e6:c4:b6:0e:f2:ea:c4:eb:
                    a8:39:a4:1a:fd:0f:67:7f:78:89:bd:b2:7c:ee:c6:
                    ed:93:1f:88:57:88:76:fa:42:22:d2:41:16:ef:21:
                    b1:b6:ac:72:6c:d3:10:87:2a:41:f3:9e:49:15:94:
                    d7:91:e2:f5:b9:35:cf:eb:bd:22:c3:a2:14:c5:f3:
                    a2:f1:b1:7d:d5:ee:cb:7a:00:d8:5b:21:11:9b:02:
                    ad:b7:f8:20:67:a0:15:de:28:de:37:ae:5c:d0:8e:
                    b3:9a:9c:a6:79:f2:58:82:95:b1:91:b1:1a:cc:77:
                    67:c9:99:ac:a4:b7:9c:99:7f:28:75:26:be:98:0c:
                    07:8d:32:60:cf:01:b0:6d:4b:6d:fa:df:eb:f1:50:
                    a8:2c:8e:da:55:07:cf:44:ec:59:e1:19:8e:ba:4f:
                    ed:d4:35:e9:2c:e3:05:49:d1:3b:f2:68:da:84:2e:
                    79:80:c1:d8:72:ea:6a:ae:ac:89:4f:b6:31:b6:4d:
                    e8:c4:32:27:67:50:f7:0f:36:d0:15:ee:0c:fd:86:
                    f1:3f:6f:a6:86:8a:22:98:a1:68:c1:23:b0:fd:5a:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4C:2A:1E:AB:6B:5E:8F:5F:D3:5F:FF:19:C3:43:F2:1B:A2:C6:7F
            X509v3 Authority Key Identifier:
                keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:03:25:7d:1c:c1:d2:86:4c:eb:21:dc:16:c4:ed:df:e1:13:
         be:ef:d5:d9:9b:3b:55:41:ad:51:f9:c2:3e:5e:ad:da:fc:9e:
         0a:52:b6:89:9a:ab:fd:90:61:62:c3:02:c1:8c:4c:86:85:d4:
         44:d0:ca:59:ce:f4:4a:2d:59:1c:12:70:ed:42:08:70:73:9b:
         6f:a7:19:d3:bf:09:ba:11:38:4d:2e:ae:b9:a5:8f:68:71:0d:
         ed:c1:4b:5c:8b:45:59:c6:16:01:d3:90:44:c8:a8:3e:fd:c2:
         ca:4e:1f:fe:43:b3:d4:a3:bf:81:36:64:23:69:7e:50:ee:5e:
         db:29:40:ad:97:17:d6:85:bf:48:d6:b3:67:2c:41:4b:f1:23:
         14:79:9c:8f:fd:17:b4:ec:19:76:4c:21:c9:92:3f:90:95:2d:
         b3:c7:90:4c:68:be:b8:e1:c4:49:4e:c8:3b:62:fc:e8:b9:40:
         56:3e:40:7b:d7:9e:20:dc:ba:91:3c:94:98:c4:c4:4c:63:39:
         ae:5c:5b:64:0e:fe:fe:3e:6d:37:21:3e:f8:41:56:92:e1:1c:
         91:18:f2:01:8c:1e:81:2e:f8:e4:88:f8:3c:13:3e:b0:da:8a:
         56:15:18:ab:a4:03:f7:ff:9f:82:c6:15:61:d0:81:78:36:4d:
         c2:8e:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org