Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133342e302f32332d3233203d3e20323635313831.roa
File:                     3136372e3234392e3133342e302f32332d3233203d3e20323635313831.roa (raw, json)
Hash identifier:          wN2lIkV1O4mRORgYHMKDTOGfrqmOWtPqMyxd+YOUiqA=
Subject key identifier:   14:E9:46:4E:B8:96:DF:98:41:F7:90:5A:F5:1A:D1:7A:74:8B:85:32
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       487FA7F968C7619996AEF951A2A31788A60B697D
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133342e302f32332d3233203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:16:15 +0000
ROA not before:           Fri 02 Feb 2024 00:11:15 +0000
ROA not after:            Fri 31 Jan 2025 00:16:15 +0000
asID:                     265181
IP address blocks:        167.249.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7f:a7:f9:68:c7:61:99:96:ae:f9:51:a2:a3:17:88:a6:0b:69:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:11:15 2024 GMT
            Not After : Jan 31 00:16:15 2025 GMT
        Subject: CN=14E9464EB896DF9841F7905AF51AD17A748B8532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:2a:35:0a:5e:d2:9b:51:ad:08:1c:a8:24:
                    57:1e:83:7c:de:ad:ab:01:14:ec:71:39:3a:39:f7:
                    f3:a7:c1:6e:7b:18:5e:78:4e:a7:b7:c0:fc:cf:b9:
                    e2:41:3c:e6:90:b3:ce:db:2c:b4:39:ec:c5:5f:7b:
                    34:47:a2:ab:77:c1:d6:b8:d3:23:e6:4f:db:c0:93:
                    bb:ee:5a:11:8a:7e:26:4c:71:9f:d5:38:9e:b6:d3:
                    bf:fa:1c:ce:cf:65:a9:3c:16:82:2f:dd:f6:c7:5a:
                    af:e7:ad:26:e2:8e:be:93:44:e9:a5:cc:15:fd:75:
                    4d:4a:f9:13:26:a6:bb:07:7a:3c:d2:15:b9:c7:7c:
                    4a:65:13:7a:ce:59:6b:f4:49:53:55:43:6c:e3:b6:
                    83:40:ff:7a:1e:1a:11:9d:6b:79:37:cb:61:58:58:
                    c7:e0:e7:18:f1:29:5a:03:be:66:6d:94:e1:39:28:
                    ed:4c:5c:ac:96:1f:2a:7a:dc:65:ea:6a:ee:b8:d5:
                    aa:6f:38:c3:86:bb:6d:01:4a:c0:eb:b1:67:39:90:
                    8a:2e:ff:68:81:73:31:5e:a2:34:62:44:2d:d0:5a:
                    3b:3c:4d:b7:10:5d:f8:21:de:7e:e8:d8:8a:65:60:
                    e8:10:8d:c5:8c:d9:17:4d:01:60:ee:09:a9:16:be:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E9:46:4E:B8:96:DF:98:41:F7:90:5A:F5:1A:D1:7A:74:8B:85:32
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133342e302f32332d3233203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:c0:7c:c3:91:c9:46:19:7e:43:3c:53:00:42:11:f1:00:fb:
         66:5c:5b:9e:bc:e9:e1:95:a1:46:c1:c6:93:0b:af:5a:d1:08:
         e3:31:2d:37:70:05:43:a9:f8:28:60:21:fd:67:17:84:c9:48:
         f1:d4:97:90:96:c1:e5:36:a0:08:7a:b3:a9:1c:97:d0:85:78:
         3e:9f:da:41:52:ee:9f:15:f2:c5:e6:b4:ad:a7:71:31:2f:97:
         c1:3d:5f:72:8d:4b:7c:de:a9:f3:48:be:17:f3:69:62:a4:d5:
         98:01:a2:73:d4:ef:4a:f0:80:23:75:ef:58:bb:03:15:cc:9d:
         d8:c8:74:b9:a1:91:42:0f:ba:e1:3d:87:92:fc:bd:63:e0:52:
         ac:00:b0:5c:c9:32:93:51:e5:5d:fc:9f:90:1f:38:af:f7:72:
         26:22:89:5a:3c:3d:50:e3:4c:f0:eb:81:ea:87:0c:59:b1:6f:
         76:54:da:c6:f1:99:00:30:4b:62:bc:a8:06:d2:4b:a5:25:11:
         6f:b8:54:39:e9:31:dc:4c:a3:1f:20:fe:0b:f3:c6:98:3b:bb:
         94:a5:4c:27:fb:4f:ff:71:be:19:1a:6f:1b:99:40:37:5a:4e:
         c7:78:7b:2a:7b:6a:e2:5a:a7:18:d8:ef:77:85:b9:7b:26:9e:
         e3:dd:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org