Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3135302e3234302e302f32322d3234203d3e203631353838.roa
File:                     3137302e3135302e3234302e302f32322d3234203d3e203631353838.roa (raw, json)
Hash identifier:          ShDhkK2XpBtSVbeVmfUoWlayaVfTpoR+cCJd9skRAX8=
Subject key identifier:   39:9E:8E:9D:BB:68:DF:54:22:1D:1D:4F:EB:6E:5A:A2:75:0A:8E:74
Certificate issuer:       /CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
Certificate serial:       6069952A41290847E378CE857CD2277369283E79
Authority key identifier: D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3135302e3234302e302f32322d3234203d3e203631353838.roa
Signing time:             Fri 18 Nov 2022 17:50:39 +0000
ROA not before:           Fri 18 Nov 2022 17:45:39 +0000
ROA not after:            Fri 17 Nov 2023 17:50:39 +0000
asID:                     61588
IP address blocks:        170.150.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:69:95:2a:41:29:08:47:e3:78:ce:85:7c:d2:27:73:69:28:3e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
        Validity
            Not Before: Nov 18 17:45:39 2022 GMT
            Not After : Nov 17 17:50:39 2023 GMT
        Subject: CN=399E8E9DBB68DF54221D1D4FEB6E5AA2750A8E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:48:32:17:3c:b1:1b:6a:a9:09:f7:4a:39:
                    d6:4d:93:56:31:73:f6:5a:07:2e:4d:30:ad:2f:b9:
                    d1:d6:2a:19:bd:5c:b2:07:a4:0c:58:91:e7:92:0e:
                    b8:3f:36:31:cb:77:cc:cf:cb:a2:52:96:f9:22:9b:
                    83:c5:7f:a3:57:fb:f2:87:a6:4b:54:10:af:86:38:
                    f4:77:7d:45:39:46:eb:e7:ec:ef:a8:46:ba:a1:55:
                    5d:be:d3:7b:ac:72:99:c3:bd:1a:b8:41:d4:35:22:
                    3c:9c:e8:2d:7f:20:b4:f0:19:1f:78:8c:29:4f:35:
                    23:da:cd:d9:b2:5d:52:37:d6:4a:4a:86:14:d2:3d:
                    5b:1e:8c:6e:c1:fb:67:9c:9a:0b:d7:52:3d:ac:1f:
                    10:a2:6f:35:9b:9f:5d:83:87:4e:98:c9:b1:49:2b:
                    e3:df:40:14:c3:ca:e0:25:0a:6f:77:37:02:86:31:
                    d3:96:c8:26:09:b9:b5:7f:c5:70:f2:53:7a:cf:99:
                    30:0d:27:62:34:4c:18:94:a9:4c:25:3f:c6:69:9b:
                    e0:e7:21:d5:e9:bc:77:aa:d6:c6:32:31:ae:58:08:
                    44:40:38:f8:bd:0c:5f:e9:ed:fb:df:6b:d2:ba:a6:
                    0c:51:f7:94:54:c6:76:19:89:ee:e0:cc:4d:8b:fb:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9E:8E:9D:BB:68:DF:54:22:1D:1D:4F:EB:6E:5A:A2:75:0A:8E:74
            X509v3 Authority Key Identifier:
                keyid:D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3135302e3234302e302f32322d3234203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:ac:0c:bd:65:ac:2f:60:62:94:f9:fb:e9:cb:35:a4:f4:cc:
         d9:15:c2:0d:43:00:23:ad:fd:9c:b9:23:c9:7a:bf:70:b5:2b:
         3a:17:17:ec:bd:57:e7:1a:78:91:29:fa:e0:bb:c5:b6:3e:95:
         6f:16:e0:70:e1:1b:e3:75:e7:28:7c:45:b9:3a:6f:ae:07:d8:
         5a:f1:89:c9:c9:5b:6f:ac:2c:5f:b7:12:e5:41:aa:90:dd:50:
         e3:86:ba:e1:91:e4:63:ee:a6:f1:69:97:14:c1:05:f0:86:42:
         46:48:66:95:a7:04:fe:43:2b:75:fb:c6:45:0b:48:ad:86:9e:
         2e:52:6c:d2:18:57:00:01:78:2c:2c:8c:aa:6b:fb:23:95:21:
         67:08:25:ac:9c:65:b7:9a:29:ba:c4:8b:2c:a1:c8:73:60:9a:
         22:7c:5f:96:54:72:33:0f:2a:ca:03:81:a3:60:50:24:24:bc:
         15:f3:7f:27:1d:5f:6e:4b:34:58:db:fc:4f:6f:58:92:e5:09:
         b0:ec:c1:54:6d:8a:b2:11:04:80:cb:ff:ae:92:29:52:b6:c1:
         81:97:26:f8:47:98:69:66:7d:8d:05:b7:ad:7b:11:9d:17:c2:
         ab:1d:0e:fc:31:55:d4:8e:36:8a:14:5e:e2:35:9b:4c:8e:33:
         00:f7:b6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org