Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3136372e3234392e342e302f32332d3233203d3e203532393133.roa
File:                     3136372e3234392e342e302f32332d3233203d3e203532393133.roa (raw, json)
Hash identifier:          uG5MqBgkpuzWqqJNfYfz5VpBSRDNUG0z2f2Iro97lUM=
Subject key identifier:   74:4C:1B:B0:B7:BB:D4:49:E1:D8:2A:04:6F:87:AF:50:58:82:A5:24
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       4DF3E457BDFE04CAFCB915CBE273388886B07612
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3136372e3234392e342e302f32332d3233203d3e203532393133.roa
Signing time:             Thu 07 Mar 2024 21:20:36 +0000
ROA not before:           Thu 07 Mar 2024 21:15:36 +0000
ROA not after:            Thu 06 Mar 2025 21:20:36 +0000
asID:                     52913
IP address blocks:        167.249.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f3:e4:57:bd:fe:04:ca:fc:b9:15:cb:e2:73:38:88:86:b0:76:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar  7 21:15:36 2024 GMT
            Not After : Mar  6 21:20:36 2025 GMT
        Subject: CN=744C1BB0B7BBD449E1D82A046F87AF505882A524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b0:0a:7b:12:62:eb:aa:80:01:a3:35:f3:0b:
                    50:72:07:98:6f:90:6c:09:8c:72:cb:02:b1:0c:ac:
                    2b:d9:82:9b:d7:6f:2a:c6:ee:f7:c8:d2:c3:99:4c:
                    ca:c8:ab:81:58:12:bd:db:ec:c0:42:74:6b:9c:01:
                    f7:83:ba:8f:5a:9b:6c:a1:9e:40:7a:be:18:1b:d9:
                    72:4c:6e:73:dd:dc:c7:99:cc:80:ea:a9:ba:f1:c2:
                    07:e3:41:b2:3f:3e:68:86:5a:a7:3e:0a:48:5f:71:
                    98:45:5e:e3:a0:d8:ad:b9:58:24:ca:2a:90:f4:17:
                    87:f6:f9:06:c1:24:6a:0e:f6:6b:ca:96:94:35:62:
                    cc:b8:af:f8:fd:55:46:4f:7a:db:4d:bc:5f:e7:71:
                    8e:ca:4b:52:4a:07:0f:97:0a:99:0b:6e:71:32:79:
                    e6:2a:62:66:3f:67:d0:9b:63:29:44:d8:51:6d:60:
                    b1:37:bd:e7:cb:f9:e9:be:19:4d:72:87:60:5e:48:
                    f9:69:04:68:e0:05:b7:77:40:27:fb:64:8c:96:d7:
                    34:a2:3f:9f:2a:f0:42:5c:a3:6d:9f:44:8b:dc:9e:
                    73:00:78:28:1b:9c:d6:15:b4:d0:80:06:b2:3d:7b:
                    4f:93:77:f8:01:ae:a0:ef:96:bb:fe:17:a6:98:ed:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4C:1B:B0:B7:BB:D4:49:E1:D8:2A:04:6F:87:AF:50:58:82:A5:24
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3136372e3234392e342e302f32332d3233203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:5c:a2:ee:ad:6a:dd:26:e8:ad:39:71:ed:71:54:e7:24:87:
         77:81:65:0c:4a:60:aa:9b:5b:af:0a:d7:66:32:83:2e:10:a5:
         00:6f:ce:b3:75:47:23:ad:f0:06:91:df:75:29:1f:37:8f:fe:
         9b:ab:ac:0e:a5:39:2a:83:d5:b2:32:f0:14:1d:c2:68:96:cb:
         fb:cb:d6:20:17:23:1f:1c:1e:f9:80:88:ff:db:9f:6b:05:03:
         22:a4:e6:bd:7e:e4:d3:b8:ef:92:ec:a6:0f:7a:e9:00:2b:54:
         44:87:99:be:4f:9d:2a:e5:75:45:fa:aa:31:46:50:e1:23:ce:
         1a:13:7f:1b:2a:4f:80:6d:90:0b:76:fc:2b:eb:8c:05:4b:58:
         02:9c:78:19:1c:00:ad:3f:ce:0f:26:7f:26:32:3b:b2:93:fa:
         55:26:63:ec:6e:23:3c:e6:92:d4:f8:e8:fa:32:3b:c1:d3:04:
         24:d0:e6:2c:3f:58:d7:db:28:a0:ff:38:e8:22:07:57:83:de:
         fa:bf:a0:3f:d2:ea:4c:f5:7a:e0:26:9c:ee:f3:bf:9d:5d:9c:
         e7:54:66:3d:9b:96:70:c5:41:61:10:6e:7a:2e:e0:ec:41:f7:
         cd:fe:be:b4:f1:d8:f8:30:c5:55:72:12:8e:6a:42:2e:ac:a0:
         62:19:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org