Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/3136372e3235302e3132342e302f32342d3234203d3e20323732373137.roa
File:                     3136372e3235302e3132342e302f32342d3234203d3e20323732373137.roa (raw, json)
Hash identifier:          CwwS+wuUocJUv/QYNAeSr632CJTFvFpazv/+9eOhiYs=
Subject key identifier:   98:50:66:D8:41:8B:3E:18:41:79:07:23:11:E0:0B:38:8D:05:26:58
Certificate issuer:       /CN=EC49574725049721FFA5AC0390E08D942C56EE07
Certificate serial:       2511317A89A6A51E52B021462C6149E9882C86B2
Authority key identifier: EC:49:57:47:25:04:97:21:FF:A5:AC:03:90:E0:8D:94:2C:56:EE:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC49574725049721FFA5AC0390E08D942C56EE07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/3136372e3235302e3132342e302f32342d3234203d3e20323732373137.roa
Signing time:             Tue 19 Sep 2023 11:38:49 +0000
ROA not before:           Tue 19 Sep 2023 11:33:49 +0000
ROA not after:            Tue 17 Sep 2024 11:38:49 +0000
asID:                     272717
IP address blocks:        167.250.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:11:31:7a:89:a6:a5:1e:52:b0:21:46:2c:61:49:e9:88:2c:86:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC49574725049721FFA5AC0390E08D942C56EE07
        Validity
            Not Before: Sep 19 11:33:49 2023 GMT
            Not After : Sep 17 11:38:49 2024 GMT
        Subject: CN=985066D8418B3E184179072311E00B388D052658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:5f:5f:4a:cc:2b:ff:1d:dd:d6:02:dd:c2:
                    50:9f:a9:2c:84:c4:ef:99:9e:e2:5d:78:c3:e6:29:
                    6d:cb:bc:24:ae:f0:40:e8:c7:dc:6d:7c:23:4e:95:
                    f4:57:66:8c:d1:e7:00:bb:e3:56:d8:cc:90:c4:72:
                    e0:d0:0f:e9:63:7a:7a:b7:d0:84:75:67:6f:b8:9c:
                    c5:cb:27:eb:67:d9:7f:f3:5e:43:0c:88:61:86:bd:
                    35:39:c0:e2:0f:8e:85:ca:a6:7c:25:2e:04:ba:2b:
                    99:24:4d:12:0a:e6:69:5d:2a:74:28:e9:bb:86:9e:
                    fb:00:ef:89:da:05:07:7d:4f:aa:4f:b5:f2:ed:bb:
                    a4:36:bf:7e:1c:ad:59:cd:22:77:60:84:a3:ec:db:
                    45:60:b6:12:f5:46:94:e2:6b:91:51:cd:e4:d9:da:
                    6f:72:76:21:17:21:bf:44:a3:e6:c1:13:cf:64:d1:
                    ee:d7:08:79:46:93:f5:73:1e:71:f7:b6:9f:b7:54:
                    a5:00:62:73:2e:af:f7:3d:6c:48:aa:e1:6a:97:b4:
                    8e:60:9b:21:a8:18:1e:9d:a0:4f:2c:bf:14:44:ad:
                    26:e2:30:4b:9d:89:c1:30:61:5a:e3:fa:04:6d:b9:
                    48:b4:6f:98:73:9d:63:42:e1:e9:d8:ef:d2:61:ac:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:50:66:D8:41:8B:3E:18:41:79:07:23:11:E0:0B:38:8D:05:26:58
            X509v3 Authority Key Identifier:
                keyid:EC:49:57:47:25:04:97:21:FF:A5:AC:03:90:E0:8D:94:2C:56:EE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/EC49574725049721FFA5AC0390E08D942C56EE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC49574725049721FFA5AC0390E08D942C56EE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/3136372e3235302e3132342e302f32342d3234203d3e20323732373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:45:d0:79:3c:a1:e9:3b:17:0f:ec:3a:bf:2b:24:a8:34:d9:
         5e:f0:50:15:79:8f:a2:d2:7b:80:ff:54:f8:3d:bf:fd:cb:a8:
         d5:95:41:0e:5e:bb:a5:3a:84:b2:ce:58:02:78:8d:97:f6:8b:
         01:20:d2:90:04:42:09:1e:98:80:bd:75:da:aa:c9:3c:63:77:
         66:91:9f:63:4b:6e:b9:8a:bd:4a:3f:e9:5c:00:14:65:97:8c:
         98:c5:42:55:0c:c0:2e:d9:73:76:e3:07:9e:05:5f:b4:4f:25:
         c1:92:3a:2c:3a:a1:c2:b7:45:47:09:27:9f:ff:23:23:39:89:
         81:61:2b:1e:f1:ec:34:30:64:21:68:b5:74:cf:2f:e1:53:9e:
         c4:14:10:08:6a:cf:60:fa:dc:09:63:a1:f9:78:90:83:82:d6:
         39:55:88:e6:d1:cd:26:13:f1:5f:06:41:53:df:e9:25:3b:88:
         02:72:f9:15:b1:55:74:76:ef:fd:3a:ae:a3:b4:3e:fe:4d:de:
         df:f6:93:4f:96:12:7d:7e:3b:f6:83:ab:21:e7:08:de:28:af:
         62:8f:e1:97:f9:46:a7:ad:60:a7:f3:76:2a:e1:54:1f:7b:da:
         82:4c:b5:ce:86:52:d7:36:45:0c:64:b4:50:eb:96:37:5d:9f:
         f3:b6:86:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org