Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/3137302e3135302e32342e302f32322d3234203d3e203631383930.roa
File:                     3137302e3135302e32342e302f32322d3234203d3e203631383930.roa (raw, json)
Hash identifier:          KCHxnRLiAA9OIyC6gcZwAXrOF5DfKZYefNOHaTK8Dx4=
Subject key identifier:   8F:55:0F:F7:5C:23:B0:CA:0D:CA:D7:13:42:2C:83:15:CE:D8:A9:B5
Certificate issuer:       /CN=5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05
Certificate serial:       0D840C6A705D73CB31353B1E6D1C960A86AC4900
Authority key identifier: 5A:8C:AA:67:AD:0E:B2:D7:CC:2B:8E:1D:F5:55:EA:81:F5:85:3E:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/3137302e3135302e32342e302f32322d3234203d3e203631383930.roa
Signing time:             Tue 12 Sep 2023 13:09:12 +0000
ROA not before:           Tue 12 Sep 2023 13:04:12 +0000
ROA not after:            Tue 10 Sep 2024 13:09:12 +0000
asID:                     61890
IP address blocks:        170.150.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:84:0c:6a:70:5d:73:cb:31:35:3b:1e:6d:1c:96:0a:86:ac:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05
        Validity
            Not Before: Sep 12 13:04:12 2023 GMT
            Not After : Sep 10 13:09:12 2024 GMT
        Subject: CN=8F550FF75C23B0CA0DCAD713422C8315CED8A9B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:44:7d:73:77:d8:d5:6d:52:a9:82:22:d7:
                    a1:b9:a2:05:99:9e:7b:6c:fd:78:43:4d:c1:b4:15:
                    a0:68:19:44:fb:44:1a:c4:4f:ef:74:1e:73:2f:fd:
                    bb:63:f0:a1:35:32:30:29:1c:66:1f:30:d6:c4:39:
                    e2:60:a4:ae:a3:f6:d5:bd:5f:72:69:3c:b7:31:86:
                    96:da:e3:82:b2:74:d4:4b:78:96:9a:48:07:d3:47:
                    a2:a3:70:56:08:d7:3b:8e:64:c2:9f:fd:78:a7:30:
                    d3:57:06:6b:06:46:79:6d:9b:cd:4b:58:84:a6:56:
                    45:03:e8:2f:f7:63:98:64:c1:ed:ad:79:90:83:aa:
                    8b:1f:a2:af:60:35:45:55:9a:09:aa:1f:ad:68:25:
                    3a:a0:5b:28:14:50:09:e7:c7:8d:90:48:5d:49:1c:
                    28:40:23:55:24:81:5e:64:27:f1:d6:7a:1d:6b:14:
                    da:04:7a:76:3b:6f:4f:5a:d4:32:2f:43:16:4f:dd:
                    2f:f2:14:2d:b4:b0:ef:35:75:e9:fc:35:34:e3:e0:
                    15:89:2c:d6:81:e1:d3:51:e6:57:82:fd:0f:b9:c3:
                    c2:ec:f5:85:55:e9:40:46:f2:c9:a8:50:83:fc:18:
                    a2:31:16:58:69:62:04:11:e4:46:db:ff:44:97:f2:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:55:0F:F7:5C:23:B0:CA:0D:CA:D7:13:42:2C:83:15:CE:D8:A9:B5
            X509v3 Authority Key Identifier:
                keyid:5A:8C:AA:67:AD:0E:B2:D7:CC:2B:8E:1D:F5:55:EA:81:F5:85:3E:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A8CAA67AD0EB2D7CC2B8E1DF555EA81F5853E05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbfHa1eVLksdfm7YCzsmp1QmcAdUm7XRSu4ihuWdaqV/0/3137302e3135302e32342e302f32322d3234203d3e203631383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:bd:b0:0e:cf:19:38:eb:00:4c:a3:49:63:a1:fa:39:ef:5b:
         fe:5e:3b:7f:84:fc:ab:16:43:28:f3:ef:97:12:2e:ee:d7:b4:
         69:02:fc:0e:37:f0:19:6e:6f:cc:2c:70:38:ff:50:ad:42:82:
         60:63:45:dc:ac:bc:6e:e3:cd:bf:19:2a:0f:c5:17:b6:d8:ca:
         46:3f:7b:84:19:f5:b0:a9:e9:1b:c0:e3:08:41:33:23:c0:14:
         aa:89:57:39:c5:94:d3:b2:7d:1e:7d:d5:a7:04:6d:a7:22:d8:
         ca:10:bf:c8:a0:60:9e:6e:6a:92:46:e1:97:00:78:34:8e:20:
         6a:ca:ca:16:57:c7:5c:25:25:dc:41:5f:5a:0a:96:e2:a8:ee:
         b6:23:ab:3a:b5:93:dc:6a:25:fd:a7:ee:b3:e5:dc:c7:ee:31:
         b4:bf:d4:24:22:41:ef:30:16:6f:22:6b:15:54:f6:3f:04:57:
         a0:6d:14:55:49:5c:3a:5c:f9:63:53:c7:fc:eb:b8:f3:4f:bf:
         97:a5:6d:8f:c0:da:4f:f5:4e:34:05:ba:d8:6b:60:7d:64:49:
         35:bb:d5:48:59:af:23:62:d2:17:04:3c:0c:cc:df:02:ed:e3:
         f5:06:53:19:0e:40:d1:4f:5b:bb:d5:37:4b:28:01:26:b8:2a:
         e0:e1:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org