Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3136372e3235302e31322e302f32322d3232203d3e203532383037.roa
File:                     3136372e3235302e31322e302f32322d3232203d3e203532383037.roa (raw, json)
Hash identifier:          gxUi+GI3ypZKIy+kKxPWDpKm3S1bMHNK327LETRl8Ig=
Subject key identifier:   F6:67:41:4E:92:81:04:B3:83:10:6B:83:FF:82:CB:26:17:94:BF:1A
Certificate issuer:       /CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
Certificate serial:       6E62036263262B952A8A6480C9B045792F27B96A
Authority key identifier: AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3136372e3235302e31322e302f32322d3232203d3e203532383037.roa
Signing time:             Thu 15 Feb 2024 13:43:47 +0000
ROA not before:           Thu 15 Feb 2024 13:38:47 +0000
ROA not after:            Thu 13 Feb 2025 13:43:47 +0000
asID:                     52807
IP address blocks:        167.250.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:62:03:62:63:26:2b:95:2a:8a:64:80:c9:b0:45:79:2f:27:b9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
        Validity
            Not Before: Feb 15 13:38:47 2024 GMT
            Not After : Feb 13 13:43:47 2025 GMT
        Subject: CN=F667414E928104B383106B83FF82CB261794BF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:ef:af:61:7b:7c:17:76:a8:db:88:78:7f:
                    f5:12:1e:a1:f9:a4:d6:64:e9:7e:36:61:69:27:99:
                    8d:51:ff:fa:22:cd:16:cb:bc:cf:72:c9:63:be:1c:
                    1b:5b:44:6b:6c:5f:0f:f1:7f:33:74:2f:fd:d1:03:
                    f5:7e:28:9d:eb:6b:c1:4c:cd:40:f7:e2:7e:8d:26:
                    94:64:85:79:1b:f8:3e:60:86:41:d9:16:47:c5:61:
                    0a:28:9d:aa:38:7d:80:9a:0e:9d:d1:9a:e0:84:02:
                    35:c3:8d:3e:6f:9f:00:4f:ca:eb:47:89:d0:ab:79:
                    6d:90:c1:3b:7f:82:a6:fa:2c:25:f7:df:c1:6f:ae:
                    2b:84:5a:a0:ba:74:d1:90:4b:eb:f9:c1:6b:6c:8a:
                    8e:b1:29:82:17:8b:55:5e:8b:1f:28:f6:69:26:e4:
                    2c:ca:ba:b5:ec:af:1b:d4:f0:fd:07:78:27:00:dd:
                    f2:79:53:6e:86:f0:ee:2f:b2:f0:fc:44:ad:f2:f9:
                    9b:72:e6:cc:81:43:6b:84:67:26:45:ac:8a:d0:ea:
                    42:aa:fe:c6:b1:2c:2f:c3:6e:84:92:b4:4f:36:91:
                    27:5f:49:a4:7d:c2:3f:c1:6d:ff:37:d0:5d:3b:4d:
                    41:f5:d0:b1:c7:4e:c8:9e:82:d1:00:ec:b1:c4:60:
                    6e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:67:41:4E:92:81:04:B3:83:10:6B:83:FF:82:CB:26:17:94:BF:1A
            X509v3 Authority Key Identifier:
                keyid:AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/3136372e3235302e31322e302f32322d3232203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:ab:d1:9b:37:c4:6a:37:6f:29:4e:bc:fc:41:99:c6:b9:10:
         ee:b7:6e:36:74:79:96:ae:d5:ab:1a:11:d4:6d:85:87:e5:a6:
         38:e2:de:77:4b:84:1e:27:fd:68:eb:65:9d:d3:25:d4:61:b8:
         cc:a9:26:5d:7d:08:5c:db:5f:b1:ad:7d:ca:c9:3d:9e:be:b3:
         e4:a4:ea:6f:87:de:22:fa:fd:a3:7c:73:98:e3:8a:9a:51:b1:
         31:97:92:e6:e6:a1:35:eb:7c:ef:d6:3b:79:a7:1d:8b:af:f9:
         e2:e3:a0:f0:bb:d6:68:9f:4f:69:7c:c3:0a:c5:c8:a7:62:a4:
         fb:ff:ae:b6:9a:7e:5b:f6:2c:db:b5:67:ef:c6:f3:17:21:ca:
         9a:66:6d:5f:0c:26:f6:db:87:e3:1b:4c:42:4e:e6:9e:e6:64:
         bd:6a:b6:37:f9:9f:fd:f4:de:e4:9b:16:c0:db:01:0f:80:c1:
         08:7f:95:66:77:bb:e7:3f:2a:4b:d9:19:b2:27:18:75:d8:dd:
         ee:d3:1d:6d:b1:01:ac:7c:e1:2a:f0:39:03:d1:16:43:ca:69:
         71:1d:8f:ad:2a:86:74:f9:58:e3:6b:bc:b0:b8:b0:fd:0d:db:
         1f:2d:ef:36:93:95:c9:98:35:9f:17:06:10:68:d3:81:be:1a:
         d6:c1:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org