Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa
File:                     3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          f/raLBVUD8CNwjjfa9fFDQVbm2oQdspebJb6DkZvbVY=
Subject key identifier:   1A:72:A8:B2:28:03:A9:9B:AB:8A:8F:95:21:B6:F6:16:55:1F:D1:07
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       190226FEA26527C3B11BB8A1C9FB962281140B6A
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa
Signing time:             Thu 08 Feb 2024 15:00:01 +0000
ROA not before:           Thu 08 Feb 2024 14:55:01 +0000
ROA not after:            Thu 06 Feb 2025 15:00:01 +0000
asID:                     53236
IP address blocks:        170.150.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:02:26:fe:a2:65:27:c3:b1:1b:b8:a1:c9:fb:96:22:81:14:0b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Feb  8 14:55:01 2024 GMT
            Not After : Feb  6 15:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:df:43:bf:86:8c:8e:87:ac:a0:db:3b:17:
                    d4:51:65:9c:58:42:e7:94:75:29:a7:06:93:32:a0:
                    9d:c7:65:39:b4:29:6e:52:fc:bc:ad:a6:9c:fc:9e:
                    a1:58:81:b7:57:ef:3f:84:6c:8e:82:03:82:83:7b:
                    7f:5b:cb:83:ee:07:dd:80:27:e5:b8:a8:7d:4a:51:
                    1b:70:24:3e:af:a5:6d:b4:37:e0:06:a0:d6:51:72:
                    ad:c6:89:20:78:9e:d4:05:28:5e:b5:a3:47:86:98:
                    c9:11:bf:ab:eb:4e:44:ba:08:31:8f:b4:a7:bd:32:
                    a6:8c:fb:cb:a7:42:e4:9a:b6:09:51:36:c2:cb:4d:
                    b3:6e:0d:84:51:e2:eb:e4:05:5a:d3:ef:e1:f2:ff:
                    5f:69:71:d3:1b:ae:63:4b:2f:07:a0:ee:12:53:2d:
                    0c:ee:22:f0:dc:6d:c3:fd:91:c0:ed:12:f9:51:a6:
                    45:5e:90:9d:28:b9:15:14:ae:7b:e8:1f:07:09:5e:
                    09:8d:c3:c1:58:64:37:d9:e4:d6:5c:4f:b9:a1:a3:
                    0d:ec:a8:79:10:28:e6:82:3b:55:d3:cd:ed:12:c8:
                    bf:a4:9f:da:7a:ce:25:10:d8:e1:74:2a:60:ac:87:
                    fc:ba:27:82:37:67:57:cc:2e:62:a6:f7:7c:78:b2:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:A8:B2:28:03:A9:9B:AB:8A:8F:95:21:B6:F6:16:55:1F:D1:07
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:b4:c3:63:24:ee:13:8b:f6:b6:75:63:64:aa:7d:ad:86:1d:
         59:9f:1c:eb:10:ba:a7:0f:1c:c0:42:71:d5:b3:16:2e:92:c4:
         8b:42:2b:d5:db:2a:47:bc:b0:75:bb:c0:87:8a:e4:d2:98:b0:
         af:62:98:cb:a6:77:b2:78:de:f7:ec:1a:1f:3e:56:db:69:af:
         ab:fc:bc:71:5a:59:9d:40:c1:3b:e9:18:42:90:ab:bd:3b:fa:
         58:94:fa:1f:8e:bf:35:25:13:0b:f1:92:70:1d:15:a6:8a:3b:
         57:02:8e:4f:02:1c:ae:3c:b0:b4:19:70:3d:03:9d:ef:94:5d:
         78:05:71:99:ed:de:71:04:b8:e3:55:c1:a7:62:00:46:d9:fa:
         2d:e9:21:cb:b5:60:6a:86:0d:5f:24:ae:23:3f:e0:66:8e:29:
         f8:0c:18:6d:a1:2a:48:6d:69:f4:20:0d:23:2a:53:6d:bb:40:
         40:e5:15:8a:a0:bb:be:4f:50:f1:51:5e:2c:e2:af:9b:45:3c:
         5e:6b:b5:a1:92:4d:ac:84:42:e1:cc:71:18:65:8f:b2:35:03:
         ea:39:85:3c:f7:a3:1c:ca:13:d6:32:29:b7:dc:b5:e7:74:83:
         c5:24:73:93:ab:33:2c:6c:84:2a:47:55:4b:b8:b2:e1:62:58:
         c3:d8:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org