Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137302e3135302e3234302e302f32322d3234203d3e20323633363436.roa
File:                     3137302e3135302e3234302e302f32322d3234203d3e20323633363436.roa (raw, json)
Hash identifier:          StAvje31F+GXDi4fIHiqupvTbyY+Wcb+Qjj6bVI36CM=
Subject key identifier:   97:A8:F1:BD:06:82:2A:B3:A8:DE:DB:B9:5A:1C:89:50:A9:7D:F5:E9
Certificate issuer:       /CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
Certificate serial:       7CED87DCC455B05D5B515D5778519F94577998AD
Authority key identifier: 19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137302e3135302e3234302e302f32322d3234203d3e20323633363436.roa
Signing time:             Fri 14 Jan 2022 23:41:05 +0000
ROA not before:           Fri 14 Jan 2022 23:36:05 +0000
ROA not after:            Fri 13 Jan 2023 23:41:05 +0000
asID:                     263646
IP address blocks:        170.150.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ed:87:dc:c4:55:b0:5d:5b:51:5d:57:78:51:9f:94:57:79:98:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
        Validity
            Not Before: Jan 14 23:36:05 2022 GMT
            Not After : Jan 13 23:41:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d4:08:e2:b3:90:d1:7e:be:c9:fe:eb:e8:e2:
                    56:95:5c:b9:e6:30:b5:4f:8b:86:c1:5e:ae:7a:a9:
                    b1:88:88:39:75:e1:30:6e:9e:a4:71:12:0d:5a:0b:
                    e4:db:a9:b4:3a:4b:7e:c0:81:c8:fe:fd:8f:99:15:
                    be:98:4e:9d:b6:67:9b:db:a0:38:52:6c:df:ec:0f:
                    1d:bc:87:4c:b8:45:80:ae:29:33:8e:f5:82:60:d0:
                    20:05:7a:fd:b6:82:ef:7c:8f:e1:8a:61:db:a4:50:
                    c4:20:5f:e3:1c:4a:f8:b6:13:b8:2a:9b:30:80:90:
                    dd:d2:d2:30:30:a3:ff:f8:83:6f:4e:85:61:af:49:
                    11:aa:98:ad:0d:44:54:34:5f:72:57:b3:02:2a:9b:
                    92:f3:99:bc:b2:ee:7a:d7:14:24:d1:96:99:3c:55:
                    84:20:82:d8:b0:08:0a:c1:d8:31:37:6d:86:24:25:
                    89:3a:8b:4c:89:a3:26:39:66:66:e2:df:07:c9:98:
                    c3:8b:1b:ac:c1:f0:09:c5:53:f5:3c:a3:36:3d:08:
                    e4:21:26:e3:e1:69:df:59:3c:51:63:5f:22:84:74:
                    9e:7a:a8:de:c6:01:c9:9a:df:d0:5b:7a:7d:01:b5:
                    f7:01:24:d7:f3:5d:26:d6:e4:02:2e:cb:4a:bb:a9:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A8:F1:BD:06:82:2A:B3:A8:DE:DB:B9:5A:1C:89:50:A9:7D:F5:E9
            X509v3 Authority Key Identifier:
                keyid:19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3137302e3135302e3234302e302f32322d3234203d3e20323633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:99:41:d3:61:bb:e6:b3:87:07:8d:58:5d:18:01:77:0f:3a:
         69:3b:ab:88:04:35:b9:a1:ef:ae:2a:d1:08:81:98:73:54:ae:
         2a:02:00:84:db:bd:ad:06:ce:cc:40:a0:dc:46:60:ea:03:d5:
         41:ff:e3:d3:76:51:8d:00:2b:93:c4:09:95:bf:be:b1:4d:38:
         6f:0d:a9:3b:56:cd:18:5f:f2:52:cb:30:b4:3d:bc:4f:08:e6:
         a1:3e:56:85:eb:0e:59:0c:ac:73:69:34:2c:8c:43:73:54:59:
         8b:fe:32:96:23:2b:2b:0b:01:6d:0b:57:b1:8a:90:2f:26:27:
         ae:ae:29:e4:ec:71:d6:95:aa:76:6d:25:0b:28:06:f9:4d:dc:
         17:47:d9:44:86:b3:cd:2e:14:dd:9a:f0:25:8b:d7:65:1d:ab:
         8f:c8:bf:47:8c:45:52:b2:4b:d6:4d:d0:df:04:9f:97:49:f0:
         99:22:38:f1:0d:79:a3:1e:df:b0:37:73:f9:39:2b:62:f4:55:
         78:32:59:dc:9f:5e:91:7a:c8:0c:91:e3:e6:19:ea:aa:d4:e0:
         c5:a8:23:71:4c:fa:90:1d:bf:d5:96:82:71:8e:5d:02:35:b2:
         12:a8:e7:0d:ea:2c:32:0b:ff:56:25:8b:37:a1:83:21:6b:0b:
         b8:46:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org