Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136322e302f32342d3234203d3e20323635313834.roa
File:                     3136372e3234392e3136322e302f32342d3234203d3e20323635313834.roa (raw, json)
Hash identifier:          /BFap+4JtdApNigWOIUDacPu9PRAdnHluMIPDoLfJi8=
Subject key identifier:   EE:69:5F:86:5D:1F:93:21:18:18:74:28:0E:F1:FC:16:75:13:0B:E7
Certificate issuer:       /CN=2B9940D968C1B623E26643DE1361C10DB3EB7A8A
Certificate serial:       78576AE3939488EA53BFC5357C81701A23DA55C4
Authority key identifier: 2B:99:40:D9:68:C1:B6:23:E2:66:43:DE:13:61:C1:0D:B3:EB:7A:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136322e302f32342d3234203d3e20323635313834.roa
Signing time:             Thu 15 Dec 2022 18:33:57 +0000
ROA not before:           Thu 15 Dec 2022 18:28:57 +0000
ROA not after:            Thu 14 Dec 2023 18:33:57 +0000
asID:                     265184
IP address blocks:        167.249.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:57:6a:e3:93:94:88:ea:53:bf:c5:35:7c:81:70:1a:23:da:55:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B9940D968C1B623E26643DE1361C10DB3EB7A8A
        Validity
            Not Before: Dec 15 18:28:57 2022 GMT
            Not After : Dec 14 18:33:57 2023 GMT
        Subject: CN=EE695F865D1F9321181874280EF1FC1675130BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:70:16:f3:ac:57:79:5e:90:ab:60:70:0b:
                    8e:1b:db:04:b5:35:b5:bc:fb:19:b7:7c:9c:a2:b0:
                    7c:33:0f:0e:ea:74:69:39:5c:59:2f:ac:2a:f5:f8:
                    25:a7:ec:e2:0d:64:8f:d7:3e:25:a5:f4:0c:50:be:
                    b1:29:d4:a3:b2:f2:7b:dd:b5:11:69:78:fe:a2:34:
                    5b:08:f9:ad:94:52:82:c6:89:15:da:63:76:a7:30:
                    bc:1f:86:51:6c:de:46:3c:4c:6b:7f:35:fe:88:2e:
                    5c:ec:f8:5d:75:6e:8e:2d:8c:fc:23:0a:e0:b3:f2:
                    7b:4e:68:f4:2e:ce:27:bc:43:55:a1:5f:b7:ea:ed:
                    61:bb:6e:76:cc:53:86:47:d3:f5:38:66:98:c7:e4:
                    2c:89:ee:bc:5c:d8:30:49:0e:a5:79:8e:74:72:f6:
                    89:ee:a9:f0:af:fe:71:f2:9f:e9:9a:4b:91:d0:bc:
                    6d:34:fa:ff:e4:ea:dc:8e:96:01:6b:da:8b:9f:6b:
                    97:29:5d:a3:1e:bc:91:92:1d:9e:ca:f3:bf:0c:7b:
                    60:2c:ec:2b:1c:04:87:4d:04:9f:b0:21:ff:e8:09:
                    63:15:19:21:87:52:d6:ec:d4:39:51:25:5e:3e:11:
                    79:c2:21:1b:69:3b:94:c3:1d:eb:5b:83:d7:e5:c4:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:69:5F:86:5D:1F:93:21:18:18:74:28:0E:F1:FC:16:75:13:0B:E7
            X509v3 Authority Key Identifier:
                keyid:2B:99:40:D9:68:C1:B6:23:E2:66:43:DE:13:61:C1:0D:B3:EB:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/3136372e3234392e3136322e302f32342d3234203d3e20323635313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:db:37:ef:a3:68:6c:fd:17:be:d9:de:74:ac:31:b8:dd:ed:
         c5:56:82:d1:b4:15:94:cf:d2:09:d3:47:db:a1:70:71:42:76:
         35:55:b0:00:1d:3f:63:45:96:4d:66:39:d9:4e:bd:dd:1f:0e:
         5f:41:51:12:76:83:f2:3d:d0:97:84:06:48:86:88:2c:3b:b0:
         67:52:77:8a:0c:21:aa:1a:dc:2c:73:62:25:48:82:77:83:63:
         2d:2c:06:7b:0f:5f:b9:e5:16:5a:41:1f:67:2c:94:22:8b:e2:
         75:54:3b:39:89:e4:05:ac:f5:25:1a:28:92:4d:0b:a8:ca:26:
         3c:e2:24:50:1b:f2:54:4c:8c:38:54:c4:04:37:10:db:11:3a:
         01:0d:3f:d6:71:54:84:ff:c6:4f:65:17:db:af:3e:82:23:f4:
         48:79:4f:38:56:95:fb:f1:22:9a:8b:f0:39:97:b9:8b:db:6d:
         77:88:52:1f:89:66:1b:37:5e:a6:8d:0f:b7:2c:39:44:47:63:
         e8:1a:71:80:bf:03:a7:f5:1d:4e:c1:da:a7:68:91:68:64:12:
         31:3c:9b:e5:dc:bd:f5:f7:1f:17:ad:4f:46:44:73:3b:88:6f:
         30:2b:3a:24:04:35:b0:74:79:f4:86:ac:91:cd:1c:9f:bc:f7:
         d6:3b:12:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org