Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39362e302f32322d3234203d3e20323635303237.roa
File:                     3137302e3135302e39362e302f32322d3234203d3e20323635303237.roa (raw, json)
Hash identifier:          isFfbTGJrx4FH5GBq0o8lbSQ9RRTVTIv/9B1F7V7TIA=
Subject key identifier:   34:E4:36:40:48:6E:4B:2F:64:D7:D4:EF:76:8A:79:55:30:2E:0F:10
Certificate issuer:       /CN=CE42C6643057B482587A822C60FFD8A85EB45BDB
Certificate serial:       153F37F94F76596827392DF5BE9DE3E4E70F56ED
Authority key identifier: CE:42:C6:64:30:57:B4:82:58:7A:82:2C:60:FF:D8:A8:5E:B4:5B:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE42C6643057B482587A822C60FFD8A85EB45BDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39362e302f32322d3234203d3e20323635303237.roa
Signing time:             Thu 17 Aug 2023 02:10:12 +0000
ROA not before:           Thu 17 Aug 2023 02:05:12 +0000
ROA not after:            Thu 15 Aug 2024 02:10:12 +0000
asID:                     265027
IP address blocks:        170.150.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3f:37:f9:4f:76:59:68:27:39:2d:f5:be:9d:e3:e4:e7:0f:56:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE42C6643057B482587A822C60FFD8A85EB45BDB
        Validity
            Not Before: Aug 17 02:05:12 2023 GMT
            Not After : Aug 15 02:10:12 2024 GMT
        Subject: CN=34E43640486E4B2F64D7D4EF768A7955302E0F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:ee:41:1c:f5:70:62:81:ea:76:bd:29:4c:
                    02:7a:91:07:34:a7:76:c8:d5:78:90:9d:5a:14:a8:
                    d4:f0:7d:bd:2c:69:cf:e7:f3:74:fd:54:38:f8:2c:
                    1f:44:7e:df:31:74:b3:20:35:24:e2:f8:0a:b9:84:
                    9b:f1:62:6f:31:7d:bb:00:74:4d:0a:c1:7f:00:cb:
                    a0:08:f2:0b:be:67:87:e2:11:e5:29:b1:28:ce:c5:
                    02:49:c8:82:3c:30:06:5d:c1:ee:5b:54:09:17:85:
                    48:96:69:95:cf:bf:e1:8f:15:d9:75:b3:f6:70:18:
                    92:fe:9f:89:59:e0:04:e4:56:d0:25:a0:69:15:f1:
                    d3:70:b9:5e:40:fa:e8:8f:ee:fb:aa:bd:a2:72:4f:
                    93:90:d7:d4:6a:87:33:04:11:ee:7f:55:60:77:bb:
                    48:45:d7:72:d4:e3:ce:b5:a8:07:22:a2:8d:4a:88:
                    2e:25:45:63:6e:66:ae:dc:2d:38:ab:85:e6:a7:96:
                    d1:ec:1b:4a:25:a5:2d:84:61:8c:1b:f7:65:88:ff:
                    9a:ee:a3:f2:16:54:6a:1a:c6:e6:9a:e5:3c:7f:4f:
                    19:66:d2:12:d9:5f:be:5a:2b:b0:42:ff:f1:1a:a5:
                    58:87:4d:f4:0b:fc:4c:ee:e2:2d:86:39:32:c3:12:
                    ed:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E4:36:40:48:6E:4B:2F:64:D7:D4:EF:76:8A:79:55:30:2E:0F:10
            X509v3 Authority Key Identifier:
                keyid:CE:42:C6:64:30:57:B4:82:58:7A:82:2C:60:FF:D8:A8:5E:B4:5B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/CE42C6643057B482587A822C60FFD8A85EB45BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE42C6643057B482587A822C60FFD8A85EB45BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39362e302f32322d3234203d3e20323635303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:11:98:46:97:7c:91:f8:51:b4:ac:db:8d:89:9d:0f:34:6b:
         66:19:ae:8a:26:45:30:d6:d1:d1:43:f5:98:72:60:65:00:f2:
         3e:54:60:a9:76:64:45:64:54:03:fd:8a:c3:75:94:18:23:9d:
         29:19:1e:47:df:e0:ec:48:a0:f2:a3:2f:c3:42:6b:5a:01:d8:
         31:da:3d:94:03:31:93:2e:58:fe:f0:21:ec:73:3a:2c:b8:8a:
         f5:ae:91:e0:b0:f9:9b:30:b9:7b:3f:be:8a:78:88:ff:ab:16:
         69:7a:62:63:05:d2:19:cd:ee:18:22:b6:26:41:b0:01:34:c6:
         a1:1b:f9:a2:eb:5c:a9:48:49:7a:1f:b5:ad:56:17:8e:d8:3a:
         49:0b:17:e0:6a:c0:2f:38:ef:5c:5c:90:a4:71:ff:1f:7e:0d:
         57:5f:c0:5b:92:bd:7a:24:16:ec:1e:a4:65:82:17:bc:83:82:
         7d:4f:6a:b8:f0:05:0e:85:cf:aa:c3:8b:a0:2c:a0:27:a6:b6:
         7e:21:31:26:bf:78:a5:19:97:88:bd:c7:fc:5e:15:04:cc:ca:
         f1:b3:46:9d:98:55:7d:7e:07:72:4a:36:ce:b3:5c:cf:2a:83:
         9b:6e:84:6a:22:a7:7c:26:d0:88:87:0f:0c:32:90:11:50:bc:
         a1:8f:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org