Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa
File:                     3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          Yoe4nbfrN1lqGlmG1Os+2DiRsp1ijfP+d72Ar2G2Ibs=
Subject key identifier:   6C:D2:BE:22:97:D8:FB:AB:10:D5:38:47:EB:75:D0:7D:FB:A3:C2:63
Certificate issuer:       /CN=37834545A38892C3FF1B7141126084730A12B7AC
Certificate serial:       700CD5E8E2B24EE5EAF8D0486E18E9FDCACF48
Authority key identifier: 37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa
Signing time:             Wed 25 Oct 2023 19:18:05 +0000
ROA not before:           Wed 25 Oct 2023 19:13:05 +0000
ROA not after:            Wed 23 Oct 2024 19:18:05 +0000
asID:                     265041
IP address blocks:        170.150.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0c:d5:e8:e2:b2:4e:e5:ea:f8:d0:48:6e:18:e9:fd:ca:cf:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37834545A38892C3FF1B7141126084730A12B7AC
        Validity
            Not Before: Oct 25 19:13:05 2023 GMT
            Not After : Oct 23 19:18:05 2024 GMT
        Subject: CN=6CD2BE2297D8FBAB10D53847EB75D07DFBA3C263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:44:f3:b9:48:98:70:ce:a8:0f:48:a0:f0:
                    0f:94:ad:04:fc:de:97:2f:30:7d:fb:f4:d0:5a:4c:
                    fd:37:4d:22:aa:3f:b2:9a:37:3e:67:96:ae:00:cf:
                    8c:da:b5:17:66:5a:45:64:2e:de:4b:f5:2a:d9:8e:
                    26:4d:e3:a5:f0:d6:f1:d8:bd:0f:57:f9:a1:f6:b6:
                    b8:03:73:b6:23:c7:04:a9:7a:92:cc:2d:45:97:99:
                    25:6b:4b:c0:96:63:c3:bc:af:c6:a8:56:e2:ab:8b:
                    9e:76:87:d2:da:02:7d:ec:a2:4e:24:a9:0f:0c:78:
                    03:d6:15:9f:60:f8:75:6d:e4:39:a2:27:b1:d5:71:
                    3b:de:28:82:38:45:22:df:cd:79:d0:7a:7e:9c:a9:
                    bf:06:a6:a2:3f:66:f9:ee:86:c6:60:0c:3a:61:90:
                    5d:c0:ee:d8:bc:72:db:66:d2:e0:de:e0:d6:52:1f:
                    de:3e:01:ce:13:9f:2d:50:9b:44:de:1b:40:29:df:
                    83:51:55:53:7c:84:86:51:f7:2f:6c:7c:a3:a3:24:
                    20:62:67:8a:0a:e3:76:72:58:6c:20:13:75:84:91:
                    f0:e3:8e:ee:8b:0f:73:54:15:ac:68:51:13:60:17:
                    ac:f0:a9:a8:03:d8:bd:16:50:01:9c:28:a6:d3:71:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D2:BE:22:97:D8:FB:AB:10:D5:38:47:EB:75:D0:7D:FB:A3:C2:63
            X509v3 Authority Key Identifier:
                keyid:37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d9:80:18:2c:3f:1e:9b:5e:ae:68:cd:38:1f:71:de:85:0a:
         8d:02:48:7d:20:b8:0a:6a:25:ad:64:4f:19:dd:3f:b1:13:ae:
         35:98:43:0f:1c:d3:8c:47:8a:ea:39:c9:8e:22:14:02:46:ed:
         f2:17:aa:68:68:5e:52:2a:b0:f1:ae:82:25:e0:87:9a:53:c8:
         5a:01:99:5a:7f:5e:bb:78:f0:1b:57:ae:77:e1:67:d7:90:80:
         dc:0f:f6:f6:c1:a1:d6:b7:e6:7f:b3:07:64:4c:76:17:de:fe:
         56:4d:0b:44:67:dc:13:39:70:c7:cd:c7:d9:a0:be:45:e3:b4:
         be:e4:21:b5:4f:b1:51:17:6a:62:aa:9a:85:e8:e4:68:0a:b6:
         18:06:ac:3a:9b:1c:f8:7b:07:c0:09:6f:2f:04:2d:65:f9:95:
         e9:4d:2a:40:13:d5:92:87:a6:6b:eb:05:5a:25:03:a2:b5:42:
         97:a3:e5:36:69:5e:87:d9:d8:91:1f:8e:c6:9a:8b:31:db:ac:
         85:f2:b8:83:ac:08:07:38:c9:1a:e7:c0:ce:9b:fd:b9:7a:89:
         b0:76:06:bd:45:9d:ed:0e:c1:e3:3d:99:0f:3f:58:d3:a1:4a:
         1f:73:32:d8:c4:4e:cd:85:e8:13:e4:c6:ef:be:f9:87:c7:cb:
         14:a4:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:03 2024 by rpki-client on console.sobornost.net