Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137382e302f32342d3234203d3e203533323336.roa
File:                     3137302e3135302e3137382e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          jztoBDogSvaJT4uTqeiYq1vqGmxupOTRm+0rfoyl6aY=
Subject key identifier:   58:61:26:FD:63:20:67:8F:12:24:41:13:B2:F8:E6:13:3B:34:D1:0D
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       1E6342DCCF4CF43B692AF9F796421AB2F628B687
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137382e302f32342d3234203d3e203533323336.roa
Signing time:             Thu 08 Feb 2024 15:00:01 +0000
ROA not before:           Thu 08 Feb 2024 14:55:01 +0000
ROA not after:            Thu 06 Feb 2025 15:00:01 +0000
asID:                     53236
IP address blocks:        170.150.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:63:42:dc:cf:4c:f4:3b:69:2a:f9:f7:96:42:1a:b2:f6:28:b6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Feb  8 14:55:01 2024 GMT
            Not After : Feb  6 15:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:28:35:fe:eb:62:36:09:d5:d0:0f:06:ff:
                    06:1e:c0:86:3b:34:62:26:d4:2b:0f:f5:49:02:36:
                    a6:11:8e:56:3f:dc:f6:bc:26:ab:44:ba:5a:42:a1:
                    9e:ae:3c:ce:5d:b1:04:c8:3b:47:f5:06:68:2a:9a:
                    62:0e:ce:28:84:a6:e3:49:2e:2f:82:ae:b9:87:65:
                    89:73:9e:e0:06:c4:be:1d:6d:8a:74:44:59:d1:c1:
                    31:a0:c0:80:f6:18:ec:e4:eb:08:b8:78:81:c3:9e:
                    8c:0d:e6:c0:c0:b8:4e:ff:2e:5f:8a:df:c0:3e:ae:
                    d6:49:a3:f0:16:3b:40:b0:49:b5:54:d6:3a:aa:fa:
                    40:de:f0:ba:af:f4:8d:96:6a:47:9c:a1:2b:7d:7d:
                    d5:b4:cb:fc:36:da:62:23:5d:a0:b2:c8:e9:df:82:
                    7c:66:90:1f:1c:11:55:15:44:89:b1:88:ee:94:24:
                    18:cd:d0:ef:f6:46:31:ba:21:00:13:72:81:3f:2c:
                    66:35:fc:29:61:97:71:55:57:5c:e1:68:5b:9b:92:
                    f4:98:6d:d3:c7:2e:09:36:46:2d:0a:2d:92:1f:05:
                    59:bf:6a:e4:95:9a:bf:89:6f:c5:d4:03:d8:bb:bb:
                    8d:66:2b:28:d9:6c:1e:33:1b:8c:08:a3:f3:8d:83:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:61:26:FD:63:20:67:8F:12:24:41:13:B2:F8:E6:13:3B:34:D1:0D
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137382e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:fd:7c:32:67:6a:5e:f4:7d:2b:58:7c:15:78:4e:ba:e5:
         5f:1e:42:a7:d9:5e:de:2b:fd:03:05:80:2b:f7:48:2f:3e:b1:
         34:16:28:67:83:58:13:74:d5:ba:13:1f:a8:52:c7:d3:df:25:
         c3:b6:c1:b0:dc:42:41:55:9f:2a:90:1d:f3:09:f4:f8:db:2a:
         35:e0:9a:55:b3:54:8e:9d:8b:4b:d5:93:c0:d2:37:ea:0d:03:
         ed:68:89:78:2b:34:63:87:94:10:4b:1a:12:cf:f4:bf:2a:c0:
         51:f1:cd:ac:cd:ff:c8:76:e4:c1:8a:17:3a:3b:f8:b2:17:29:
         fc:7b:58:3b:39:ee:b2:09:a5:e6:62:57:ce:e5:6a:f0:73:87:
         c1:22:5e:b3:33:a9:38:5a:c8:0a:f3:fb:59:95:53:a4:95:53:
         2b:61:53:d0:96:25:17:bb:bd:a7:18:34:65:46:f4:34:03:4c:
         f1:ab:03:fc:fc:1a:ea:91:f5:fb:e9:1b:19:23:68:ff:be:d6:
         e5:12:70:98:87:01:ec:bf:2b:a3:78:17:4d:11:40:5e:c7:b1:
         44:88:a3:e1:80:a2:44:6e:b2:4e:dd:54:9b:11:34:22:ba:88:
         2a:e1:9b:ca:a5:15:0c:1b:b4:dd:77:1a:1d:a0:8d:79:00:4f:
         ae:83:0b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org