Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3232203d3e20323635323234.roa
File:                     3136372e3235302e3231362e302f32322d3232203d3e20323635323234.roa (raw, json)
Hash identifier:          57W1v6PEBfY3CJ77eECkQClIvQDbsBzntdG1WoYJmXw=
Subject key identifier:   31:C4:96:8E:5E:92:9B:8D:5A:D3:3C:FA:CE:EE:8B:71:00:49:95:93
Certificate issuer:       /CN=25FDEA4FC76B6ED9A0E2C7040120618B55F5410A
Certificate serial:       2D21D2110FF065E220679A6AB499C566A9FEE8E2
Authority key identifier: 25:FD:EA:4F:C7:6B:6E:D9:A0:E2:C7:04:01:20:61:8B:55:F5:41:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25FDEA4FC76B6ED9A0E2C7040120618B55F5410A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3232203d3e20323635323234.roa
Signing time:             Fri 28 Oct 2022 12:19:43 +0000
ROA not before:           Fri 28 Oct 2022 12:14:43 +0000
ROA not after:            Fri 27 Oct 2023 12:19:43 +0000
asID:                     265224
IP address blocks:        167.250.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:21:d2:11:0f:f0:65:e2:20:67:9a:6a:b4:99:c5:66:a9:fe:e8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25FDEA4FC76B6ED9A0E2C7040120618B55F5410A
        Validity
            Not Before: Oct 28 12:14:43 2022 GMT
            Not After : Oct 27 12:19:43 2023 GMT
        Subject: CN=31C4968E5E929B8D5AD33CFACEEE8B7100499593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:0c:9c:75:b0:27:80:45:ba:c4:e9:15:27:
                    26:01:99:90:7a:6b:51:d5:b7:8d:9d:74:a3:be:3c:
                    fc:f6:4c:13:5e:fd:cd:d7:a7:95:5f:9d:22:03:ef:
                    5b:29:d1:fb:f7:6a:2d:55:85:ec:a2:ee:ae:2e:ca:
                    c3:e4:0b:4b:bc:2c:66:3d:8c:3d:fb:d6:9c:04:da:
                    8b:a7:11:20:70:b0:f8:bc:d4:9d:12:57:ee:8a:03:
                    f0:ed:8d:c4:dc:4f:4a:e6:5c:71:38:84:b2:7c:a5:
                    7c:e4:49:0b:0a:6a:3d:88:93:25:8e:92:cb:01:01:
                    25:94:cb:ab:5e:c2:7a:57:60:db:18:40:d3:d8:19:
                    84:40:41:c5:29:ee:15:ae:33:44:27:e4:fe:42:75:
                    da:14:1a:b7:89:91:fe:8c:b0:8d:72:3f:dc:95:ec:
                    2f:57:be:b6:6b:c4:51:44:c5:2a:05:eb:57:5a:30:
                    e3:27:f2:cd:f5:d1:1a:b3:e2:86:73:92:d6:0e:d1:
                    ab:d0:29:b0:24:be:57:30:95:54:51:39:76:0f:f0:
                    0c:60:2b:9f:cc:78:03:8f:39:58:c4:9e:6f:1f:e8:
                    72:a9:c2:ea:b9:34:af:b3:54:af:45:c4:41:f1:85:
                    cb:1e:28:6c:ae:dd:1a:75:10:83:99:76:1a:ae:bd:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C4:96:8E:5E:92:9B:8D:5A:D3:3C:FA:CE:EE:8B:71:00:49:95:93
            X509v3 Authority Key Identifier:
                keyid:25:FD:EA:4F:C7:6B:6E:D9:A0:E2:C7:04:01:20:61:8B:55:F5:41:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/25FDEA4FC76B6ED9A0E2C7040120618B55F5410A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25FDEA4FC76B6ED9A0E2C7040120618B55F5410A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3232203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:70:06:68:6c:89:8a:13:e0:1e:bd:1e:9d:09:af:e0:fd:00:
         8a:77:ea:48:aa:26:c1:08:c2:e4:8b:70:7c:5b:0f:e4:7f:4c:
         44:0b:de:68:e0:c7:c3:1c:aa:52:bb:57:2e:59:8c:f6:f0:29:
         db:ed:c0:b6:41:28:af:69:6c:d1:80:e9:fe:45:7a:0b:ef:ab:
         3e:2e:41:6f:0a:e5:2c:c4:e5:eb:91:57:25:19:a3:a9:84:c6:
         7d:d4:3f:b5:37:37:c7:93:86:1e:4f:62:95:f5:41:ce:38:4d:
         79:b0:a6:96:66:5d:98:d5:ac:27:d0:e7:aa:a5:81:ec:c4:e1:
         11:74:22:99:c4:c1:1b:e4:da:30:03:94:30:d2:2e:d8:4d:72:
         97:48:a7:f7:4d:3a:1e:35:fe:6d:d5:0b:9c:3d:e0:ce:4c:c3:
         ef:fb:54:8a:0b:13:78:3b:00:cc:71:8d:fc:0e:e6:0a:8d:63:
         1c:ab:74:6c:60:0c:c1:f6:d4:db:90:63:72:d3:95:87:5d:4c:
         65:1c:d3:d7:bf:6d:65:90:7b:19:30:af:81:18:99:2e:b2:83:
         26:5c:88:95:30:9d:c9:7d:14:47:68:97:b1:2d:3b:05:ac:2b:
         6a:2c:bd:19:0b:78:12:c7:6a:89:6f:9b:fd:98:5f:be:2a:2d:
         7b:a9:ce:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org