Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/3137302e3135302e3234382e302f32322d3234203d3e203532353635.roa
File:                     3137302e3135302e3234382e302f32322d3234203d3e203532353635.roa (raw, json)
Hash identifier:          cXN2rXiSuykrNcrOGKfdg7sMrH/UpY3oWtE1DAmlrV0=
Subject key identifier:   81:5D:01:D5:72:A9:71:DA:EC:4C:03:D7:33:A1:2F:A6:86:3D:D1:89
Certificate issuer:       /CN=6079C649A991E25158493789223D12CEE8A7D2FC
Certificate serial:       68297985EA3F099DF2F111FEF981E22F358895E9
Authority key identifier: 60:79:C6:49:A9:91:E2:51:58:49:37:89:22:3D:12:CE:E8:A7:D2:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6079C649A991E25158493789223D12CEE8A7D2FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/3137302e3135302e3234382e302f32322d3234203d3e203532353635.roa
Signing time:             Mon 09 Jan 2023 19:54:14 +0000
ROA not before:           Mon 09 Jan 2023 19:49:14 +0000
ROA not after:            Mon 08 Jan 2024 19:54:14 +0000
asID:                     52565
IP address blocks:        170.150.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:29:79:85:ea:3f:09:9d:f2:f1:11:fe:f9:81:e2:2f:35:88:95:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6079C649A991E25158493789223D12CEE8A7D2FC
        Validity
            Not Before: Jan  9 19:49:14 2023 GMT
            Not After : Jan  8 19:54:14 2024 GMT
        Subject: CN=815D01D572A971DAEC4C03D733A12FA6863DD189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fe:52:5f:9f:b5:ca:6d:62:f7:2f:36:48:2d:
                    27:ba:44:b4:96:f1:0c:6a:54:bf:18:b8:15:95:7f:
                    47:62:ef:47:5e:e9:49:6a:9a:4a:82:be:e5:9a:6f:
                    4c:24:0e:00:9e:32:7e:61:a3:7b:6e:95:3f:e4:e1:
                    a9:47:d5:e2:c5:76:27:c4:47:e2:ed:24:22:44:11:
                    c7:bb:e3:00:70:4c:fa:dd:9c:7b:e0:fa:9a:f8:23:
                    80:74:77:d1:69:92:73:5d:82:60:bb:41:46:64:a8:
                    5c:85:5b:8b:34:82:01:0c:3e:fb:b9:3e:1d:c8:38:
                    f6:83:00:1d:4c:1e:0e:2f:7e:77:34:73:82:e8:51:
                    5e:d0:fb:43:67:fb:62:05:21:3a:cd:17:26:e1:ce:
                    3c:6e:c8:7d:68:b0:72:44:04:49:36:61:62:08:50:
                    db:16:8f:48:6e:38:c7:54:0a:56:aa:97:48:ba:e0:
                    89:55:f4:cf:45:38:b5:e4:af:5a:2a:c3:a1:8e:d3:
                    ca:ef:28:e7:c2:1b:9f:64:c9:d3:72:9d:32:07:72:
                    e9:23:88:ba:f4:a3:98:13:d3:aa:c1:35:b5:4f:c2:
                    8d:0e:e4:2a:d4:cc:f3:e8:b3:31:80:ad:21:c8:79:
                    f6:ff:53:3b:a6:70:a4:0f:15:b5:1e:21:01:ae:25:
                    92:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5D:01:D5:72:A9:71:DA:EC:4C:03:D7:33:A1:2F:A6:86:3D:D1:89
            X509v3 Authority Key Identifier:
                keyid:60:79:C6:49:A9:91:E2:51:58:49:37:89:22:3D:12:CE:E8:A7:D2:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/6079C649A991E25158493789223D12CEE8A7D2FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6079C649A991E25158493789223D12CEE8A7D2FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/3137302e3135302e3234382e302f32322d3234203d3e203532353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:cf:e8:c5:93:16:75:ea:02:af:37:e9:45:dd:07:2d:d6:
         1b:5d:04:8a:56:75:37:ee:ba:17:cb:c0:0e:77:1d:f2:7b:ae:
         2b:ba:78:9e:74:8d:1c:c0:51:9e:e1:4b:2e:ff:1e:ca:1b:ae:
         a1:ab:20:fe:9a:a9:89:5a:52:91:2c:64:72:a8:61:b1:e5:53:
         84:e3:59:a5:38:a2:04:23:db:9f:62:af:a9:b4:d3:2a:cf:48:
         75:cd:2d:61:3d:4f:2e:37:24:92:c2:31:9e:3a:6d:95:ad:70:
         49:14:75:b0:db:a4:e6:4f:e9:27:91:c8:e1:5a:54:b6:f3:53:
         27:f7:4a:d4:3c:92:ba:83:15:f6:ae:3e:e1:62:fa:52:3c:71:
         3d:55:4e:f1:eb:14:d9:dd:f8:c6:21:5c:a3:f9:62:c1:b7:d7:
         cc:aa:42:3f:11:f8:d3:22:2c:ee:a4:19:f6:99:33:6a:b6:f9:
         b8:ca:5c:f1:82:da:71:70:21:03:26:a5:a2:3b:18:03:ae:1a:
         1e:15:a9:08:a4:a7:8d:0a:b3:8b:0e:7a:0a:c3:67:d7:06:f9:
         28:53:2c:ca:90:77:3a:ec:08:3c:90:cc:8d:1d:3a:0f:11:e6:
         25:25:db:2f:64:40:67:71:ad:4e:fe:a4:48:eb:0f:4b:81:8d:
         37:ac:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org