Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa
File:                     3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier:          22duqFry8+m19vMtRU24CH4vxKEx9jLnkZHiBT7zzMQ=
Subject key identifier:   B9:25:BC:F2:63:38:D7:41:37:DD:41:0E:9E:3B:08:99:D1:79:19:F7
Certificate issuer:       /CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
Certificate serial:       530507AB03E4FCA5E3C2A121C9E9582954011985
Authority key identifier: 59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa
Signing time:             Sun 10 Dec 2023 14:29:47 +0000
ROA not before:           Sun 10 Dec 2023 14:24:47 +0000
ROA not after:            Sun 08 Dec 2024 14:29:47 +0000
asID:                     53062
IP address blocks:        170.150.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:05:07:ab:03:e4:fc:a5:e3:c2:a1:21:c9:e9:58:29:54:01:19:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
        Validity
            Not Before: Dec 10 14:24:47 2023 GMT
            Not After : Dec  8 14:29:47 2024 GMT
        Subject: CN=B925BCF26338D74137DD410E9E3B0899D17919F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:e6:10:73:55:11:9e:e8:88:8e:5b:04:86:
                    69:4b:2b:48:79:8d:f4:c3:fb:b3:8d:3c:56:42:00:
                    77:15:6b:a1:b0:e9:5f:66:16:c1:07:2e:17:5c:e9:
                    5d:2d:9c:0b:40:b7:40:9b:fe:98:4e:66:36:1f:84:
                    db:d6:b2:38:31:cc:64:a1:21:bc:61:a8:39:38:16:
                    47:53:fe:1f:f4:6a:4e:79:af:95:2b:8b:a5:ae:94:
                    a7:23:7f:b1:87:0c:88:9a:df:79:29:e1:15:4c:98:
                    2e:35:73:38:45:45:8b:a6:43:da:e7:3e:29:fd:1a:
                    cb:e1:3c:d8:1d:d2:5f:19:2a:52:3d:04:fa:4e:5a:
                    06:73:cb:35:0d:90:cb:c0:c4:b2:e2:0a:7c:ea:5f:
                    9d:2b:19:02:de:d9:cc:5f:86:6a:3e:38:ae:30:2c:
                    ba:d3:24:48:c2:2d:17:63:36:08:c1:bb:4a:97:ca:
                    0b:c7:62:f1:06:d1:43:c1:de:5f:ce:87:91:ea:cc:
                    f5:91:f7:b6:2a:0f:f7:2f:45:18:c7:e5:97:b1:0a:
                    f8:7b:b4:e5:aa:06:69:03:54:2c:c3:ba:e0:94:f8:
                    e5:79:c5:0d:60:7c:c6:17:b1:f9:a5:ad:43:13:c7:
                    59:d9:bd:fa:92:ae:74:21:bc:8a:00:1d:1f:74:48:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:25:BC:F2:63:38:D7:41:37:DD:41:0E:9E:3B:08:99:D1:79:19:F7
            X509v3 Authority Key Identifier:
                keyid:59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3137302e3135302e3233362e302f32322d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:ee:5c:77:64:ba:dc:f8:7f:d4:17:5f:1f:85:ef:45:5a:91:
         15:e2:04:e3:e5:b9:bc:e2:5d:a0:b7:ba:0c:dd:8d:11:80:20:
         65:58:24:58:1c:26:72:d0:1c:4e:e3:af:51:d0:c7:68:20:69:
         f1:d1:f3:c2:b7:72:37:f8:d2:10:c3:09:ae:e8:0b:bb:83:f6:
         5e:53:63:21:cd:37:e8:f2:6b:f3:2c:67:bf:41:a0:0f:e1:de:
         eb:f9:9b:f9:a8:39:72:f3:d3:44:28:58:c2:9e:c8:78:ee:99:
         bf:ad:74:c8:87:2c:05:2b:f6:88:4f:2e:9f:2f:4f:32:ec:9c:
         2e:8a:c3:d7:d8:79:25:f7:fd:5e:53:99:0d:d7:21:e9:fc:1e:
         a4:73:aa:b2:19:eb:f3:8d:55:8b:4a:b7:1f:22:b3:2b:80:78:
         4e:02:6d:8f:6c:38:d6:63:3f:ec:eb:e3:47:e5:3b:34:27:e6:
         86:e5:9e:09:9e:4d:c1:d3:d9:d6:64:4b:7d:88:15:8f:77:c2:
         a8:2f:40:1d:02:d3:af:b3:9f:e7:c6:24:44:73:bb:98:e5:ed:
         a6:ae:ad:2a:c4:b9:b6:ca:b1:06:cf:50:b0:08:40:1d:0b:85:
         f2:59:f3:95:21:d9:5a:ea:da:80:58:4c:65:b3:5f:b3:ce:22:
         5a:41:5d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org