Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/3137302e38312e3135302e302f32342d3234203d3e20323636343237.roa
File:                     3137302e38312e3135302e302f32342d3234203d3e20323636343237.roa (raw, json)
Hash identifier:          XJP9ymwkTja/Nqb0OW/sUTyPpyA8iXv4Cz8iFG80YD0=
Subject key identifier:   9D:6D:30:39:5A:13:F3:95:25:18:39:F4:80:FD:E5:39:10:34:C9:0D
Certificate issuer:       /CN=721116431679FAB6BE0B0061F03C820E31FF5333
Certificate serial:       304F4EBDB5ABDED9C0EDD09284E5CB79DBD72CB8
Authority key identifier: 72:11:16:43:16:79:FA:B6:BE:0B:00:61:F0:3C:82:0E:31:FF:53:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/721116431679FAB6BE0B0061F03C820E31FF5333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/3137302e38312e3135302e302f32342d3234203d3e20323636343237.roa
Signing time:             Tue 07 Nov 2023 13:02:37 +0000
ROA not before:           Tue 07 Nov 2023 12:57:37 +0000
ROA not after:            Tue 05 Nov 2024 13:02:37 +0000
asID:                     266427
IP address blocks:        170.81.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4f:4e:bd:b5:ab:de:d9:c0:ed:d0:92:84:e5:cb:79:db:d7:2c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=721116431679FAB6BE0B0061F03C820E31FF5333
        Validity
            Not Before: Nov  7 12:57:37 2023 GMT
            Not After : Nov  5 13:02:37 2024 GMT
        Subject: CN=9D6D30395A13F395251839F480FDE5391034C90D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:21:52:bd:ce:0c:68:4c:ca:83:e7:cc:3e:
                    7d:56:72:ad:90:29:09:0c:83:e9:68:03:0c:53:f3:
                    7d:e8:3a:3f:ab:28:20:e1:3e:a0:71:8c:f4:5f:c3:
                    e3:d3:ca:a5:44:88:1c:0d:bc:cd:51:b7:0f:59:f7:
                    ee:37:1c:c2:4b:04:bd:07:de:42:3a:99:5a:08:28:
                    6b:74:9d:77:e4:38:41:b0:f2:35:a2:07:c2:4c:5a:
                    ce:e4:2d:78:82:7c:4c:23:ac:2a:8b:6d:8f:b5:96:
                    0a:6f:c9:55:da:ce:64:2d:02:72:4d:00:fa:04:80:
                    6b:74:76:81:b9:5e:dd:e2:9f:0b:d5:76:63:da:fa:
                    63:3b:4d:ab:22:a3:9d:33:b7:b3:f0:d5:8d:c1:94:
                    86:ba:da:ce:27:de:1d:ef:6d:55:f1:88:cc:4f:2c:
                    16:ec:d4:20:a8:87:d0:fd:f0:8c:27:4f:ae:e7:b1:
                    c5:a9:0c:a8:8e:a8:75:96:38:9f:52:fb:65:69:e0:
                    bf:57:bb:6f:8e:e7:2e:f1:6d:56:e7:d5:38:cb:6f:
                    9c:06:a6:2a:b0:65:70:f8:fe:a2:ce:c3:fd:af:d0:
                    c9:14:e7:fa:bc:9c:e6:ca:2d:29:a6:60:f3:6c:a9:
                    c4:39:3c:82:80:3f:80:67:63:c5:9b:bf:d4:4d:f1:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6D:30:39:5A:13:F3:95:25:18:39:F4:80:FD:E5:39:10:34:C9:0D
            X509v3 Authority Key Identifier:
                keyid:72:11:16:43:16:79:FA:B6:BE:0B:00:61:F0:3C:82:0E:31:FF:53:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/721116431679FAB6BE0B0061F03C820E31FF5333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/721116431679FAB6BE0B0061F03C820E31FF5333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zn76wZ81BnekhPHmWFw65MS45777usuhysQBQQY5C8q/0/3137302e38312e3135302e302f32342d3234203d3e20323636343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:9b:36:fb:e1:ad:39:c5:0d:3f:10:de:8a:a5:67:21:ac:93:
         2c:6f:df:2c:bd:7b:cb:b1:da:a7:5c:47:c0:31:0f:d1:9f:fb:
         be:ed:47:e0:84:f5:c3:77:3c:b1:1a:29:96:58:d4:e0:5f:ac:
         ca:f2:9a:f5:3a:ee:aa:1e:4e:ae:b3:c9:92:3b:5b:c3:11:b2:
         09:7e:c5:23:92:fc:88:a0:17:2b:cc:d3:dd:b0:2f:df:94:5e:
         e1:64:20:24:0c:ef:e1:2e:9d:d3:d5:da:f9:9c:77:49:51:96:
         0d:85:e8:2a:72:75:5d:9f:c0:b0:0b:b2:28:da:46:39:a4:81:
         de:75:c2:38:d8:af:9d:96:d7:c2:c4:bd:9d:88:a2:34:99:07:
         37:37:3e:52:c6:32:cd:df:d8:5a:99:23:1a:b5:06:10:bf:15:
         ba:00:15:7f:43:bb:3d:c1:b1:16:34:6c:96:00:e6:9c:64:22:
         74:16:3d:06:0c:5a:2c:91:1a:7f:b7:c7:0f:df:db:7a:a5:d3:
         1a:0b:d9:48:19:ac:3d:5e:3e:27:65:a4:7b:95:24:12:e8:40:
         61:2e:c6:0e:fb:51:3d:5d:db:3f:02:44:d9:be:05:9c:49:ff:
         6d:a9:25:31:f8:16:d3:00:8e:5a:8f:06:6a:65:c2:61:34:20:
         2a:7b:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org