Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32322d3233203d3e20323635313538.roa
File:                     3136372e3234392e31362e302f32322d3233203d3e20323635313538.roa (raw, json)
Hash identifier:          A85VQDtjeQE5jia2xIcvnjrj5j9LnmJc7HMgJOzkWuE=
Subject key identifier:   38:99:98:42:24:DB:C5:68:0E:55:EB:61:65:8E:D6:87:62:30:56:95
Certificate issuer:       /CN=30C664F11477DA38A38072BEC7DCD39D253551F5
Certificate serial:       7C131D76FCED57E69EA6756E46F56DB583EF5073
Authority key identifier: 30:C6:64:F1:14:77:DA:38:A3:80:72:BE:C7:DC:D3:9D:25:35:51:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30C664F11477DA38A38072BEC7DCD39D253551F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32322d3233203d3e20323635313538.roa
Signing time:             Tue 13 Feb 2024 14:04:52 +0000
ROA not before:           Tue 13 Feb 2024 13:59:52 +0000
ROA not after:            Tue 11 Feb 2025 14:04:52 +0000
asID:                     265158
IP address blocks:        167.249.16.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:13:1d:76:fc:ed:57:e6:9e:a6:75:6e:46:f5:6d:b5:83:ef:50:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30C664F11477DA38A38072BEC7DCD39D253551F5
        Validity
            Not Before: Feb 13 13:59:52 2024 GMT
            Not After : Feb 11 14:04:52 2025 GMT
        Subject: CN=3899984224DBC5680E55EB61658ED68762305695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:41:23:8f:17:7d:da:f4:d6:e9:9e:a7:44:e4:
                    a8:8e:57:cd:42:bf:3d:25:14:bb:3f:04:1f:77:09:
                    3e:18:60:bc:0a:b8:08:a6:db:66:3f:da:3c:9a:b0:
                    78:5b:5a:cc:78:42:dd:cb:2f:6c:28:b8:a3:01:f9:
                    58:41:f4:7e:a6:c0:a8:c6:fe:6e:3a:13:98:8e:1e:
                    29:fe:4f:e4:b3:08:97:6a:fb:88:8e:73:bc:3f:fd:
                    6e:3b:b8:5b:37:ed:2b:02:c8:ca:ce:56:74:64:11:
                    8c:a9:81:9c:70:72:d2:4a:3b:2c:7c:ee:24:0c:44:
                    e0:60:c2:91:1a:f2:ff:db:6c:28:18:e6:dd:73:c4:
                    b7:57:cd:65:00:f9:36:94:d4:9d:f6:ee:6c:25:48:
                    1a:6e:97:a6:f4:9c:90:32:0d:fd:0f:04:32:d4:37:
                    94:bf:2e:53:b9:a5:bd:bc:39:48:ea:a4:ae:36:ce:
                    d9:19:a7:dd:44:8c:67:89:ee:40:4a:12:8e:96:10:
                    47:f7:97:85:94:5e:4c:37:9a:2b:20:3a:9c:07:cb:
                    4f:70:b0:dd:4a:b3:96:69:33:20:fe:a6:c9:a6:51:
                    7a:f9:85:23:61:f2:ef:d1:62:80:ae:8d:34:3c:2f:
                    d4:92:d9:3b:1f:59:ea:8a:22:6b:b9:1e:c1:51:c2:
                    19:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:99:98:42:24:DB:C5:68:0E:55:EB:61:65:8E:D6:87:62:30:56:95
            X509v3 Authority Key Identifier:
                keyid:30:C6:64:F1:14:77:DA:38:A3:80:72:BE:C7:DC:D3:9D:25:35:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/30C664F11477DA38A38072BEC7DCD39D253551F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/30C664F11477DA38A38072BEC7DCD39D253551F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32322d3233203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:86:0f:1c:05:bf:c1:04:00:3e:2f:97:76:5f:ec:4d:6f:d0:
         f6:a0:fa:a4:97:f7:4b:ce:17:6b:7f:a5:3b:e8:3f:ec:b2:7d:
         73:48:f7:35:87:3d:81:43:91:8e:64:5b:5d:27:1d:ff:96:d3:
         52:be:2f:8c:df:89:d8:0a:fc:1b:3b:19:63:0c:c9:46:cf:02:
         5a:a7:99:03:c7:b3:49:37:46:c3:19:f2:03:65:88:02:55:dd:
         f2:c8:6d:e3:14:7c:a1:1b:1b:0d:17:7a:77:c6:25:ae:41:68:
         6a:ba:35:25:9c:1e:f0:f4:98:56:a3:30:23:d9:4a:9e:c7:ea:
         7a:2d:58:af:e8:cd:5e:26:03:5b:a6:48:14:60:df:3c:73:46:
         c0:04:6f:1d:26:db:82:0c:f5:c6:2b:30:aa:c1:05:ef:f5:cc:
         0a:88:43:0a:5d:3a:b3:be:72:62:e0:5e:76:8b:49:7a:d4:8a:
         5c:f9:19:d3:ef:53:b0:83:dd:d8:a7:dc:5a:0c:7b:36:73:eb:
         bd:af:a0:82:03:f3:14:29:93:f6:84:e2:6f:e8:7c:26:1b:4c:
         c2:40:3f:fd:6d:f9:b9:04:68:57:72:ca:0d:35:2e:90:89:c9:
         37:d5:f9:fe:15:3a:b1:06:d5:8f:bd:67:e5:89:f3:37:37:82:
         34:ce:ce:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:10 2024 by rpki-client on console-ams.rpki-client.org