Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137392e302f32342d3234203d3e203533323336.roa
File:                     3137302e3135302e3137392e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          vxKe+5zQPpA1aTuh+8Mcu3m5lESROdtZyCctQpRh7UQ=
Subject key identifier:   41:F0:EC:20:71:EF:85:20:97:6F:9C:5C:09:42:E3:C0:99:69:AA:11
Certificate issuer:       /CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
Certificate serial:       5BA129D89A169CD2887D1954B6C15CD41E00C486
Authority key identifier: EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137392e302f32342d3234203d3e203533323336.roa
Signing time:             Thu 08 Feb 2024 15:00:02 +0000
ROA not before:           Thu 08 Feb 2024 14:55:02 +0000
ROA not after:            Thu 06 Feb 2025 15:00:02 +0000
asID:                     53236
IP address blocks:        170.150.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a1:29:d8:9a:16:9c:d2:88:7d:19:54:b6:c1:5c:d4:1e:00:c4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE1F2CBFD1CF93D6FA0078818FBF753815C16C09
        Validity
            Not Before: Feb  8 14:55:02 2024 GMT
            Not After : Feb  6 15:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:10:a3:8a:98:e6:02:13:13:61:4f:a0:2e:78:
                    ee:c2:2e:53:ca:67:4c:d2:e7:23:97:f8:da:29:e6:
                    86:cf:8d:d9:d0:12:25:e1:1d:df:88:de:d0:39:45:
                    1a:85:5d:f8:31:80:6c:02:49:bd:15:a3:e0:0a:5d:
                    cb:07:f6:4a:db:11:4f:66:80:bd:31:3f:80:04:93:
                    27:5d:0e:0b:d6:81:80:53:2a:13:d5:e5:e0:a8:ba:
                    b3:a8:71:27:f0:e5:87:de:fe:00:fc:cf:1a:40:96:
                    f0:24:59:ba:19:f7:bb:34:1d:5f:44:8c:da:84:60:
                    ff:08:c9:8f:61:06:0d:f6:66:38:69:b8:1c:ae:67:
                    bc:a3:56:f3:98:fc:7b:25:d2:8d:53:2b:34:bf:d5:
                    4a:93:e1:60:66:fa:ed:be:23:ab:64:32:a6:45:f7:
                    0a:a8:ea:ea:0e:de:1a:94:7f:98:b7:f8:5f:7f:9e:
                    56:12:a1:ea:96:9f:37:71:1d:ab:da:a6:51:4d:ef:
                    8b:59:2b:c1:1d:e3:ba:41:12:32:c4:a1:42:b8:9e:
                    b4:12:21:77:7e:da:6a:3f:79:cd:d7:e2:e7:89:a8:
                    ff:b4:ac:f4:e8:bb:59:25:0b:e6:79:1f:7d:0a:a3:
                    86:4e:22:95:e5:4d:39:f2:0b:90:7d:60:2c:d2:51:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F0:EC:20:71:EF:85:20:97:6F:9C:5C:09:42:E3:C0:99:69:AA:11
            X509v3 Authority Key Identifier:
                keyid:EE:1F:2C:BF:D1:CF:93:D6:FA:00:78:81:8F:BF:75:38:15:C1:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE1F2CBFD1CF93D6FA0078818FBF753815C16C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/0/3137302e3135302e3137392e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:b5:01:a4:9d:d8:6d:a3:6d:09:d7:a3:60:72:5a:af:08:b1:
         77:77:56:ab:0d:e0:d4:18:e4:fe:2f:b6:80:ee:ab:36:b8:49:
         56:a0:50:02:6d:0e:57:92:0d:66:8c:af:53:9e:90:00:0e:76:
         91:b4:fe:f1:07:5f:05:44:a3:dc:25:e9:51:ab:77:6a:b1:dc:
         13:89:1e:2e:9c:b2:e4:41:b7:61:ee:bb:32:df:62:b4:fe:56:
         16:c2:e8:1b:59:91:0d:2d:5e:65:c4:9c:e2:a8:19:1f:4c:4a:
         d8:91:f1:5c:5f:07:29:b0:99:a1:a7:02:57:a2:e0:45:78:b7:
         98:49:fe:2d:17:10:99:69:7c:24:66:e0:42:0c:2e:09:79:fe:
         d7:72:66:e6:be:c9:e1:56:22:24:e9:db:b0:82:e9:80:a3:37:
         46:e5:23:de:ea:a5:68:6b:04:29:f1:5e:ae:59:69:22:ba:b9:
         ee:6e:db:77:c8:7d:7d:21:36:a4:aa:35:25:8d:75:30:ca:b3:
         47:fc:42:ac:23:83:32:a7:51:6c:9b:bc:ac:6a:42:be:8a:11:
         fe:c7:1e:73:6a:17:36:5b:46:80:a6:05:d3:00:12:55:76:ba:
         c8:45:9e:9f:10:8d:d6:85:5d:8b:0d:ae:0d:83:f1:90:f0:b1:
         6c:8a:d6:af
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUW6Ep2JoWnNKIfRlUtsFc1B4AxIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUxRjJDQkZEMUNGOTNENkZBMDA3ODgxOEZCRjc1Mzgx
NUMxNkMwOTAeFw0yNDAyMDgxNDU1MDJaFw0yNTAyMDYxNTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjkxMEEzOEE5OEU2MDIxMzEz
NjE0RkEwMkU3OEVFQzIyRTUzQ0E2NzRDRDJFNzIzOTdGOERBMjlFNjg2Q0Y4REQ5
RDAxMjI1RTExRERGODhERUQwMzk0NTFBODU1REY4MzE4MDZDMDI0OUJEMTVBM0Uw
MEE1RENCMDdGNjRBREIxMTRGNjY4MEJEMzEzRjgwMDQ5MzI3NUQwRTBCRDY4MTgw
NTMyQTEzRDVFNUUwQThCQUIzQTg3MTI3RjBFNTg3REVGRTAwRkNDRjFBNDA5NkYw
MjQ1OUJBMTlGN0JCMzQxRDVGNDQ4Q0RBODQ2MEZGMDhDOThGNjEwNjBERjY2NjM4
NjlCODFDQUU2N0JDQTM1NkYzOThGQzdCMjVEMjhENTMyQjM0QkZENTRBOTNFMTYw
NjZGQUVEQkUyM0FCNjQzMkE2NDVGNzBBQThFQUVBMEVERTFBOTQ3Rjk4QjdGODVG
N0Y5RTU2MTJBMUVBOTY5RjM3NzExREFCREFBNjUxNERFRjhCNTkyQkMxMURFM0JB
NDExMjMyQzRBMTQyQjg5RUI0MTIyMTc3N0VEQTZBM0Y3OUNERDdFMkU3ODlBOEZG
QjRBQ0Y0RThCQjU5MjUwQkU2NzkxRjdEMEFBMzg2NEUyMjk1RTU0RDM5RjIwQjkw
N0Q2MDJDRDI1MTMyQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA+RCjipjmAhMTYU+gLnjuwi5TymdM0ucjl/jaKeaGz43Z0BIl4R3f
iN7QOUUahV34MYBsAkm9FaPgCl3LB/ZK2xFPZoC9MT+ABJMnXQ4L1oGAUyoT1eXg
qLqzqHEn8OWH3v4A/M8aQJbwJFm6Gfe7NB1fRIzahGD/CMmPYQYN9mY4abgcrme8
o1bzmPx7JdKNUys0v9VKk+FgZvrtviOrZDKmRfcKqOrqDt4alH+Yt/hff55WEqHq
lp83cR2r2qZRTe+LWSvBHeO6QRIyxKFCuJ60EiF3ftpqP3nN1+Lniaj/tKz06LtZ
JQvmeR99CqOGTiKV5U058guQfWAs0lEytQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FEHw7CBx74Ugl2+cXAlC48CZaaoRMB8GA1UdIwQYMBaAFO4fLL/Rz5PW+gB4gY+/
dTgVwWwJMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JUV2VDRU1xVm83aXRX
dHppNWs4OG52UUFMa0pncFB2RU50RHdnaTFveG9kLzAvRUUxRjJDQkZEMUNGOTNE
NkZBMDA3ODgxOEZCRjc1MzgxNUMxNkMwOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FRTFGMkNCRkQxQ0Y5M0Q2RkEwMDc4ODE4RkJGNzUzODE1QzE2
QzA5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CVFdlQ0VNcVZvN2l0V3R6aTVr
ODhudlFBTGtKZ3BQdkVOdER3Z2kxb3hvZC8wLzMxMzczMDJlMzEzNTMwMmUzMTM3
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMzMzIzMzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qpazMA0GCSqGSIb3DQEBCwUAA4IBAQAltQGkndhto20J16NgclqvCLF3d1arDeDU
GOT+L7aA7qs2uElWoFACbQ5Xkg1mjK9TnpAADnaRtP7xB18FRKPcJelRq3dqsdwT
iR4unLLkQbdh7rsy32K0/lYWwugbWZENLV5lxJziqBkfTErYkfFcXwcpsJmhpwJX
ouBFeLeYSf4tFxCZaXwkZuBCDC4Jef7XcmbmvsnhViIk6duwgumAozdG5SPe6qVo
awQp8V6uWWkiurnubtt3yH19ITakqjUljXUwyrNH/EKsI4Myp1Fsm7ysakK+ihH+
xx5zahc2W0aApgXTABJVdrrIRZ6fEI3WhV2LDa4Ng/GQ8LFsitav
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org