Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133352e302f32342d3234203d3e20323635313831.roa
File:                     3136372e3234392e3133352e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier:          ziqp2bC8QmJbawz9LuVZ3Bsk3NWwtmXf6g0z7kqGnHA=
Subject key identifier:   FA:DB:4E:93:54:CA:2B:89:DB:36:4D:E6:C3:6F:37:F8:63:04:F1:3C
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       5DAA3A4C3372AA8A5C11319050195C437EBF1A41
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133352e302f32342d3234203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:16:23 +0000
ROA not before:           Fri 02 Feb 2024 00:11:23 +0000
ROA not after:            Fri 31 Jan 2025 00:16:23 +0000
asID:                     265181
IP address blocks:        167.249.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:aa:3a:4c:33:72:aa:8a:5c:11:31:90:50:19:5c:43:7e:bf:1a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:11:23 2024 GMT
            Not After : Jan 31 00:16:23 2025 GMT
        Subject: CN=FADB4E9354CA2B89DB364DE6C36F37F86304F13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:b4:0c:ec:4e:20:70:74:bc:4b:7b:03:1e:
                    d3:de:c6:de:9e:0d:2e:be:cd:95:15:5d:05:2b:f2:
                    92:40:6c:d3:31:58:10:f5:7b:61:3f:b8:9e:f1:75:
                    9e:79:fe:f5:d7:70:a1:fe:49:7b:dc:9f:f9:e2:9a:
                    83:62:69:0f:ef:61:32:9a:e7:9a:de:4d:25:4d:cc:
                    2d:d1:55:03:44:64:c9:75:d0:3d:af:9b:8f:6d:e3:
                    85:28:38:71:67:97:7c:17:9d:4d:cd:70:c6:d5:c7:
                    95:65:d2:66:e5:c7:22:e8:d3:49:4d:e6:f7:d8:7c:
                    bd:5d:49:15:86:82:a9:0f:bb:39:f1:f1:2f:8c:8b:
                    a4:3a:49:18:11:a8:99:fd:37:5a:85:f7:9b:25:1a:
                    78:d2:da:cb:e6:fc:0f:69:06:00:38:bc:00:60:48:
                    60:fa:69:e7:e9:a4:e8:8b:d3:32:30:0d:aa:12:93:
                    9d:2c:2c:96:2b:52:0b:ea:e6:c1:30:3c:71:40:8b:
                    d2:b7:f8:fc:fa:0e:52:d2:d2:b7:87:56:fb:98:07:
                    7b:93:54:6b:99:a9:9c:bd:1b:3b:a3:64:49:a8:a5:
                    59:cb:82:4c:31:37:7d:3a:09:97:74:35:0d:79:3b:
                    48:43:f1:23:6a:e7:ae:2a:e8:fa:8f:c5:64:c5:ea:
                    bf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DB:4E:93:54:CA:2B:89:DB:36:4D:E6:C3:6F:37:F8:63:04:F1:3C
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133352e302f32342d3234203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:00:f8:e9:c4:d8:f1:cf:20:40:55:8f:b6:29:12:39:61:b9:
         92:7b:de:eb:d1:62:9d:0e:13:2f:f5:33:61:03:b4:37:59:8d:
         78:05:7b:51:a9:ca:37:46:1b:ce:fa:0c:c3:09:23:70:a4:f6:
         e1:69:0a:4d:72:62:0a:8b:4f:a3:27:12:51:dd:a1:12:6d:f1:
         9e:40:a2:eb:92:e6:98:16:6e:e8:b3:9a:ce:f5:06:50:89:7f:
         f0:01:e7:39:fc:8b:1a:00:73:49:7a:bd:1f:af:69:42:0d:b2:
         d7:26:09:de:84:40:fa:e2:a2:88:83:92:2d:84:24:9e:56:28:
         e1:fb:88:b1:23:9c:0f:b7:3e:dc:f8:10:52:8c:d8:ff:2d:10:
         8b:db:11:5b:1f:dd:85:58:a7:a2:ff:08:1d:10:4e:4a:6f:6b:
         0b:f2:49:8c:9d:6d:be:b2:0d:5a:6a:54:40:6e:c6:34:e1:19:
         4c:47:59:5f:bc:dd:0f:a4:54:fa:68:eb:ec:2a:e6:1c:1d:c0:
         7b:d8:f7:6f:a6:e4:e7:e1:5c:35:b5:b8:16:fe:a2:40:5c:ab:
         e2:fb:6c:a2:64:b1:dd:67:31:e4:2d:67:22:bb:92:33:9d:4b:
         5a:8e:b9:4d:87:34:db:e9:32:dc:6b:c5:5e:48:21:99:a7:2f:
         02:96:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org