Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa
File:                     3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa (raw, json)
Hash identifier:          CkNyQp44u8JAdHmebgzgkkFx18Q1WYVv4M9e8FJmEtI=
Subject key identifier:   67:1F:82:FC:0E:1A:C5:3D:E0:A1:39:F1:EC:DE:A6:66:44:A8:9A:EF
Certificate issuer:       /CN=F555F07ECB5BB29A57C2CD48AB80591E9CAFE297
Certificate serial:       043BBEC6964E6E5C38F5F01AAE63F876C9E9023B
Authority key identifier: F5:55:F0:7E:CB:5B:B2:9A:57:C2:CD:48:AB:80:59:1E:9C:AF:E2:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa
Signing time:             Thu 04 Apr 2024 17:40:02 +0000
ROA not before:           Thu 04 Apr 2024 17:35:02 +0000
ROA not after:            Thu 03 Apr 2025 17:40:02 +0000
asID:                     265239
IP address blocks:        167.250.252.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3b:be:c6:96:4e:6e:5c:38:f5:f0:1a:ae:63:f8:76:c9:e9:02:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F555F07ECB5BB29A57C2CD48AB80591E9CAFE297
        Validity
            Not Before: Apr  4 17:35:02 2024 GMT
            Not After : Apr  3 17:40:02 2025 GMT
        Subject: CN=671F82FC0E1AC53DE0A139F1ECDEA66644A89AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:b7:8a:e8:91:0d:94:9b:45:c6:02:a0:e5:
                    31:96:6c:79:34:22:20:b5:a8:6f:76:0d:e7:53:3c:
                    ff:8f:0e:1d:25:db:fb:90:6c:72:94:d7:78:11:d3:
                    0e:b9:52:44:ac:0a:0a:63:f5:73:9b:95:6a:e5:2c:
                    e5:aa:ff:3e:da:ed:c9:49:3c:43:96:ec:f2:1c:9b:
                    70:c0:ef:50:0e:93:ed:09:ce:58:57:25:db:fd:28:
                    06:88:d5:d1:b7:57:75:a7:fe:e2:78:5f:f9:cd:1a:
                    9a:70:b4:02:93:40:a9:6e:73:2d:56:25:0d:c6:39:
                    32:67:32:06:c1:74:ee:0f:c4:f2:ca:67:cd:27:26:
                    ff:71:56:de:2f:aa:a7:8f:c1:7d:4c:3c:26:44:a5:
                    cf:83:df:d8:36:4b:86:5e:93:72:6f:e4:25:70:ae:
                    bf:41:ec:13:18:c7:01:0c:be:49:bf:3b:40:5e:a9:
                    2d:23:4b:8e:13:c0:bc:53:4f:33:3f:f6:60:e5:70:
                    32:ea:e6:29:27:f8:42:c7:66:00:b1:a6:1d:9b:ae:
                    ad:74:df:72:61:fd:14:11:ad:2a:52:e3:3e:d5:18:
                    3e:08:7f:30:7f:72:63:bb:8c:f8:6c:c6:60:ce:9c:
                    96:26:73:7f:51:29:a6:69:7a:14:a6:6a:60:21:40:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1F:82:FC:0E:1A:C5:3D:E0:A1:39:F1:EC:DE:A6:66:44:A8:9A:EF
            X509v3 Authority Key Identifier:
                keyid:F5:55:F0:7E:CB:5B:B2:9A:57:C2:CD:48:AB:80:59:1E:9C:AF:E2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F555F07ECB5BB29A57C2CD48AB80591E9CAFE297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/1/3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:56:3e:79:9e:1d:1a:3c:d2:ab:62:e7:13:57:92:0f:57:45:
         34:64:b2:16:60:ba:76:de:28:e7:1a:e8:5d:b2:e5:15:75:88:
         3a:1e:21:b4:70:eb:6e:e5:36:31:16:04:d2:e9:10:98:f9:7f:
         e0:36:07:19:25:0b:a1:dd:9f:e8:82:2b:aa:6f:a8:4e:23:e4:
         06:bf:92:45:20:0d:ed:3c:fb:92:40:50:36:78:32:be:40:ec:
         81:4c:c2:da:df:cf:d9:70:c4:41:26:ae:75:0b:bd:02:84:99:
         44:93:e6:58:78:47:92:3c:d3:57:ea:cb:8f:e2:e3:05:26:44:
         c9:05:5e:08:d9:29:96:fa:c4:9f:79:97:02:6d:51:17:84:d9:
         80:b5:ea:f2:a9:08:85:e5:01:cc:69:31:2f:27:60:e3:40:18:
         20:88:59:5a:8f:10:65:4f:4b:ae:97:5d:14:5b:d3:37:19:46:
         1c:a8:2f:a9:a7:06:5f:7e:46:00:a5:e1:1b:04:34:0d:69:a4:
         c7:e6:34:9e:c8:de:4b:22:42:77:2e:3d:16:ad:ae:58:7a:d2:
         cf:33:cd:46:8d:71:72:20:d2:b7:8e:b8:74:53:4e:52:09:df:
         bd:26:0e:11:73:23:ad:2a:0e:00:20:49:8c:d2:40:8d:c3:83:
         3e:57:3b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org