Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa
File:                     3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier:          yrIsWSEbyybX4K90dcqWJiAVu+ZsuTvXwB9zpD8EkfI=
Subject key identifier:   BB:56:B3:AF:D9:4C:18:B1:BE:F7:4A:D7:36:93:74:31:C1:07:32:1D
Certificate issuer:       /CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Certificate serial:       477549115A5599697086B2F941077391DD63C939
Authority key identifier: 71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa
Signing time:             Mon 16 Oct 2023 20:45:22 +0000
ROA not before:           Mon 16 Oct 2023 20:40:22 +0000
ROA not after:            Mon 14 Oct 2024 20:45:22 +0000
asID:                     28131
IP address blocks:        167.249.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:75:49:11:5a:55:99:69:70:86:b2:f9:41:07:73:91:dd:63:c9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
        Validity
            Not Before: Oct 16 20:40:22 2023 GMT
            Not After : Oct 14 20:45:22 2024 GMT
        Subject: CN=BB56B3AFD94C18B1BEF74AD736937431C107321D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:9f:c0:81:ac:c5:ba:3f:86:6e:29:7e:64:
                    03:f6:cc:53:50:70:2b:ae:3d:5b:5a:77:6a:04:6b:
                    09:f2:0a:db:c7:05:1d:e3:dd:22:86:82:08:ac:94:
                    f2:61:b8:fd:9c:5e:8c:28:a8:8e:93:49:bb:a4:5b:
                    75:b5:34:35:92:2e:02:fa:6a:c8:c5:78:58:f1:3b:
                    dd:21:eb:24:bc:9a:24:c6:ff:a5:98:20:9b:bd:6f:
                    1c:9f:27:99:fc:80:73:7e:83:ad:ab:4a:5d:38:d7:
                    4f:c2:9e:e5:b7:fa:a9:ed:8b:6c:3b:1c:7e:55:89:
                    b6:69:19:7d:13:15:a4:bc:6b:c4:cc:aa:29:28:6d:
                    3a:91:24:7f:9d:d5:69:f8:7e:f9:4f:d1:8a:11:93:
                    d6:9b:c9:45:a6:85:bd:ac:1f:3c:a5:3c:27:b5:57:
                    11:cb:5b:a9:d3:ce:73:52:6f:ad:36:15:2f:7f:77:
                    36:38:38:c4:23:af:aa:f7:1a:0d:df:07:d4:26:05:
                    b9:4e:bf:64:97:12:9f:ac:83:8d:d1:c2:90:2e:53:
                    f9:75:f0:f6:a9:1a:de:6f:74:ec:75:da:ea:7c:24:
                    ba:9f:61:d4:81:69:7f:5e:d5:69:7c:8a:3c:f2:c0:
                    de:83:f3:9c:ac:76:23:12:79:78:b4:cf:58:9c:a7:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:56:B3:AF:D9:4C:18:B1:BE:F7:4A:D7:36:93:74:31:C1:07:32:1D
            X509v3 Authority Key Identifier:
                keyid:71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3136372e3234392e3131322e302f32322d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:c7:6c:c5:12:e3:93:9b:9f:a6:97:99:71:73:0d:9e:90:fe:
         9d:ac:1d:fd:52:79:e3:09:91:10:c9:df:39:da:82:fa:e5:aa:
         b1:27:35:c8:1d:23:9c:24:77:a7:b8:90:33:45:2c:13:f5:eb:
         c6:d9:24:f1:55:ff:e4:4c:8e:57:23:6c:14:a3:1a:f6:4d:be:
         eb:f4:86:41:10:ca:af:2e:d3:80:75:0d:26:06:6c:9b:27:84:
         4a:84:10:e4:1b:0d:ef:d1:30:27:7e:e6:57:24:a8:b8:d8:89:
         34:18:29:a5:68:34:6c:36:39:8a:e6:81:f4:49:ae:b1:aa:3d:
         74:d9:31:19:af:6c:b9:76:11:cb:6b:bb:98:2d:04:61:5f:df:
         71:3f:5a:7c:66:6b:74:93:85:89:51:78:8b:8e:0a:f9:8c:e0:
         f9:94:d5:8a:4f:c7:9f:bc:b0:b8:4b:88:a6:b4:ae:b9:ab:36:
         f5:92:7f:d8:34:45:b6:e3:ef:71:b6:05:5c:cb:2e:7e:1b:c0:
         80:94:48:55:ad:33:fd:7a:bc:df:52:f4:bb:c4:fa:ad:74:6d:
         9b:47:f7:95:25:d6:0a:55:fd:71:76:de:ab:76:70:28:60:51:
         14:94:12:39:85:d5:b5:7e:00:51:8e:6f:44:83:03:3a:5e:0b:
         25:ed:76:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org