Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130302e302f32332d3233203d3e203631383731.roa
File:                     3136372e3234392e3130302e302f32332d3233203d3e203631383731.roa (raw, json)
Hash identifier:          8RowWCTr2jmOLFsEdPQ31WxREMqKrdYybGCkL/zdYRk=
Subject key identifier:   1A:0C:21:96:B3:90:B1:91:85:73:90:BB:58:AF:23:A9:22:7B:45:1A
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       4595DFEF43E68ECA8763B0CD185ED4164D8D3D5D
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130302e302f32332d3233203d3e203631383731.roa
Signing time:             Thu 28 Dec 2023 22:46:00 +0000
ROA not before:           Thu 28 Dec 2023 22:41:00 +0000
ROA not after:            Thu 26 Dec 2024 22:46:00 +0000
asID:                     61871
IP address blocks:        167.249.100.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:95:df:ef:43:e6:8e:ca:87:63:b0:cd:18:5e:d4:16:4d:8d:3d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Dec 28 22:41:00 2023 GMT
            Not After : Dec 26 22:46:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:70:dd:0b:0a:d4:38:e2:37:b6:17:5a:06:
                    4a:3f:58:d1:f7:ec:2e:01:e1:f1:3f:e8:ad:11:22:
                    41:7d:d4:98:0a:ec:04:6c:7c:ae:04:6d:e9:65:91:
                    2e:58:82:3a:c4:ab:4b:51:78:f8:da:36:a6:3b:a7:
                    ab:fa:c7:e2:2a:94:7d:90:7e:80:0d:3c:ec:ef:36:
                    c0:b0:15:db:7f:2a:49:7c:4d:9f:e1:f4:ad:19:5a:
                    b0:87:ea:4d:b3:16:64:c1:59:6b:c2:81:0a:9a:3f:
                    72:aa:8b:93:22:0d:8f:39:7e:04:65:3b:4c:d3:f0:
                    4b:56:b4:15:a4:92:ba:03:e7:fe:1c:3d:6e:3e:97:
                    a7:94:98:47:25:4a:78:e5:66:7e:15:2c:2d:19:d3:
                    92:92:cd:2b:93:de:af:ed:6b:b1:22:b4:40:f9:4e:
                    2e:38:69:2d:01:45:b3:fb:11:8a:1e:e1:d5:ba:66:
                    7e:44:ef:13:28:b3:35:2e:65:a8:af:6c:71:90:52:
                    59:5a:ee:ca:30:12:95:ba:f3:76:44:3b:62:8f:d3:
                    80:79:5d:6f:1e:57:95:a6:7d:f0:97:14:b7:4d:c4:
                    76:de:28:a9:3c:f0:d6:cf:96:94:6a:a3:9c:6c:df:
                    92:5f:4d:f2:8b:d3:7b:74:1e:2e:59:28:97:fe:80:
                    7d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0C:21:96:B3:90:B1:91:85:73:90:BB:58:AF:23:A9:22:7B:45:1A
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130302e302f32332d3233203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:49:66:f8:73:b1:73:3b:28:7b:cd:1f:53:0c:f5:3c:cd:4c:
         e7:7f:89:c9:ae:d1:1f:0a:23:7a:c3:78:02:1a:05:8c:a1:4b:
         a2:20:05:fa:cf:f1:05:33:57:29:75:00:04:a1:ae:d1:9a:e8:
         b6:5a:46:a1:74:8c:82:aa:c7:da:99:ce:90:81:82:34:6e:05:
         ab:12:16:21:60:67:96:07:3e:24:f9:d8:4f:58:e0:22:32:6f:
         c2:68:9b:d6:ca:0e:6f:19:03:b0:86:ee:7e:6f:e6:49:1c:1a:
         61:20:64:35:bd:fe:72:c8:ed:ad:39:94:88:31:e6:4f:61:7a:
         b8:15:8b:08:c1:0c:fd:f3:3f:94:b0:94:9f:cc:12:08:a5:77:
         d9:6c:4d:40:23:dc:6a:ec:15:30:30:36:b7:9d:e7:53:ed:bd:
         2b:76:79:f7:61:91:9d:10:c5:07:61:88:3e:4b:6a:76:79:60:
         32:85:44:bd:a3:21:e4:1e:7d:18:5d:cf:fc:5c:60:69:76:50:
         ae:b3:a2:e8:c3:b9:84:04:56:9d:26:6b:6f:a0:04:63:d7:70:
         09:a1:97:60:65:43:ee:91:ab:c2:db:01:dd:2b:9d:8c:0c:64:
         a2:26:48:2b:0a:89:7e:12:f6:da:c7:dc:8a:f3:22:7c:ce:f1:
         87:0f:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org