Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa
File:                     3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (raw, json)
Hash identifier:          gI0DeLaw2lXVeg5l+wOZ2J68UnTSwenJ9iAJuJVAz3U=
Subject key identifier:   E9:B4:6F:E0:4F:2A:D2:E6:6A:A1:B2:60:43:E8:9E:BB:F3:D3:4F:C8
Certificate issuer:       /CN=62BD461875786A00B21F073E8D02ACCE9BC15828
Certificate serial:       60DCB708A2399744BF31EA21FE1F2188F6FA0C14
Authority key identifier: 62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62BD461875786A00B21F073E8D02ACCE9BC15828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa
Signing time:             Mon 17 Jul 2023 14:36:00 +0000
ROA not before:           Mon 17 Jul 2023 14:31:00 +0000
ROA not after:            Mon 15 Jul 2024 14:36:00 +0000
asID:                     28130
IP address blocks:        170.150.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:dc:b7:08:a2:39:97:44:bf:31:ea:21:fe:1f:21:88:f6:fa:0c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BD461875786A00B21F073E8D02ACCE9BC15828
        Validity
            Not Before: Jul 17 14:31:00 2023 GMT
            Not After : Jul 15 14:36:00 2024 GMT
        Subject: CN=E9B46FE04F2AD2E66AA1B26043E89EBBF3D34FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:2e:2a:c1:ac:dd:12:1c:7a:fc:49:1e:1e:
                    64:71:f8:f9:72:1e:3c:1e:a2:44:1b:64:31:2d:03:
                    32:b4:35:88:1d:a1:f7:b1:4c:09:6b:75:ef:0d:9f:
                    85:de:88:86:ec:a6:ae:2a:c4:79:1b:b2:eb:05:6c:
                    de:cd:b3:bd:9c:ab:05:1e:74:72:56:75:c4:54:4c:
                    3e:93:8c:b6:94:b6:91:81:4a:00:69:1b:84:70:cc:
                    0e:46:c9:e2:09:af:82:3a:bc:ee:2c:81:6a:02:a8:
                    22:c2:0d:5c:16:c2:d0:4f:af:43:a0:db:c9:23:36:
                    b7:89:27:37:f1:86:5e:b8:0c:b0:1e:d6:77:9f:a7:
                    ec:84:78:90:6c:5a:e2:0a:91:d9:4f:90:b9:e3:ee:
                    bb:d2:f3:f4:1b:c0:1b:b9:11:6a:21:d6:dd:ff:a4:
                    d3:c9:78:00:e4:d0:09:f8:79:54:65:d0:4d:9d:28:
                    c8:54:7a:7d:9f:5b:b1:30:b7:a5:c6:7b:00:71:d6:
                    66:d0:f8:e7:39:91:dc:fa:32:bf:a8:f3:32:e7:45:
                    38:9d:2d:39:c9:66:f0:73:a8:28:da:5b:82:32:e8:
                    58:5b:ad:37:2a:7f:13:c7:74:dc:8e:d4:de:b2:fe:
                    12:69:2e:a9:27:41:ef:db:2e:d3:58:eb:1b:52:8a:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B4:6F:E0:4F:2A:D2:E6:6A:A1:B2:60:43:E8:9E:BB:F3:D3:4F:C8
            X509v3 Authority Key Identifier:
                keyid:62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/62BD461875786A00B21F073E8D02ACCE9BC15828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62BD461875786A00B21F073E8D02ACCE9BC15828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:00:73:39:46:c1:00:9a:cc:6c:f5:ce:e3:c0:d3:1b:ca:0f:
         56:04:9a:86:5f:f7:f2:69:7d:ab:00:45:7e:74:61:7a:da:30:
         c2:63:dd:a3:f9:3f:87:a6:4b:61:e8:82:90:43:ca:1f:e2:8b:
         75:f3:90:ed:24:f6:27:43:25:98:1c:06:00:8b:11:3c:a1:06:
         e9:a4:fc:33:e7:29:e7:56:e9:5a:e5:af:83:5d:d8:a2:16:52:
         b2:84:4c:f1:01:f8:6f:b0:4b:b7:a7:ad:a5:c6:8a:90:c7:3c:
         8c:e1:87:f8:09:b2:69:3a:5c:12:d8:8d:d7:72:df:2f:a2:72:
         fd:7d:bd:bf:50:e9:fa:ea:38:7f:fb:61:8d:e2:cf:f7:02:92:
         b6:f9:08:26:c4:23:7c:7f:b9:2d:76:06:06:a4:f3:c5:37:dc:
         a2:5c:35:55:ad:af:91:14:76:5e:cd:04:92:10:38:3b:d1:0f:
         70:a7:7f:73:f2:7e:c2:6d:c6:2d:06:58:9d:89:b2:9c:5d:cf:
         84:3d:45:c7:fa:25:ee:8b:0d:7e:30:b5:37:10:e4:3a:69:90:
         29:08:1b:26:4a:f0:56:d0:2d:e7:df:76:cc:d8:cf:47:d1:84:
         bd:ae:ed:ed:5d:e0:d1:87:3d:81:b7:6d:4c:0e:45:c8:d9:af:
         6d:9f:1e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org