Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3136372e3235302e31322e302f32322d3234203d3e203532383037.roa
File:                     3136372e3235302e31322e302f32322d3234203d3e203532383037.roa (raw, json)
Hash identifier:          8j20mJBQayG06ySFk6TuB8ZT4arYtVQBpmvJm1vHc68=
Subject key identifier:   1D:03:42:98:1F:B4:F5:03:4B:BD:F1:53:6D:4B:72:D0:80:2B:C4:F5
Certificate issuer:       /CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
Certificate serial:       543AB6B3AD6248211AE43100D47EC30174864730
Authority key identifier: AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3136372e3235302e31322e302f32322d3234203d3e203532383037.roa
Signing time:             Wed 10 Apr 2024 13:29:28 +0000
ROA not before:           Wed 10 Apr 2024 13:24:28 +0000
ROA not after:            Wed 09 Apr 2025 13:29:28 +0000
asID:                     52807
IP address blocks:        167.250.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3a:b6:b3:ad:62:48:21:1a:e4:31:00:d4:7e:c3:01:74:86:47:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
        Validity
            Not Before: Apr 10 13:24:28 2024 GMT
            Not After : Apr  9 13:29:28 2025 GMT
        Subject: CN=1D0342981FB4F5034BBDF1536D4B72D0802BC4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:e1:1d:0b:f8:94:8b:95:61:94:fb:2b:7d:
                    9a:25:ed:22:36:be:b9:23:74:ee:71:d3:20:e3:22:
                    69:37:b3:87:c8:94:ba:81:b0:1d:97:6e:6f:51:40:
                    a7:9f:8c:95:1f:ed:d8:f6:80:42:68:80:d3:3a:5f:
                    48:7e:5e:20:7e:40:2d:71:35:cb:61:9a:d6:05:ef:
                    49:2a:88:62:fd:8e:2c:91:f9:f9:77:40:c3:f2:36:
                    3a:0c:cd:b7:e8:b6:53:37:14:b4:93:dd:c9:47:a8:
                    0d:7c:ee:66:4f:68:f3:37:3d:3b:6f:21:df:3a:e1:
                    89:34:53:dc:20:db:8e:8e:55:86:58:06:9c:8e:8d:
                    d0:fd:59:26:ef:18:f1:df:af:92:6b:0a:62:69:0c:
                    7a:3d:8d:a9:e6:5c:91:12:d7:cc:23:11:6b:b0:46:
                    35:d3:92:b7:d1:f2:c4:ba:ff:e9:4d:e5:71:7d:2b:
                    c6:b7:f0:8e:d3:9e:cc:cd:46:72:17:f7:7c:64:3f:
                    88:d4:71:1d:df:b3:26:d3:fe:77:13:e6:1d:29:8f:
                    28:89:fd:d7:22:c0:37:59:31:7a:86:e2:4b:b3:43:
                    d0:4e:37:04:52:87:f4:b7:28:93:8a:92:cf:87:11:
                    53:06:6d:8d:23:3e:e6:e7:34:46:c8:8b:bc:0b:e4:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:03:42:98:1F:B4:F5:03:4B:BD:F1:53:6D:4B:72:D0:80:2B:C4:F5
            X509v3 Authority Key Identifier:
                keyid:AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3136372e3235302e31322e302f32322d3234203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:f4:e4:b7:76:8e:6c:ee:56:78:49:8f:54:be:f4:a4:b9:09:
         82:79:eb:c5:e1:9a:ba:ae:5d:2f:db:59:ce:24:6c:64:11:74:
         13:91:68:27:0f:a9:ed:0a:d9:d9:52:4a:00:5f:d6:05:0a:cc:
         82:d6:48:03:1e:0a:70:1b:f9:48:f5:1f:fd:6d:c6:5c:b4:53:
         1b:4b:ac:fe:5b:94:8d:b8:07:ac:f6:bc:dd:41:c1:e5:b7:f4:
         58:f6:a4:8f:f6:10:ae:58:3c:59:fa:b0:85:ce:45:08:68:70:
         0e:2a:37:22:40:b4:ca:29:c6:a6:17:31:fd:8c:cb:8a:35:5a:
         4f:f1:b6:6c:57:f8:cd:7b:6f:15:8f:67:7d:d6:17:9f:bb:09:
         23:90:9d:5b:01:05:15:32:ce:af:73:63:81:44:b1:e8:8f:61:
         eb:9e:59:14:bf:08:a3:27:2f:aa:29:4e:b4:07:c6:f0:c6:ae:
         02:d3:0a:ed:2a:49:7a:f0:37:e6:68:b3:ec:f4:8b:c1:ea:9f:
         07:f9:5c:a6:d7:34:3f:a7:8b:fe:16:08:05:0e:19:bd:4d:27:
         db:00:83:44:96:cb:b9:28:e5:62:c3:34:22:89:9a:bb:2d:ad:
         ee:b4:86:2a:1d:8c:7e:fa:d9:24:2b:22:ff:28:a3:b4:d8:4e:
         7f:80:e1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org