Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3234203d3e20323635323234.roa
File:                     3136372e3235302e3231362e302f32322d3234203d3e20323635323234.roa (raw, json)
Hash identifier:          AzN7T35BeirJallQfE4cpPCQMykn3Y4HgYCuqDsRN84=
Subject key identifier:   39:6A:23:98:FE:7A:EC:D2:55:09:9F:E6:0F:C5:58:96:EF:5F:B8:BB
Certificate issuer:       /CN=3D7DD86D98E5F298BC5AC280B49AB4B00A000666
Certificate serial:       6A0A1F101E32E7145407F93DCB319291C49A4FFB
Authority key identifier: 3D:7D:D8:6D:98:E5:F2:98:BC:5A:C2:80:B4:9A:B4:B0:0A:00:06:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D7DD86D98E5F298BC5AC280B49AB4B00A000666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3234203d3e20323635323234.roa
Signing time:             Wed 03 Apr 2024 13:02:09 +0000
ROA not before:           Wed 03 Apr 2024 12:57:09 +0000
ROA not after:            Wed 02 Apr 2025 13:02:09 +0000
asID:                     265224
IP address blocks:        167.250.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0a:1f:10:1e:32:e7:14:54:07:f9:3d:cb:31:92:91:c4:9a:4f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D7DD86D98E5F298BC5AC280B49AB4B00A000666
        Validity
            Not Before: Apr  3 12:57:09 2024 GMT
            Not After : Apr  2 13:02:09 2025 GMT
        Subject: CN=396A2398FE7AECD255099FE60FC55896EF5FB8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:35:bf:d2:31:b0:d8:e8:e9:bf:16:48:0d:
                    e2:97:cb:80:b4:13:98:88:4a:b6:db:16:90:9a:77:
                    f9:27:02:4f:a5:d3:af:16:6f:e5:b0:f1:9d:05:84:
                    35:a5:25:3e:e5:ba:2b:64:5e:82:c1:84:fd:be:19:
                    fc:97:82:a0:cf:c5:af:42:0c:c2:f3:34:b0:a9:c2:
                    e0:bb:44:23:53:3a:75:db:26:f9:91:69:a6:a6:29:
                    55:0a:b8:46:9a:4b:b7:5d:71:fb:85:7e:67:62:b6:
                    37:a5:b8:8b:41:a2:0a:5d:56:f4:f6:a9:c3:7d:bc:
                    c5:1a:4c:f7:4a:79:ff:44:fa:cd:41:6d:14:18:4b:
                    85:00:dc:2e:53:14:27:e0:41:b9:e8:ca:06:16:44:
                    c5:4c:77:43:90:b6:67:b9:13:8a:2f:5c:7c:cb:d7:
                    f8:68:b8:6b:d7:13:ee:92:c5:73:a6:e0:14:bd:d4:
                    a5:93:de:27:01:88:fe:1e:78:6f:78:4c:84:ed:a7:
                    41:45:c7:e5:d8:5c:b7:3f:c9:3c:d3:39:0f:76:37:
                    7c:e6:b6:9a:52:2e:7b:1a:81:25:0c:d3:ae:35:8d:
                    24:3d:cb:33:fb:82:7f:8a:eb:eb:82:bb:31:06:03:
                    0d:ae:1b:77:3f:29:c3:a5:0d:13:f3:e7:aa:29:9c:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6A:23:98:FE:7A:EC:D2:55:09:9F:E6:0F:C5:58:96:EF:5F:B8:BB
            X509v3 Authority Key Identifier:
                keyid:3D:7D:D8:6D:98:E5:F2:98:BC:5A:C2:80:B4:9A:B4:B0:0A:00:06:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3D7DD86D98E5F298BC5AC280B49AB4B00A000666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D7DD86D98E5F298BC5AC280B49AB4B00A000666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32322d3234203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:c1:6d:8d:b8:42:9d:02:85:3e:f7:e0:6a:eb:10:fd:a3:
         51:71:37:d8:70:e6:6a:95:ff:15:31:fb:ed:c4:e1:8a:6c:98:
         3b:ac:86:3c:bb:28:b3:45:9b:93:7c:93:57:0d:2e:09:e3:94:
         fc:b3:d0:6f:d0:55:50:de:c2:70:60:34:86:65:04:b5:94:97:
         95:45:61:66:b3:df:4c:99:78:5a:31:65:be:9c:ff:14:3a:db:
         21:60:ea:85:93:87:02:c0:c8:38:9b:44:9d:3b:35:c7:ce:de:
         42:9e:0a:36:0b:6a:8d:08:ab:b6:6f:e3:ce:2d:ea:11:dc:4d:
         06:44:0a:19:73:22:4b:1c:35:3d:3f:fc:4b:a9:66:50:14:c2:
         15:08:76:42:c9:14:a6:54:ea:ff:07:e4:73:a0:bb:55:48:70:
         de:1d:36:3c:7f:a7:cf:03:19:0a:3d:a2:4c:17:f1:4e:db:05:
         ff:39:24:8d:0d:8c:f2:1b:37:25:7f:22:54:e2:3b:86:25:84:
         ab:be:5b:0c:b9:87:b4:12:e0:55:55:d6:37:ea:72:47:6d:24:
         3d:92:d0:bb:31:16:9c:41:fe:f5:df:c7:c7:bd:b4:22:d9:66:
         3b:49:63:e7:b1:3f:87:d0:08:be:52:a3:ad:a4:01:71:89:e8:
         3b:02:c8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org