Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136302e302f32322d3232203d3e20323635313834.roa
File:                     3136372e3234392e3136302e302f32322d3232203d3e20323635313834.roa (raw, json)
Hash identifier:          rI6QSzRW18roHFP7lu732YKtcvSJJWeeHZDym7Ag3uQ=
Subject key identifier:   36:C6:66:21:9B:4D:BF:98:47:DB:EC:93:FC:F1:B6:C4:06:3D:D5:9A
Certificate issuer:       /CN=2B9940D968C1B623E26643DE1361C10DB3EB7A8A
Certificate serial:       2A844AC0B4FB9F4697AD250FA1F0B21C52D17DF0
Authority key identifier: 2B:99:40:D9:68:C1:B6:23:E2:66:43:DE:13:61:C1:0D:B3:EB:7A:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136302e302f32322d3232203d3e20323635313834.roa
Signing time:             Thu 15 Dec 2022 18:33:56 +0000
ROA not before:           Thu 15 Dec 2022 18:28:56 +0000
ROA not after:            Thu 14 Dec 2023 18:33:56 +0000
asID:                     265184
IP address blocks:        167.249.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:84:4a:c0:b4:fb:9f:46:97:ad:25:0f:a1:f0:b2:1c:52:d1:7d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B9940D968C1B623E26643DE1361C10DB3EB7A8A
        Validity
            Not Before: Dec 15 18:28:56 2022 GMT
            Not After : Dec 14 18:33:56 2023 GMT
        Subject: CN=36C666219B4DBF9847DBEC93FCF1B6C4063DD59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:3b:44:a0:b0:33:38:90:4b:f7:81:83:26:
                    37:2e:ab:52:5b:00:17:54:c8:d4:a2:ed:90:5a:a0:
                    a8:ee:18:ac:49:ea:86:79:aa:80:e0:14:74:1e:91:
                    55:a2:a7:c2:c3:67:39:a1:a8:f2:74:8b:d5:1c:5c:
                    6c:1a:db:07:ef:fb:a7:ea:3a:a7:d0:ee:b3:97:79:
                    65:ed:d3:4c:f2:9e:f8:e4:dd:42:53:1f:c2:d2:55:
                    a6:5e:3c:51:8c:22:8d:90:79:43:f8:ce:f8:31:07:
                    ad:24:05:b7:01:f5:60:a8:65:9c:5b:4b:77:38:06:
                    f7:8b:e6:1f:f1:3b:d0:31:1c:69:72:f6:5e:7c:a2:
                    60:dc:ef:58:a3:99:2f:d5:70:cf:e5:5c:28:de:a0:
                    4e:4d:d7:5b:1d:07:0e:52:53:f3:a2:ec:b9:09:e3:
                    c4:0c:ee:a7:2c:7a:43:11:1f:20:00:15:a9:19:a9:
                    2a:f5:38:3b:b3:a4:3f:47:8b:fd:fb:98:9d:bb:cc:
                    fb:58:e6:28:cd:de:f2:84:d7:fb:45:88:bf:b3:11:
                    1e:6b:81:bc:5b:c8:77:0b:b2:c2:d1:b2:b7:c3:ab:
                    26:31:f2:59:12:a1:c5:b6:17:f0:a1:f1:03:a3:e8:
                    0b:6d:79:27:0f:ed:26:7e:a8:d6:b6:c9:cb:02:12:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C6:66:21:9B:4D:BF:98:47:DB:EC:93:FC:F1:B6:C4:06:3D:D5:9A
            X509v3 Authority Key Identifier:
                keyid:2B:99:40:D9:68:C1:B6:23:E2:66:43:DE:13:61:C1:0D:B3:EB:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136302e302f32322d3232203d3e20323635313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:08:4e:0e:94:9b:2f:a4:25:f8:9a:d6:7f:82:80:2e:f5:28:
         81:10:4e:89:2d:1a:43:30:bf:b1:42:31:6a:19:4d:7b:ef:a0:
         87:c4:c1:56:2e:2b:34:db:cc:fd:57:00:4e:43:72:9a:78:4a:
         6b:cf:2e:af:5a:46:bf:fa:d2:00:e9:be:2e:d8:e5:5e:1c:11:
         9f:e3:47:40:f4:03:4e:3f:77:88:ed:d0:14:17:cd:ea:89:d6:
         91:a4:83:b0:f3:82:e0:39:cb:01:37:fe:a2:ad:c7:60:61:b5:
         86:bf:ee:ac:73:68:75:47:ca:b5:50:59:9f:39:5d:c9:7f:1b:
         2b:be:0c:2f:d7:85:68:ca:87:dc:5d:6b:51:d5:d4:9c:16:8a:
         e1:21:5a:13:15:bb:e4:b2:2b:31:21:65:80:60:5f:64:72:29:
         0c:10:54:13:9f:40:f1:51:6b:41:d2:46:68:5f:1d:91:20:c4:
         ed:23:01:bb:0e:d3:97:c3:25:c4:d4:a1:27:f9:66:b6:c6:53:
         3e:f6:24:ea:63:a0:0f:45:62:92:84:00:a7:aa:43:15:da:91:
         18:0a:52:ba:02:57:52:3c:90:07:aa:8b:a7:d0:f4:4c:9f:1f:
         28:21:11:d6:f2:1d:61:49:64:d3:a2:1f:8c:fc:35:dc:7d:12:
         6f:c5:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org