Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136312e302f32342d3234203d3e20323635313834.roa
File:                     3136372e3234392e3136312e302f32342d3234203d3e20323635313834.roa (raw, json)
Hash identifier:          uLEftxdFMX2q1zXvT+3Eue5JU1OSQcnn7yb57Rszv9w=
Subject key identifier:   2B:49:93:1D:CD:B3:56:B8:CF:02:12:60:4F:20:52:1D:A2:19:1E:5C
Certificate issuer:       /CN=2B9940D968C1B623E26643DE1361C10DB3EB7A8A
Certificate serial:       1C868D1000D7197F5676D2B7091162A040E6D2D6
Authority key identifier: 2B:99:40:D9:68:C1:B6:23:E2:66:43:DE:13:61:C1:0D:B3:EB:7A:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136312e302f32342d3234203d3e20323635313834.roa
Signing time:             Thu 15 Dec 2022 18:33:56 +0000
ROA not before:           Thu 15 Dec 2022 18:28:56 +0000
ROA not after:            Thu 14 Dec 2023 18:33:56 +0000
asID:                     265184
IP address blocks:        167.249.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:86:8d:10:00:d7:19:7f:56:76:d2:b7:09:11:62:a0:40:e6:d2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B9940D968C1B623E26643DE1361C10DB3EB7A8A
        Validity
            Not Before: Dec 15 18:28:56 2022 GMT
            Not After : Dec 14 18:33:56 2023 GMT
        Subject: CN=2B49931DCDB356B8CF0212604F20521DA2191E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:f4:8c:25:e4:8b:02:9e:54:ec:6a:5b:87:
                    c3:a6:af:95:a2:b5:df:94:c2:02:af:a8:da:5a:9c:
                    68:49:ba:fc:c8:43:a3:a0:3d:b7:34:5a:ed:02:99:
                    87:ef:ee:34:04:55:77:c3:b5:e4:dc:84:ff:5b:41:
                    3e:e8:77:0d:4a:f5:9a:87:94:d3:fb:9e:03:7f:d4:
                    73:61:8c:b4:dc:6c:2f:0a:85:90:5c:ad:f6:ec:ba:
                    4d:a6:ba:2e:cd:68:c5:a7:a6:8d:57:f0:71:50:96:
                    db:a9:5d:b9:38:ee:1a:31:17:8a:e3:40:34:ce:76:
                    44:20:f6:f3:9f:7a:be:83:de:2b:76:42:3a:63:dc:
                    2e:a3:aa:26:72:b4:79:dd:b0:41:8f:dc:de:6f:6c:
                    28:73:ff:4f:34:d6:03:3d:8b:78:67:9a:a8:fd:b3:
                    e9:cb:da:1c:1f:b2:7f:ad:16:8d:dc:78:09:bf:12:
                    f3:b3:36:b4:50:5b:26:17:d9:82:32:76:bc:df:2f:
                    98:eb:d2:36:da:2f:1a:fd:cc:f3:8a:08:67:d0:48:
                    9d:ab:a5:d7:9d:32:f5:3a:19:3d:4f:b7:98:b7:20:
                    d0:fd:3c:bc:65:33:c9:45:ed:47:e7:2e:51:be:0f:
                    46:82:0e:3a:ed:60:4f:e0:35:f9:95:ee:2a:47:87:
                    76:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:49:93:1D:CD:B3:56:B8:CF:02:12:60:4F:20:52:1D:A2:19:1E:5C
            X509v3 Authority Key Identifier:
                keyid:2B:99:40:D9:68:C1:B6:23:E2:66:43:DE:13:61:C1:0D:B3:EB:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136312e302f32342d3234203d3e20323635313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:ca:28:f2:a2:29:9c:d9:b0:dc:1f:d8:25:ac:41:4f:c5:
         0a:a8:d9:83:4f:0e:87:13:36:09:61:c6:07:df:dc:4b:20:7c:
         b5:f5:a0:c7:7f:f7:4a:3f:8d:7d:9b:ba:59:f9:60:14:09:e8:
         d6:9c:45:fc:e3:ce:6e:e8:c1:de:34:0b:a6:23:d4:58:9f:96:
         ea:15:c5:8c:13:84:83:07:e8:7b:27:2e:bf:dc:36:2b:52:60:
         e6:bc:66:ab:26:80:0b:fd:21:05:1a:d6:3c:33:36:5c:70:91:
         73:8b:ff:08:cb:fe:cd:51:9b:72:3e:ac:8a:4d:87:77:1f:eb:
         b7:fa:59:7d:88:75:bb:a9:30:73:29:12:14:c9:1f:58:fd:27:
         dc:65:f9:65:de:09:74:56:44:9c:3f:62:32:93:bf:ab:74:18:
         98:5f:33:ca:f3:b6:73:d4:95:a7:ce:82:5c:9f:4e:35:4e:f7:
         0f:14:62:89:52:b4:f2:fc:8b:5a:b5:72:26:ad:54:c7:7d:2f:
         59:a3:cb:4f:e5:1b:14:3b:cc:4e:3d:6e:d8:80:1f:d7:6a:31:
         38:1b:6c:99:4b:17:12:19:6d:b3:bc:6b:f8:ba:f0:22:2d:e8:
         5a:e2:71:1c:0c:58:79:ac:84:9c:67:2c:7a:f8:33:f2:44:b0:
         7f:af:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org