Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3136372e3234392e342e302f32322d3234203d3e203532393133.roa
File:                     3136372e3234392e342e302f32322d3234203d3e203532393133.roa (raw, json)
Hash identifier:          Dc+heU+DuzhcVUvHqeOVEortTVwKALWKXI/zYc5gheE=
Subject key identifier:   63:B2:FA:04:5B:79:F6:BB:03:EB:54:AD:FB:BF:D6:37:36:25:06:41
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       4AA71F5BA377A23230FC8EA31FCA9D632A89CC5C
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3136372e3234392e342e302f32322d3234203d3e203532393133.roa
Signing time:             Fri 22 Mar 2024 18:25:08 +0000
ROA not before:           Fri 22 Mar 2024 18:20:08 +0000
ROA not after:            Fri 21 Mar 2025 18:25:08 +0000
asID:                     52913
IP address blocks:        167.249.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a7:1f:5b:a3:77:a2:32:30:fc:8e:a3:1f:ca:9d:63:2a:89:cc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar 22 18:20:08 2024 GMT
            Not After : Mar 21 18:25:08 2025 GMT
        Subject: CN=63B2FA045B79F6BB03EB54ADFBBFD63736250641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:70:07:06:b4:c2:f3:2c:2c:ff:ff:8a:60:
                    5c:99:20:5e:f5:da:ff:8b:30:58:c2:8a:38:11:f0:
                    6c:6d:cc:11:a6:f1:a7:a9:14:53:2d:0a:9a:56:f4:
                    4e:e0:f5:f4:be:4e:5c:0e:b3:1a:61:e7:45:38:65:
                    cc:36:a0:9b:51:f2:b7:18:6b:2a:c7:86:e8:8f:94:
                    13:26:ee:62:90:15:c3:02:40:db:46:76:71:fc:58:
                    76:7f:d1:af:8b:ec:23:bd:4f:0d:26:66:58:54:77:
                    eb:0c:a6:f5:79:9d:3e:10:ed:db:7a:d4:52:51:83:
                    b3:f1:f1:a4:83:ec:20:f9:2e:96:76:58:68:6d:b3:
                    c7:25:48:c9:87:34:f2:41:32:7c:72:08:ea:76:8c:
                    38:e5:ce:38:65:16:92:71:99:8b:aa:f6:65:a2:c1:
                    b2:7a:55:12:92:3f:f0:2f:ed:1b:39:69:60:98:17:
                    c1:9d:25:f1:d3:91:9a:80:17:69:8e:6f:c0:18:69:
                    42:b9:c8:88:d5:84:28:d9:7c:a3:40:54:27:b8:2e:
                    3d:7e:59:3e:12:c7:f9:8b:c0:87:6b:c7:fb:52:a8:
                    de:46:76:eb:c2:c2:2d:f4:ed:03:b7:79:d8:2f:51:
                    04:99:40:dc:20:dc:c8:03:41:23:94:d2:18:3c:54:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B2:FA:04:5B:79:F6:BB:03:EB:54:AD:FB:BF:D6:37:36:25:06:41
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3136372e3234392e342e302f32322d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:32:cd:b9:ac:0a:c3:e5:bf:43:ea:51:06:6c:54:93:04:77:
         22:0d:01:e4:3b:7c:d8:aa:86:7b:78:d1:d4:03:9d:fb:e4:61:
         4d:dd:43:91:11:8e:65:97:f5:26:bd:1c:7c:b4:25:27:49:05:
         5d:fe:ef:6c:39:0b:d7:a2:25:2c:46:47:80:e9:c0:65:c6:da:
         b0:e5:25:66:c9:bc:89:87:99:75:a0:6f:5e:0f:28:bf:8f:f2:
         a2:05:57:39:1e:02:36:1d:98:77:d1:93:af:53:31:03:d1:dc:
         86:b4:ef:06:7d:2b:72:e2:23:f7:3a:5c:a5:b6:01:39:49:f9:
         21:b4:9d:da:4b:05:fb:12:f1:a6:95:b8:5a:7b:95:6a:8d:87:
         8a:1a:4c:6b:67:68:63:85:50:2d:39:43:2b:d3:5d:b7:a8:e9:
         fb:99:4f:76:1c:70:e5:11:98:0b:5b:6b:f6:3a:8a:1a:86:e2:
         fc:dc:f4:6a:f0:d3:6f:8b:17:f6:d6:68:f6:fa:a1:ca:ab:43:
         89:25:a0:38:88:52:30:65:8d:04:1a:ac:96:cd:b9:b6:a2:6f:
         76:58:b5:47:f0:ec:65:89:9d:b1:54:1d:41:3f:e3:ca:af:16:
         28:79:22:50:16:61:8b:a2:cd:14:cb:7f:58:e4:56:54:ad:a0:
         c5:3c:8a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org