Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0/3136372e3235302e36342e302f32332d3233203d3e20323635323034.roa
File:                     3136372e3235302e36342e302f32332d3233203d3e20323635323034.roa (raw, json)
Hash identifier:          72jftn05MCQcvo4G6EI/mE1Mx99oUhpApSAwrxUMngc=
Subject key identifier:   9B:96:EA:14:3D:6C:9D:74:9B:EE:84:F8:2B:30:5A:4B:16:DC:71:F8
Certificate issuer:       /CN=4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E
Certificate serial:       3EC578081D8860D02E43DA3783296F710518C2FE
Authority key identifier: 43:69:F8:DE:2C:F4:B9:C1:EB:D1:1A:D4:07:C9:DB:3E:FF:A9:2B:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0/3136372e3235302e36342e302f32332d3233203d3e20323635323034.roa
Signing time:             Mon 03 Apr 2023 17:50:31 +0000
ROA not before:           Mon 03 Apr 2023 17:45:31 +0000
ROA not after:            Mon 01 Apr 2024 17:50:31 +0000
asID:                     265204
IP address blocks:        167.250.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c5:78:08:1d:88:60:d0:2e:43:da:37:83:29:6f:71:05:18:c2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E
        Validity
            Not Before: Apr  3 17:45:31 2023 GMT
            Not After : Apr  1 17:50:31 2024 GMT
        Subject: CN=9B96EA143D6C9D749BEE84F82B305A4B16DC71F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:0e:c7:31:9d:29:49:16:f9:cc:3c:75:38:
                    f6:bd:d6:f4:dd:fa:33:f8:c7:56:51:2f:64:78:94:
                    c7:36:5e:6e:de:3c:8a:66:29:bc:2d:21:04:17:48:
                    cb:aa:d2:f2:af:22:e0:22:27:2b:d3:47:dd:89:93:
                    6d:7f:ef:47:19:f7:d3:e6:a1:1f:92:5f:52:02:e8:
                    df:36:7d:db:08:36:d7:4b:c3:81:12:3c:32:36:07:
                    58:26:cf:51:1c:00:10:51:cb:66:f9:11:0f:d1:cb:
                    75:d8:99:42:e9:6f:23:08:14:82:f6:1f:ac:e6:f2:
                    10:4b:ed:f5:20:d5:af:f9:d7:32:bb:07:31:d3:ae:
                    0b:86:be:e5:08:3b:f7:fd:82:00:c8:79:c2:80:11:
                    88:f3:e8:76:6f:cb:99:58:00:f5:c9:5e:df:f1:e6:
                    fe:b7:dd:05:a9:53:01:aa:e9:1d:b2:6f:49:5d:79:
                    1d:d9:62:d1:bb:49:6a:d8:e6:56:47:1d:ae:3f:ea:
                    3a:7e:d0:d5:ae:f5:48:b0:7f:04:a3:b4:56:91:d7:
                    73:b8:da:5f:d1:fb:8b:90:97:97:7b:c8:27:6b:e3:
                    1e:eb:52:cd:ce:e3:e9:c3:6e:37:3d:41:8f:af:b9:
                    ef:26:9d:a9:26:93:c6:6c:96:fa:66:a0:e4:4c:29:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:96:EA:14:3D:6C:9D:74:9B:EE:84:F8:2B:30:5A:4B:16:DC:71:F8
            X509v3 Authority Key Identifier:
                keyid:43:69:F8:DE:2C:F4:B9:C1:EB:D1:1A:D4:07:C9:DB:3E:FF:A9:2B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0/4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4369F8DE2CF4B9C1EBD11AD407C9DB3EFFA92B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ayZXdVNXikfjLELqpsASo997RyXoE4uaWiULnM74VMw/0/3136372e3235302e36342e302f32332d3233203d3e20323635323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:1e:8d:2f:3a:8e:14:46:f6:22:24:d8:70:dd:92:e9:c1:16:
         77:32:33:e7:cf:fd:99:84:a9:44:35:d5:d1:5f:8a:27:4d:84:
         a3:c4:8a:c8:7f:c5:8c:0e:8c:22:ed:1b:00:6c:85:65:5f:6d:
         ae:34:c4:38:fb:ca:f3:7e:7c:64:5f:49:88:09:1e:bd:d0:b2:
         49:36:b9:78:16:82:8e:d3:49:6a:26:50:33:33:80:cf:bf:d7:
         bc:51:12:e0:4c:43:09:81:06:e9:ab:d6:75:9a:47:7c:61:b6:
         b5:bb:3b:98:5e:70:94:eb:73:18:ff:4a:49:bb:aa:6b:6a:2e:
         e2:b5:ee:60:62:f9:e3:55:1f:9f:11:4a:6a:43:a8:19:ed:25:
         11:f3:7d:08:e9:c5:53:18:22:a1:d3:63:1c:b7:1e:43:af:38:
         51:b1:51:21:b7:d1:5e:e8:23:cf:d0:27:ea:05:9b:6b:9e:a9:
         2d:2a:4a:21:ec:43:f1:1a:bd:25:83:b9:d9:f3:45:eb:fa:b9:
         2f:28:3f:0c:1d:57:89:ef:67:b9:f3:a0:8c:84:1b:22:5d:96:
         d7:c9:67:b0:08:70:5d:82:77:d3:d3:c4:01:23:57:ea:47:fd:
         e2:0c:f9:50:5e:a4:63:8d:65:20:e1:64:a5:fe:ce:4c:5e:ba:
         2f:0e:46:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org