Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/3137302e3135302e3230322e302f32332d3233203d3e20323635303338.roa
File:                     3137302e3135302e3230322e302f32332d3233203d3e20323635303338.roa (raw, json)
Hash identifier:          Bk+A4bcMFtVMQ3HT8dUC+FVq9D8tLwad+071giJMDaU=
Subject key identifier:   0F:EA:EF:FA:13:3B:3B:E2:CB:63:D7:1E:12:28:8D:B6:D5:97:2B:B2
Certificate issuer:       /CN=72C60932E11BF52F00E37EBC4445CD6E838E3AF5
Certificate serial:       7FB66E772BA77DD8C94DCD25D8CEDC6AA49C04F9
Authority key identifier: 72:C6:09:32:E1:1B:F5:2F:00:E3:7E:BC:44:45:CD:6E:83:8E:3A:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/3137302e3135302e3230322e302f32332d3233203d3e20323635303338.roa
Signing time:             Thu 04 Apr 2024 09:18:24 +0000
ROA not before:           Thu 04 Apr 2024 09:13:24 +0000
ROA not after:            Thu 03 Apr 2025 09:18:24 +0000
asID:                     265038
IP address blocks:        170.150.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b6:6e:77:2b:a7:7d:d8:c9:4d:cd:25:d8:ce:dc:6a:a4:9c:04:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72C60932E11BF52F00E37EBC4445CD6E838E3AF5
        Validity
            Not Before: Apr  4 09:13:24 2024 GMT
            Not After : Apr  3 09:18:24 2025 GMT
        Subject: CN=0FEAEFFA133B3BE2CB63D71E12288DB6D5972BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:9f:8a:de:1a:33:e5:39:60:93:26:de:5f:
                    87:c9:8e:4c:1e:c3:14:11:74:73:f2:5c:72:22:62:
                    d8:c8:87:6f:11:16:b0:cb:d3:34:97:ff:89:4b:ce:
                    57:7a:15:e8:8d:81:9c:5b:ed:57:9a:82:f1:ec:a1:
                    d4:80:47:21:50:b8:42:ca:75:60:bd:3b:94:a6:16:
                    7f:f7:d7:3e:55:43:47:af:fe:d8:41:df:46:9c:fe:
                    b8:89:58:5d:2d:18:c3:e1:ea:a5:d1:a0:fe:f3:a7:
                    e0:a0:68:73:94:d5:a4:d4:81:2a:00:5c:45:a0:41:
                    44:26:53:42:8b:d0:5c:14:5a:3a:e8:c1:a2:03:bb:
                    aa:3f:3a:d2:0b:d0:91:7b:ad:55:29:4c:4d:19:83:
                    1f:62:04:c0:35:d3:dc:ba:5f:5c:e0:aa:56:06:dc:
                    25:6b:0e:5c:1d:8b:ab:06:bd:9a:24:a8:ca:30:21:
                    13:9e:e9:58:13:52:5e:c6:e3:a3:3a:1f:ef:3d:f4:
                    f5:45:6b:53:e0:df:e0:23:bc:89:b3:1e:f0:8e:a0:
                    97:d8:7e:ed:f6:07:02:14:e0:ad:91:2a:71:ab:ec:
                    d8:26:10:4f:ce:a7:aa:95:ac:0f:e1:26:a5:49:3b:
                    bb:ae:58:26:76:6d:39:fc:45:e7:7f:12:28:f6:6b:
                    66:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EA:EF:FA:13:3B:3B:E2:CB:63:D7:1E:12:28:8D:B6:D5:97:2B:B2
            X509v3 Authority Key Identifier:
                keyid:72:C6:09:32:E1:1B:F5:2F:00:E3:7E:BC:44:45:CD:6E:83:8E:3A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72C60932E11BF52F00E37EBC4445CD6E838E3AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/1/3137302e3135302e3230322e302f32332d3233203d3e20323635303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:34:f3:2b:4d:ec:cb:7d:0c:e6:3c:70:15:92:05:47:60:61:
         f1:8d:29:d3:0c:c0:37:9f:c5:4a:f4:a7:0a:5c:cb:2e:ab:e0:
         4f:e1:ba:5a:c8:7b:9b:19:58:f7:80:16:34:a9:e8:30:af:b4:
         89:ac:5a:33:04:4d:cd:fe:2b:40:b6:cc:06:9e:bd:ea:a0:52:
         73:d1:70:9d:ab:1d:40:83:ea:a0:28:19:80:e1:33:61:e5:b2:
         96:53:2b:4e:be:88:dd:14:17:27:c2:5d:7e:98:60:06:1c:8b:
         38:32:46:3d:8d:9e:d3:80:8c:cc:b2:ad:2e:ef:c6:d1:37:6e:
         d8:8b:2a:fc:d3:ce:e9:bc:67:a0:28:31:89:21:c8:69:fe:52:
         ab:f9:3d:8a:e9:f2:9d:00:31:ec:e5:d8:fb:89:4a:04:de:89:
         69:8e:1d:d9:8d:da:31:f1:94:ff:52:58:24:4e:fd:c8:f6:77:
         7c:80:a9:36:77:b5:d3:0f:75:be:52:80:9b:62:71:ee:55:e7:
         dd:d7:41:1b:ff:4c:30:19:41:8b:75:dd:2c:5e:4a:c3:c7:a0:
         12:cd:96:9c:88:85:14:7f:8c:05:69:b5:bc:27:1f:7d:c7:7f:
         95:eb:31:ff:bb:79:a5:de:80:0f:ba:d2:14:e3:ce:cd:71:aa:
         97:72:bd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org