Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa
File:                     3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          Tlo8sO2dd40cd6A7kKl8BXMBcOPLXR/zV1YDKBbVFPY=
Subject key identifier:   90:C7:0F:97:B3:03:32:3B:1A:DB:03:E5:97:BE:A5:A1:77:53:33:5D
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       5A914F8EF6A72553C9936D07EBE22F77C3BE0324
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa
Signing time:             Wed 27 Sep 2023 20:02:50 +0000
ROA not before:           Wed 27 Sep 2023 19:57:50 +0000
ROA not after:            Wed 25 Sep 2024 20:02:50 +0000
asID:                     61588
IP address blocks:        170.150.240.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:91:4f:8e:f6:a7:25:53:c9:93:6d:07:eb:e2:2f:77:c3:be:03:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Sep 27 19:57:50 2023 GMT
            Not After : Sep 25 20:02:50 2024 GMT
        Subject: CN=90C70F97B303323B1ADB03E597BEA5A17753335D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:c7:b6:f1:1f:b3:e0:86:8c:7b:b6:1a:11:
                    25:79:f1:af:47:24:5d:a7:ae:d4:16:f2:e6:85:29:
                    80:0e:2d:f6:ad:da:34:87:6c:93:b1:f7:d9:35:02:
                    10:c2:65:60:fe:5f:7b:96:3d:5b:c1:91:46:94:20:
                    ac:c8:04:a7:6f:3c:29:62:2c:80:b4:c2:e8:c6:06:
                    86:a8:73:c8:6a:8a:66:c2:32:3e:ab:9d:e5:e8:2c:
                    29:ae:8a:60:bb:8a:b1:1c:e6:12:af:47:bc:0a:e7:
                    a2:6d:09:65:c7:c6:3e:0c:ca:b3:3c:e6:7b:e6:66:
                    5b:28:a1:a5:be:8c:54:38:05:94:f6:73:28:d7:1d:
                    2b:3a:e8:46:84:ff:f7:d4:cf:54:11:97:ef:36:98:
                    84:aa:3a:e4:f9:92:10:e7:06:5d:1b:e2:67:cd:d9:
                    4f:1d:33:00:be:21:b0:75:7d:08:bf:8a:6b:4e:6d:
                    54:fc:92:92:fe:5d:11:05:1a:0e:ec:bf:b2:27:10:
                    6c:05:43:de:c4:2b:b5:ba:c4:56:dc:af:1b:56:05:
                    bb:b7:a5:33:2f:13:f8:2c:6e:8d:39:a8:35:8d:9b:
                    99:9d:be:d4:f9:7b:bb:50:6a:c3:eb:c5:2e:57:bc:
                    c2:27:ee:67:76:b3:72:a3:fd:fb:46:bf:69:c5:e7:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C7:0F:97:B3:03:32:3B:1A:DB:03:E5:97:BE:A5:A1:77:53:33:5D
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3137302e3135302e3234302e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:7b:66:a7:15:9c:db:b3:5a:82:c9:d5:32:91:a4:49:44:
         3d:65:3d:c9:ab:73:a9:b9:35:5b:10:fd:00:c8:2a:94:7c:f2:
         d5:b1:ec:a3:3d:e0:4b:a6:ed:57:fd:55:8c:df:ab:44:30:bc:
         c9:13:c7:0d:1e:12:a6:0f:ed:67:73:13:b6:09:8f:78:4c:ff:
         24:a6:c3:b3:c0:18:17:d6:da:f4:e1:88:36:45:bd:10:49:54:
         55:b6:ad:11:51:e6:bf:19:8f:c2:5c:9b:e4:97:18:37:3d:06:
         7e:e5:46:d8:d8:ab:86:9d:5b:c9:24:49:26:d2:b2:29:d3:20:
         f5:26:b2:7a:bb:a8:c1:08:a8:61:90:6d:0e:86:7a:0e:01:7d:
         d5:9c:dd:04:54:72:11:28:c9:15:a2:37:ef:27:a8:66:45:bd:
         6f:61:21:9f:ab:0e:44:46:95:34:d2:b0:45:4c:62:77:5c:cf:
         c6:c7:41:ea:92:b2:95:d9:70:ce:ea:6d:8f:3e:19:ab:a9:01:
         e1:54:eb:98:41:be:27:d3:ce:56:c9:8e:8b:49:87:23:f4:f9:
         47:8c:29:73:08:11:60:b0:80:7d:23:66:ec:b2:6c:33:ed:70:
         7a:5d:72:2e:66:b4:2b:40:8a:49:fa:47:58:41:6b:26:d7:78:
         2d:59:64:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org