Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137362e302f32322d3234203d3e203533323336.roa
File:                     3137302e3135302e3137362e302f32322d3234203d3e203533323336.roa (raw, json)
Hash identifier:          k1Jj2yAQ5Who8Ks/AR8vj/AYYXaqYV6T5yx/li1JY9Y=
Subject key identifier:   5B:95:D2:78:AB:D9:23:F5:D1:B0:71:F4:BE:FD:B0:65:42:48:14:BB
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       3F22DBDD740AA4FADEAA848B47A3D700F22735F7
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137362e302f32322d3234203d3e203533323336.roa
Signing time:             Tue 08 Aug 2023 19:00:00 +0000
ROA not before:           Tue 08 Aug 2023 18:55:00 +0000
ROA not after:            Tue 06 Aug 2024 19:00:00 +0000
asID:                     53236
IP address blocks:        170.150.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:db:dd:74:0a:a4:fa:de:aa:84:8b:47:a3:d7:00:f2:27:35:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Aug  8 18:55:00 2023 GMT
            Not After : Aug  6 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:89:85:92:56:f4:d4:34:10:8c:34:7e:7e:
                    01:fe:f7:8a:0e:74:c8:65:36:cb:f8:f6:72:f7:80:
                    65:48:1f:50:ae:a4:5f:40:47:0e:ec:c0:21:7f:fd:
                    5d:84:ac:1f:dc:ce:16:fb:a9:49:4b:ad:ae:ea:26:
                    df:4b:2e:81:6c:94:df:f2:28:bd:b5:80:f9:e5:95:
                    54:eb:a1:d4:12:72:84:e2:ff:a6:34:42:96:7f:8d:
                    8e:85:4f:9f:c5:88:76:28:5f:0b:e8:53:26:21:3c:
                    d0:51:5b:26:ca:aa:61:03:ef:18:ea:04:65:dd:dc:
                    5d:8f:01:a7:81:09:b0:2e:cd:61:e0:5b:a3:53:2a:
                    b4:64:99:1b:68:0d:9a:d5:08:e1:7b:af:fa:b7:53:
                    2c:11:95:fe:34:45:44:22:cd:24:1b:95:e8:72:23:
                    8d:f1:55:4d:3b:6d:f7:76:b6:f8:e4:3c:0d:47:ae:
                    fd:be:b8:a5:99:17:7f:d0:8f:bd:d9:77:42:a4:4a:
                    dd:b8:bc:b4:41:da:5d:b7:c9:bb:54:d8:ba:0e:8f:
                    40:c9:f6:fe:87:fa:10:2d:65:df:0b:2b:f2:6d:2a:
                    9b:ae:34:66:33:44:dd:c9:17:54:90:a3:60:99:53:
                    0b:69:68:29:cc:4a:02:50:6a:f1:7c:eb:f7:75:30:
                    b4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:95:D2:78:AB:D9:23:F5:D1:B0:71:F4:BE:FD:B0:65:42:48:14:BB
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137362e302f32322d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:3c:1c:77:79:88:d5:f1:b6:33:e2:52:e3:4f:7d:33:30:7e:
         4f:05:c3:32:5a:30:89:e8:c4:73:03:ef:53:ca:08:9b:dd:b7:
         3e:4a:b3:9f:cb:35:a1:55:78:f0:b5:82:a6:55:4f:e8:c1:a7:
         fa:f0:4e:f7:05:db:d4:ba:da:cc:d8:a6:78:97:eb:cd:47:ed:
         ab:79:f0:fc:df:d2:ac:8f:fe:d0:f0:ff:04:14:66:59:37:e6:
         13:54:2e:31:42:94:7a:db:db:ed:ca:53:68:4d:04:75:17:b2:
         eb:89:86:2f:69:b1:a9:76:4e:2c:ab:d6:42:04:1f:35:13:b8:
         44:67:ef:52:5d:dc:e5:e0:c0:8d:70:96:34:ea:0e:42:91:f0:
         62:f0:a1:ae:c4:8f:8d:c7:c4:37:b2:3b:ff:7d:ec:81:b8:71:
         ff:5b:dd:5b:db:76:f3:3a:d7:1e:4b:38:93:5a:8c:0c:a9:6f:
         03:70:99:87:df:4c:5e:26:c5:2f:96:2c:d3:08:f0:c1:69:71:
         7e:b9:68:28:94:70:ee:a9:e7:21:81:6c:6a:53:f8:e3:38:3d:
         b5:62:b0:47:6c:6e:69:50:92:fb:75:56:c5:6e:28:b6:a7:fe:
         78:f7:4e:67:37:62:80:f7:eb:a6:9b:4f:d4:06:11:f9:1a:ed:
         05:2b:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org