Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/3137302e3135302e3230302e302f32332d3233203d3e20323635303338.roa
File:                     3137302e3135302e3230302e302f32332d3233203d3e20323635303338.roa (raw, json)
Hash identifier:          qEqMzYZ9wW3G8Up0NB1kSt6McZUleUwt3XiL1Kk5TwM=
Subject key identifier:   D7:B8:F3:22:C4:C5:53:01:75:97:F1:0A:FA:C5:8D:F3:BE:61:33:C0
Certificate issuer:       /CN=72C60932E11BF52F00E37EBC4445CD6E838E3AF5
Certificate serial:       2B5A7B297629BEF5050F97434778C80C52235063
Authority key identifier: 72:C6:09:32:E1:1B:F5:2F:00:E3:7E:BC:44:45:CD:6E:83:8E:3A:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/3137302e3135302e3230302e302f32332d3233203d3e20323635303338.roa
Signing time:             Thu 04 Apr 2024 09:18:24 +0000
ROA not before:           Thu 04 Apr 2024 09:13:24 +0000
ROA not after:            Thu 03 Apr 2025 09:18:24 +0000
asID:                     265038
IP address blocks:        170.150.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5a:7b:29:76:29:be:f5:05:0f:97:43:47:78:c8:0c:52:23:50:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72C60932E11BF52F00E37EBC4445CD6E838E3AF5
        Validity
            Not Before: Apr  4 09:13:24 2024 GMT
            Not After : Apr  3 09:18:24 2025 GMT
        Subject: CN=D7B8F322C4C553017597F10AFAC58DF3BE6133C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:57:ec:b4:c4:dc:0e:ca:69:18:17:16:42:
                    5d:e4:31:35:19:2f:6e:c6:66:23:0e:79:7d:f0:25:
                    ea:b4:0d:2b:f2:e9:43:97:21:fe:3a:76:b1:74:33:
                    3a:88:62:01:0e:d4:b5:d8:46:00:2b:dd:7f:16:19:
                    25:df:ff:90:67:88:d9:79:db:ed:3a:1a:8d:f9:ed:
                    9c:9a:58:36:32:5a:de:dd:fe:bc:5a:5c:fa:2f:4d:
                    85:d5:c5:2b:ac:b0:88:56:90:8e:21:c2:ff:1e:06:
                    e1:38:09:2e:dd:3b:84:ac:d0:d7:4a:b7:6d:11:ec:
                    7a:41:c3:17:6a:ed:81:79:bd:e8:80:a3:99:2e:63:
                    d6:6e:4c:db:f2:3a:f3:4f:7a:8c:fa:69:70:13:b6:
                    77:b0:fb:f3:18:cd:fb:16:16:a7:96:fa:58:ca:03:
                    29:b3:12:95:88:82:fe:57:52:ea:67:b5:08:dd:19:
                    4a:e6:9d:e6:4e:9a:19:8d:79:02:69:a8:d7:f9:8a:
                    0c:c0:a1:0b:f9:83:f0:4e:fd:29:c5:9f:fd:c1:29:
                    34:83:2b:1b:4e:3f:49:12:6f:f9:46:18:6e:7e:2f:
                    7e:ba:73:91:69:d8:c8:44:4c:ce:0f:81:57:0d:b5:
                    3b:a9:a4:03:98:67:0b:5a:13:cf:06:0a:8e:0d:72:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B8:F3:22:C4:C5:53:01:75:97:F1:0A:FA:C5:8D:F3:BE:61:33:C0
            X509v3 Authority Key Identifier:
                keyid:72:C6:09:32:E1:1B:F5:2F:00:E3:7E:BC:44:45:CD:6E:83:8E:3A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/3137302e3135302e3230302e302f32332d3233203d3e20323635303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:54:49:03:2f:d3:0c:5a:6f:be:07:49:38:61:ed:20:a1:40:
         f5:9c:2e:4f:0d:2d:6d:9e:d3:24:55:b2:51:45:02:69:1d:2c:
         e9:eb:c0:31:28:34:c5:e6:8d:3b:13:c6:58:7d:67:32:b0:2f:
         d0:ec:d9:77:52:db:58:48:59:e9:30:ad:d0:32:17:02:47:6c:
         1c:5b:04:d1:ac:50:87:9a:44:b2:e9:b3:4f:52:cc:a4:c5:9e:
         4f:04:48:aa:34:04:fb:55:0f:80:49:30:7a:3d:85:75:66:1d:
         32:36:b7:4f:ba:a7:77:18:53:15:e7:81:3a:b3:93:15:83:7d:
         f6:2f:75:fc:4e:f2:1f:4c:aa:0a:93:a4:9a:86:84:ba:fa:3c:
         07:09:b9:5a:fb:09:5b:83:3d:4e:4e:d3:58:bb:29:11:c5:6f:
         b2:d9:03:e6:89:ea:ed:3d:d3:63:2a:b4:ad:8b:00:eb:68:08:
         05:e9:22:75:b2:03:59:b7:65:53:ab:05:bb:5d:92:96:94:55:
         3a:ea:6b:af:d8:b4:27:35:7e:8f:41:2f:13:1a:29:02:5f:ed:
         55:a7:a9:3f:0e:c7:e3:36:e0:c3:e9:4b:cb:cc:d3:e3:20:be:
         a5:a6:ff:b0:14:68:a3:28:50:9a:fc:52:7e:ca:18:56:c1:3b:
         4a:62:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org