Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32322d3234203d3e20323635313738.roa
File:                     3136372e3234392e3132382e302f32322d3234203d3e20323635313738.roa (raw, json)
Hash identifier:          Mjk6lRhfPnSLpur7TTNT6VoNhFiaGFhbLzNj1q5QOm4=
Subject key identifier:   DF:81:D0:35:1B:E1:AC:5F:F7:E8:C2:37:EA:7E:17:0F:00:C6:B2:F1
Certificate issuer:       /CN=A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B
Certificate serial:       3B9C88090A73B02B29E7AB87281F4722954DEDEF
Authority key identifier: A8:A6:F2:C8:FD:F8:3A:7F:F1:14:57:18:55:ED:2A:22:13:A5:A9:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32322d3234203d3e20323635313738.roa
Signing time:             Mon 26 Feb 2024 01:35:53 +0000
ROA not before:           Mon 26 Feb 2024 01:30:53 +0000
ROA not after:            Mon 24 Feb 2025 01:35:53 +0000
asID:                     265178
IP address blocks:        167.249.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9c:88:09:0a:73:b0:2b:29:e7:ab:87:28:1f:47:22:95:4d:ed:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B
        Validity
            Not Before: Feb 26 01:30:53 2024 GMT
            Not After : Feb 24 01:35:53 2025 GMT
        Subject: CN=DF81D0351BE1AC5FF7E8C237EA7E170F00C6B2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:dc:6c:66:80:3d:ad:ea:e2:20:27:fd:d2:
                    5a:1f:56:f2:43:e9:9f:20:ea:17:bf:a4:d9:94:eb:
                    ed:bf:fe:17:a4:c8:b3:6f:a5:38:36:27:fd:01:e1:
                    f9:05:9b:66:19:91:c1:f9:3c:73:6e:59:f6:7e:09:
                    59:0a:81:03:4a:a5:1b:7f:72:c5:82:52:1a:19:50:
                    4e:f9:e8:e5:2f:67:cf:51:9f:5e:a2:6b:e4:aa:da:
                    ff:13:15:ad:c9:78:70:dc:97:85:14:aa:f2:23:90:
                    a6:87:9a:1a:34:05:25:48:78:c0:1b:8b:37:f6:3d:
                    f3:21:34:87:e0:ac:e0:de:00:70:6e:c5:85:98:e5:
                    3d:46:19:62:20:bc:9a:b4:67:13:25:fc:b5:ad:a1:
                    73:bd:69:7a:00:f1:e7:f7:7a:cb:e4:e5:a9:ca:9e:
                    3f:68:ff:79:9b:9d:08:07:9e:b2:ea:d9:02:0c:2e:
                    0f:28:46:39:77:18:c5:cb:66:62:9c:d8:d0:66:75:
                    41:f8:cf:f7:69:5b:f1:14:9e:4a:30:e5:18:60:cd:
                    b6:c9:25:df:f2:7b:89:93:a8:5d:72:90:62:0b:c7:
                    79:50:bb:ed:bd:14:85:86:82:d9:c0:57:26:03:5d:
                    6d:73:13:af:07:55:34:ea:6f:8b:82:0e:99:12:ad:
                    7b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:81:D0:35:1B:E1:AC:5F:F7:E8:C2:37:EA:7E:17:0F:00:C6:B2:F1
            X509v3 Authority Key Identifier:
                keyid:A8:A6:F2:C8:FD:F8:3A:7F:F1:14:57:18:55:ED:2A:22:13:A5:A9:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/3136372e3234392e3132382e302f32322d3234203d3e20323635313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:38:d5:0d:02:77:24:3a:48:4d:44:b0:3d:41:4d:03:f5:88:
         0f:f5:21:ee:22:45:d6:7a:e6:d5:6c:3d:28:fe:08:9c:3b:76:
         8c:e5:ee:b2:10:4a:10:7d:91:54:5e:3b:c3:50:bd:c1:44:62:
         59:0d:7a:89:2b:65:97:76:0c:99:f6:11:cf:05:a7:04:2f:d6:
         5e:f6:22:5d:a3:36:74:d7:2b:1d:56:4f:fc:fd:5b:74:55:b5:
         41:75:07:a3:17:88:1b:47:3b:d2:90:e9:c0:73:81:6d:bd:51:
         fa:b0:21:09:b2:15:2e:63:fc:0b:ad:b5:52:c4:5b:fb:8f:ec:
         3f:66:47:3a:32:2c:20:4f:b2:73:0c:c6:38:4d:88:4f:2a:e0:
         e3:04:2b:0e:c0:95:ef:df:ad:6d:9a:e4:e3:43:1a:88:70:99:
         1a:e7:a8:c5:0f:f0:83:e4:9d:a8:4a:f5:4f:97:ff:9e:dd:14:
         85:9e:b7:98:25:fc:07:3d:3f:6e:12:c1:30:be:8e:42:eb:39:
         e9:e5:0a:0d:37:61:21:f4:69:03:ae:dc:49:c5:fa:4a:87:2d:
         a2:40:0d:8d:0c:15:b4:bf:d0:e8:b3:27:5e:a8:42:4e:31:80:
         52:32:65:fb:57:7e:f5:90:fe:d0:17:e6:6e:65:b2:88:14:0a:
         51:42:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org