Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/1/3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa
File:                     3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa (raw, json)
Hash identifier:          wMga0NUCUAMDx6++2/kD7+HEskNqmXeWVXYMX7DrEBg=
Subject key identifier:   9A:77:4A:B4:8F:44:A5:C7:37:76:E3:46:A0:54:E9:F1:99:3D:64:E8
Certificate issuer:       /CN=4F58EB0878DA3D871D2B0ACA0FF18AE9C6BEC1BA
Certificate serial:       64AEAFB529B5EA62CFE619435E88C37B6355D652
Authority key identifier: 4F:58:EB:08:78:DA:3D:87:1D:2B:0A:CA:0F:F1:8A:E9:C6:BE:C1:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F58EB0878DA3D871D2B0ACA0FF18AE9C6BEC1BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/1/3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa
Signing time:             Mon 26 Feb 2024 12:25:07 +0000
ROA not before:           Mon 26 Feb 2024 12:20:07 +0000
ROA not after:            Mon 24 Feb 2025 12:25:07 +0000
asID:                     265050
IP address blocks:        170.150.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ae:af:b5:29:b5:ea:62:cf:e6:19:43:5e:88:c3:7b:63:55:d6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F58EB0878DA3D871D2B0ACA0FF18AE9C6BEC1BA
        Validity
            Not Before: Feb 26 12:20:07 2024 GMT
            Not After : Feb 24 12:25:07 2025 GMT
        Subject: CN=9A774AB48F44A5C73776E346A054E9F1993D64E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:90:36:12:1c:cb:b6:18:71:46:db:37:9f:
                    c1:bf:84:88:1e:8f:dc:b5:04:02:d7:4f:73:83:91:
                    01:98:c2:ea:2f:01:0c:c8:f3:5b:9f:84:36:ff:ae:
                    18:0b:5d:e2:3f:c6:47:13:bf:4b:bd:4d:f2:d8:7e:
                    61:87:70:d8:e9:28:82:06:a1:02:4a:22:f9:2e:96:
                    16:c2:ce:b0:11:3d:40:7c:18:fe:43:00:bd:83:e6:
                    9e:bb:ee:a3:76:ad:ca:ec:f2:9f:39:db:3d:93:d5:
                    25:2a:2b:a0:b0:8c:15:80:79:64:65:f2:b3:e7:c4:
                    d0:1f:7b:b0:73:03:1a:bc:9d:b4:fe:f3:ca:88:c6:
                    b1:db:c8:e3:e6:ef:5d:2e:a9:98:f1:b9:db:14:7d:
                    1a:6a:ac:34:48:ab:89:41:31:e8:b7:18:ef:48:96:
                    76:f2:90:ca:43:6b:da:41:82:d6:d2:2c:ac:44:96:
                    a8:77:37:95:ab:af:90:88:2b:53:69:7a:63:d9:53:
                    35:5f:3c:d4:1a:1f:89:f4:61:86:85:6c:b7:43:d0:
                    89:60:71:5f:53:6c:35:94:34:5f:d2:f2:4c:c2:72:
                    c7:46:cd:84:ca:71:d1:58:d5:45:37:6b:6a:d2:5f:
                    13:42:64:51:20:2b:ec:22:f1:d1:f7:44:3c:8e:14:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:77:4A:B4:8F:44:A5:C7:37:76:E3:46:A0:54:E9:F1:99:3D:64:E8
            X509v3 Authority Key Identifier:
                keyid:4F:58:EB:08:78:DA:3D:87:1D:2B:0A:CA:0F:F1:8A:E9:C6:BE:C1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/1/4F58EB0878DA3D871D2B0ACA0FF18AE9C6BEC1BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F58EB0878DA3D871D2B0ACA0FF18AE9C6BEC1BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/1/3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:9e:e8:17:1d:82:b8:81:c3:71:51:a1:d5:1a:b1:1d:38:a6:
         d2:d1:30:ce:59:4c:e8:6f:c0:22:67:b6:5e:32:94:9f:0e:82:
         da:8b:78:67:55:3e:a4:43:ea:2a:80:2b:88:58:ae:ff:11:59:
         b1:ad:4c:85:f5:08:72:18:b0:45:68:1a:2b:bd:f7:84:62:e1:
         3d:30:d8:c8:26:2c:8d:93:c6:ae:3e:85:15:6e:4e:28:14:e6:
         56:43:9d:78:8f:c1:2f:35:e7:86:33:6e:16:21:41:1d:e4:8f:
         b5:7f:e7:e3:35:ff:02:11:eb:2d:0c:c2:1b:8b:bb:04:0f:02:
         75:12:f1:44:29:19:87:53:25:b8:24:59:58:cf:e1:ff:49:ed:
         e4:21:7e:41:c3:9b:f2:84:af:17:7a:2f:cc:50:5c:c7:0a:47:
         df:0b:20:8b:8b:ae:3b:86:97:d9:44:c3:b3:46:a3:ea:10:91:
         0c:21:4f:c7:2f:b2:ce:25:4d:d7:48:0d:03:31:8d:a4:c9:23:
         39:b0:7c:7b:50:1f:70:4e:8f:b9:fa:70:83:b3:bd:2d:48:53:
         98:47:90:61:b1:a2:c2:05:1a:9e:1f:53:6d:cd:6d:ef:ab:cc:
         df:27:4d:8c:e9:d4:62:73:6a:82:f1:25:30:f6:95:c9:2e:82:
         c5:8a:b0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org