Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/0/3137302e3135302e3139322e302f32322d3234203d3e20323633353036.roa
File:                     3137302e3135302e3139322e302f32322d3234203d3e20323633353036.roa (raw, json)
Hash identifier:          Yl7o+HUBlDCsN5SMzIjzxjIBYI2dpa/aYZlRdLyai9s=
Subject key identifier:   CC:13:AA:BB:C8:24:37:BB:DD:B9:C0:8D:C8:7F:22:3F:8E:75:65:77
Certificate issuer:       /CN=AE32506C8CADC17BF0B2D1C971A2E32C8DE8C58B
Certificate serial:       060506DC6F33EAA0884CDCC3BF66F13972DDF9D2
Authority key identifier: AE:32:50:6C:8C:AD:C1:7B:F0:B2:D1:C9:71:A2:E3:2C:8D:E8:C5:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE32506C8CADC17BF0B2D1C971A2E32C8DE8C58B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/0/3137302e3135302e3139322e302f32322d3234203d3e20323633353036.roa
Signing time:             Tue 20 Feb 2024 19:08:31 +0000
ROA not before:           Tue 20 Feb 2024 19:03:31 +0000
ROA not after:            Tue 18 Feb 2025 19:08:31 +0000
asID:                     263506
IP address blocks:        170.150.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:05:06:dc:6f:33:ea:a0:88:4c:dc:c3:bf:66:f1:39:72:dd:f9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE32506C8CADC17BF0B2D1C971A2E32C8DE8C58B
        Validity
            Not Before: Feb 20 19:03:31 2024 GMT
            Not After : Feb 18 19:08:31 2025 GMT
        Subject: CN=CC13AABBC82437BBDDB9C08DC87F223F8E756577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:9a:1e:c3:14:f2:03:42:4b:f9:58:db:17:
                    f3:1f:b8:27:25:29:67:15:25:81:84:70:b5:d5:7d:
                    9f:1d:60:f7:97:51:c9:d7:14:cc:6d:23:54:fa:2c:
                    47:95:0f:c4:01:66:4f:12:5a:33:77:10:22:2d:97:
                    6b:fd:6d:1a:3c:a4:89:bc:a7:17:13:ad:64:24:62:
                    f5:6a:a1:88:c4:3e:1a:9e:f3:2c:fd:ba:7a:35:45:
                    3c:d1:65:bc:6a:63:61:9f:d0:75:cd:e8:65:29:64:
                    62:39:cc:fd:2a:42:86:88:aa:61:68:bf:71:ac:29:
                    cc:25:71:c1:30:07:92:53:7b:c2:6e:f1:a1:63:5b:
                    c9:28:59:76:49:de:54:96:9a:e3:76:ee:2b:b5:26:
                    c5:b4:b6:08:26:09:7d:32:1b:cd:1f:ca:47:49:f2:
                    31:f8:cf:d5:15:01:dd:3b:a1:4a:b8:12:21:06:38:
                    dd:8e:4c:10:b5:da:d7:5e:ff:24:03:3c:56:94:65:
                    0c:88:41:06:0d:52:e4:f1:bc:c2:be:9b:e6:65:83:
                    32:26:20:e8:66:2a:64:45:f6:14:1d:1c:b9:a8:c3:
                    2b:8d:fd:99:cb:4f:05:ae:fb:08:f8:23:d3:ac:fc:
                    5e:57:1e:14:4c:ff:f9:74:2d:97:26:0e:8f:26:b1:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:13:AA:BB:C8:24:37:BB:DD:B9:C0:8D:C8:7F:22:3F:8E:75:65:77
            X509v3 Authority Key Identifier:
                keyid:AE:32:50:6C:8C:AD:C1:7B:F0:B2:D1:C9:71:A2:E3:2C:8D:E8:C5:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/0/AE32506C8CADC17BF0B2D1C971A2E32C8DE8C58B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE32506C8CADC17BF0B2D1C971A2E32C8DE8C58B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/0/3137302e3135302e3139322e302f32322d3234203d3e20323633353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:3e:19:76:48:b9:b7:49:ae:39:7e:75:6e:42:ee:01:c6:e8:
         00:2a:9b:4a:17:6f:29:0c:d6:65:a3:67:1e:c6:7d:de:0c:25:
         f4:32:e0:3d:50:d3:9f:b3:e6:5b:70:b4:43:0a:f4:e3:9e:4c:
         0e:dd:41:47:5e:b1:25:bf:ee:23:6b:61:15:b2:8e:02:69:13:
         12:b9:72:5d:a7:37:90:6b:d5:92:94:34:3d:33:93:88:3c:99:
         ab:77:22:40:42:ff:37:d6:54:bd:cd:fd:1a:fc:cd:fe:0e:ba:
         ce:d3:3e:46:cc:90:30:23:85:bd:7c:7c:be:c3:da:8c:64:a0:
         6f:ef:dc:58:5f:33:41:2b:ee:ed:9f:86:a0:9e:36:aa:d9:f1:
         9e:f6:16:54:bb:85:b4:24:43:0f:cc:eb:5d:17:8e:f0:32:d8:
         3e:69:68:a4:af:e1:23:42:71:5f:0c:2c:96:17:b4:37:50:a0:
         0e:cd:45:81:a4:57:e8:80:a8:49:63:05:d1:64:b6:70:dc:fa:
         63:4d:10:1d:af:3f:9a:de:fd:6e:1d:a9:3d:cc:f2:60:9d:68:
         53:fd:de:e1:b5:a7:54:a7:8e:d4:72:81:5a:8d:0d:02:cc:ca:
         91:47:43:7a:8f:30:d1:b7:7e:67:f8:ab:0a:0c:cf:ae:9d:dc:
         f9:da:75:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org