Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e392e302f32342d3234203d3e203238333630.roa
File:                     3133382e39342e392e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          Ta8C1Adgauvhp+OcLPEFLnnzxut6H3SlCcztPSQ2okc=
Subject key identifier:   8B:95:9A:89:A2:49:A3:AC:04:13:7C:88:4B:A5:FC:A0:FC:F8:91:68
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       56944670EF40804677AF9D039F4B015A915A7ABE
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e392e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:37 +0000
ROA not before:           Thu 17 Nov 2022 17:58:37 +0000
ROA not after:            Thu 16 Nov 2023 18:03:37 +0000
asID:                     28360
IP address blocks:        138.94.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:94:46:70:ef:40:80:46:77:af:9d:03:9f:4b:01:5a:91:5a:7a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:37 2022 GMT
            Not After : Nov 16 18:03:37 2023 GMT
        Subject: CN=8B959A89A249A3AC04137C884BA5FCA0FCF89168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:c6:9c:1e:72:54:5f:5e:fe:2a:09:f9:57:
                    1e:a2:cf:32:bf:04:cc:09:18:fb:61:2d:63:38:28:
                    da:f6:70:39:06:2b:60:78:af:78:e8:b2:20:fc:19:
                    06:44:c6:05:83:34:34:15:56:32:8f:34:52:3f:3a:
                    c4:97:f9:8b:56:81:e6:39:ba:14:e2:de:86:54:7a:
                    ef:98:7d:f2:d1:bf:5d:34:c8:99:03:4a:06:b2:3e:
                    7f:15:90:22:50:5f:7c:00:fc:94:97:79:10:dd:18:
                    ca:ec:cc:9d:26:f9:11:a1:d7:80:18:15:f3:cc:50:
                    78:73:42:79:8f:e2:0f:7d:eb:24:b8:ab:82:42:ad:
                    f6:72:38:c6:60:8b:ff:33:58:7a:ac:21:be:6f:af:
                    97:16:88:ad:b4:98:fc:f7:21:b2:5a:19:12:40:ec:
                    ae:47:6a:d9:b7:78:f0:45:91:9d:f2:13:6b:ab:c6:
                    8d:a5:14:01:c1:e4:f5:e0:91:99:aa:94:50:98:23:
                    20:42:08:8a:da:97:ed:ae:c4:16:b1:f4:7b:44:e9:
                    99:e8:54:32:55:32:76:af:b8:cf:ea:6a:40:39:f2:
                    cd:68:b8:3f:75:96:67:f4:1b:f9:bd:03:85:db:41:
                    72:cb:1d:1c:a1:26:a2:46:06:95:cb:30:d6:94:ba:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:95:9A:89:A2:49:A3:AC:04:13:7C:88:4B:A5:FC:A0:FC:F8:91:68
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e392e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:80:33:7b:bb:e9:ec:a5:17:9d:8a:c9:37:0e:9c:5b:29:
         b2:32:48:a0:14:6f:f4:60:c6:25:ee:f1:5d:3e:9c:e7:41:bf:
         fd:40:e1:10:fb:c1:04:36:04:96:09:7b:b2:7c:17:81:65:2d:
         77:5d:eb:3f:ae:d8:25:23:24:b4:90:2c:75:82:3b:53:97:16:
         9b:50:57:08:f5:ea:97:9e:c0:0c:81:21:d5:76:db:e8:4f:fe:
         51:41:a1:98:80:92:d0:b7:51:f5:18:41:ff:09:f9:3d:8e:48:
         4a:27:99:45:50:16:6d:cb:a9:ef:fd:16:dc:57:08:56:01:ca:
         31:ff:d6:57:98:7a:3a:ef:b0:25:a7:cc:25:8f:5c:ce:b9:fb:
         f3:0b:24:fe:4e:b9:21:4f:05:2e:93:17:04:96:a1:ca:9f:ed:
         90:01:71:72:4b:44:66:45:6c:9d:2c:76:b7:17:b3:ec:73:37:
         d1:45:28:f0:e8:07:69:17:cc:f0:96:18:e9:aa:59:9f:ac:3e:
         45:af:d5:db:ca:8f:9f:6f:e9:6c:52:e5:24:e2:4a:f3:c2:7b:
         6f:e7:31:2f:fb:90:8d:f1:8c:5d:ee:43:e7:51:5d:73:88:4b:
         45:e3:1b:62:f7:8a:86:2d:19:93:47:ae:29:66:29:55:0a:f9:
         d0:44:84:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org