Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/3137302e3135302e3230302e302f32332d3233203d3e20323635303338.roa
File:                     3137302e3135302e3230302e302f32332d3233203d3e20323635303338.roa (raw, json)
Hash identifier:          bVYwEQXfm84g199rOWERtpFL4Uoe5Qd6m8SP8+mBLNI=
Subject key identifier:   A1:25:17:83:86:C7:8C:15:EE:19:50:F3:05:0C:3C:F0:84:AC:AF:B5
Certificate issuer:       /CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
Certificate serial:       39A3D598AFB3E2CDC15297F8733F542BDA683AB8
Authority key identifier: 5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/3137302e3135302e3230302e302f32332d3233203d3e20323635303338.roa
Signing time:             Tue 05 Mar 2024 19:26:01 +0000
ROA not before:           Tue 05 Mar 2024 19:21:01 +0000
ROA not after:            Tue 04 Mar 2025 19:26:01 +0000
asID:                     265038
IP address blocks:        170.150.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a3:d5:98:af:b3:e2:cd:c1:52:97:f8:73:3f:54:2b:da:68:3a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8
        Validity
            Not Before: Mar  5 19:21:01 2024 GMT
            Not After : Mar  4 19:26:01 2025 GMT
        Subject: CN=A125178386C78C15EE1950F3050C3CF084ACAFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:30:66:ce:2d:28:65:66:eb:af:3e:f1:05:
                    6e:35:1c:44:b8:b9:9f:a6:fd:82:4b:15:b6:61:4c:
                    19:ff:28:8e:fb:c7:0c:76:9b:fe:64:ae:2c:c1:23:
                    91:4b:57:96:5a:67:02:82:ca:2d:ea:1c:cd:db:f7:
                    49:8a:bb:5f:aa:10:23:ac:88:a0:f6:fe:a2:fc:de:
                    c8:c8:9a:e3:43:b4:10:90:58:c9:01:19:61:a3:c9:
                    e5:32:4c:de:64:5a:51:71:62:0d:64:08:bf:93:ac:
                    2a:c4:a1:d6:51:6a:3b:20:77:ca:a0:73:27:eb:eb:
                    b0:43:6c:cf:3a:5c:61:94:0b:66:27:06:7d:ec:79:
                    9c:7e:fe:58:8a:9c:c0:7c:95:57:18:53:9a:e5:9e:
                    c2:75:6f:51:11:e0:bc:dc:91:a7:23:31:a2:8c:07:
                    c1:62:21:c7:10:08:bd:36:ed:e5:2e:0a:9d:d6:03:
                    47:58:67:be:37:c7:6a:08:9d:5b:59:2d:26:b8:9e:
                    45:f8:98:af:fb:48:b8:8e:30:30:1c:e4:fd:45:0c:
                    49:2f:c4:f3:c1:04:15:04:33:9c:22:e1:c3:d8:0b:
                    cb:3b:4c:79:46:ff:b0:d0:8b:4b:3d:30:f6:50:bd:
                    17:31:ec:1a:5a:71:df:de:44:3d:f2:35:fe:f8:d8:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:25:17:83:86:C7:8C:15:EE:19:50:F3:05:0C:3C:F0:84:AC:AF:B5
            X509v3 Authority Key Identifier:
                keyid:5D:2F:50:50:68:C7:CA:B7:1D:CC:C3:F4:8D:B6:58:74:FC:79:E6:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D2F505068C7CAB71DCCC3F48DB65874FC79E6A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/3137302e3135302e3230302e302f32332d3233203d3e20323635303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:ce:90:b3:d1:14:c6:9e:b5:17:06:f5:bc:a1:62:52:68:
         ab:9b:c5:37:02:75:7c:5c:5d:7b:5c:8b:0e:49:3f:52:87:fc:
         14:fb:4e:9f:91:ed:83:50:af:02:07:b8:af:14:cc:4e:31:ad:
         d6:73:d8:ee:a2:4d:dd:b6:ea:cd:66:40:a2:5c:17:ba:1c:d6:
         d1:24:e1:99:79:33:8c:a6:94:3b:ae:0c:d9:d1:ab:42:5f:fc:
         f2:eb:e4:01:dc:aa:f4:ac:21:6f:b5:80:dd:50:26:49:5f:84:
         10:53:84:c2:52:a1:7f:88:93:16:1d:2e:5b:0f:87:47:6a:7e:
         5f:64:3f:92:63:05:ad:4f:5b:4d:09:fe:7c:69:37:b8:b5:24:
         eb:f0:d6:79:52:88:97:2e:68:30:74:58:86:9b:8a:c9:d2:e2:
         d9:8d:01:5a:7e:70:01:4d:99:34:26:00:31:01:e5:28:09:0b:
         72:55:59:b1:bc:af:86:18:28:e2:d2:c6:e1:8f:ce:30:a9:48:
         6c:e7:eb:72:47:67:e1:b3:37:14:94:35:9c:04:c8:fa:82:24:
         e9:b5:d8:31:31:6e:7b:d2:28:57:8c:d9:b0:5c:79:01:2e:e0:
         1a:6f:cb:7d:d1:0b:96:a8:17:b9:a9:e2:3c:41:e5:20:66:6f:
         63:51:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org