Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/3136372e3235302e3132342e302f32332d3234203d3e20323732373137.roa
File:                     3136372e3235302e3132342e302f32332d3234203d3e20323732373137.roa (raw, json)
Hash identifier:          wbQzs65/nAOupV92/dshH3NZXqFn4a2RRrR1DuKhktY=
Subject key identifier:   BD:8E:6D:AE:F5:70:88:3A:1A:48:1C:E8:34:BC:1E:56:D9:68:CA:56
Certificate issuer:       /CN=EC49574725049721FFA5AC0390E08D942C56EE07
Certificate serial:       3338A681A7BA02AC7D3FE9B6A870B9E80F2A0190
Authority key identifier: EC:49:57:47:25:04:97:21:FF:A5:AC:03:90:E0:8D:94:2C:56:EE:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC49574725049721FFA5AC0390E08D942C56EE07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/3136372e3235302e3132342e302f32332d3234203d3e20323732373137.roa
Signing time:             Fri 15 Sep 2023 15:39:51 +0000
ROA not before:           Fri 15 Sep 2023 15:34:51 +0000
ROA not after:            Fri 13 Sep 2024 15:39:51 +0000
asID:                     272717
IP address blocks:        167.250.124.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:38:a6:81:a7:ba:02:ac:7d:3f:e9:b6:a8:70:b9:e8:0f:2a:01:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC49574725049721FFA5AC0390E08D942C56EE07
        Validity
            Not Before: Sep 15 15:34:51 2023 GMT
            Not After : Sep 13 15:39:51 2024 GMT
        Subject: CN=BD8E6DAEF570883A1A481CE834BC1E56D968CA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:76:63:94:1e:95:07:2c:db:ba:b0:69:89:
                    52:40:54:ed:aa:f6:ae:13:79:5f:2c:6f:05:72:ef:
                    a6:b3:20:92:af:3c:23:56:ad:d6:5e:e1:90:a8:c7:
                    6e:75:e1:6d:5e:26:23:01:ad:46:f4:60:2d:bc:d9:
                    ae:bb:31:5d:6e:a1:38:fa:5d:31:b4:3c:72:27:96:
                    4c:57:16:b7:ac:0b:76:c3:70:dc:13:b8:08:8a:39:
                    af:54:c9:6b:5f:ad:92:27:6c:80:d6:ca:ad:20:d5:
                    eb:3a:a0:12:29:26:cb:3e:c6:3c:a7:55:63:dc:e5:
                    46:c1:72:31:3c:47:3b:18:af:1b:84:3d:c1:0c:1a:
                    0a:88:10:07:90:b3:fe:3b:32:c4:c2:42:8d:38:80:
                    cc:8b:b8:72:10:ca:71:64:28:61:13:4e:8a:38:26:
                    43:77:9b:6d:71:c9:1a:d6:ac:be:53:e4:4b:fd:f4:
                    c3:4d:a3:e5:95:8d:d2:d4:27:fc:22:ff:89:5d:f3:
                    b7:51:b1:8d:94:65:fa:2a:6c:c7:6b:11:4e:31:8c:
                    37:db:4e:38:c6:bd:78:be:06:9f:2a:97:4f:3b:23:
                    27:01:ea:22:28:15:19:38:79:82:65:1a:e1:3a:70:
                    0c:19:c0:d3:d4:65:8e:b3:5f:06:dc:aa:ee:d4:07:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8E:6D:AE:F5:70:88:3A:1A:48:1C:E8:34:BC:1E:56:D9:68:CA:56
            X509v3 Authority Key Identifier:
                keyid:EC:49:57:47:25:04:97:21:FF:A5:AC:03:90:E0:8D:94:2C:56:EE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/EC49574725049721FFA5AC0390E08D942C56EE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC49574725049721FFA5AC0390E08D942C56EE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/3136372e3235302e3132342e302f32332d3234203d3e20323732373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:17:4f:03:2a:f4:ae:d1:0a:d4:c4:db:96:7d:a4:34:be:
         0b:af:d7:e3:48:bd:87:3d:9f:8e:04:04:44:28:9f:a8:4f:c2:
         7a:f4:a3:4d:17:ef:28:bc:63:06:e9:39:b7:dd:65:e7:f5:a2:
         0b:3e:ba:25:6e:f2:0e:92:ad:fe:bc:3c:0d:2a:c8:72:57:4a:
         e6:9f:b4:a9:b6:c7:2f:60:e6:7c:97:71:f9:58:46:96:4d:e5:
         b9:be:3d:b5:ed:db:a9:31:3a:1b:3f:ce:58:78:86:5f:af:25:
         aa:d6:55:eb:5a:1c:52:8d:36:3e:92:0e:3e:08:7f:46:11:20:
         88:a8:28:5e:ff:2a:a3:48:74:bf:63:5c:aa:ce:05:4f:a8:19:
         11:16:3a:46:d1:cf:e1:ef:54:32:6e:39:a5:34:f9:d0:c5:61:
         a1:8c:c5:ca:70:58:5a:74:4b:d2:0f:71:64:42:26:04:95:29:
         f0:da:45:6f:f7:c4:21:03:33:60:e7:bb:98:36:82:16:f3:00:
         e1:7e:12:69:cf:15:b1:00:2d:e9:61:d2:c1:a6:3c:ee:be:81:
         a4:ee:dd:b2:48:29:34:38:c8:6c:45:b6:99:03:b5:5e:25:9d:
         08:aa:ea:0d:76:8e:68:a5:a0:97:5d:9f:94:61:1a:c5:f3:93:
         9b:b9:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org