Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/3136372e3235302e3132352e302f32342d3234203d3e20323732373137.roa
File:                     3136372e3235302e3132352e302f32342d3234203d3e20323732373137.roa (raw, json)
Hash identifier:          Hth4gHsu9yYtqCVz8KSUa5b1nT3dBmM6thwlFzgiopA=
Subject key identifier:   64:4F:83:B2:C6:89:33:C0:F7:65:A3:A3:BF:A1:29:B4:C2:83:65:A9
Certificate issuer:       /CN=EC49574725049721FFA5AC0390E08D942C56EE07
Certificate serial:       1E1E8C0E0AF4342E0E342C1FDEED51E2B4CD832E
Authority key identifier: EC:49:57:47:25:04:97:21:FF:A5:AC:03:90:E0:8D:94:2C:56:EE:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC49574725049721FFA5AC0390E08D942C56EE07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/3136372e3235302e3132352e302f32342d3234203d3e20323732373137.roa
Signing time:             Tue 19 Sep 2023 11:38:49 +0000
ROA not before:           Tue 19 Sep 2023 11:33:49 +0000
ROA not after:            Tue 17 Sep 2024 11:38:49 +0000
asID:                     272717
IP address blocks:        167.250.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1e:8c:0e:0a:f4:34:2e:0e:34:2c:1f:de:ed:51:e2:b4:cd:83:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC49574725049721FFA5AC0390E08D942C56EE07
        Validity
            Not Before: Sep 19 11:33:49 2023 GMT
            Not After : Sep 17 11:38:49 2024 GMT
        Subject: CN=644F83B2C68933C0F765A3A3BFA129B4C28365A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f6:94:12:bc:32:9f:3f:82:f4:a8:ad:82:d7:
                    79:12:dc:bd:72:75:36:d7:97:58:b8:be:fd:92:d4:
                    c1:8a:71:2d:9f:99:af:2a:c5:cc:2d:7a:0f:a5:c2:
                    b1:5a:b3:c4:09:2a:96:1e:8e:b0:9c:90:13:30:b9:
                    e5:92:21:01:cd:c7:1d:5d:96:81:b7:95:0f:13:e2:
                    10:7c:de:5b:4f:c8:87:10:01:d5:70:4d:b2:d3:eb:
                    cd:15:9d:0f:e8:fb:ef:fe:06:80:67:a1:e5:ad:cf:
                    b1:bc:9a:81:84:44:ef:8e:ca:bd:db:98:72:1e:71:
                    4f:ff:f9:a4:ed:40:7d:c9:42:d4:99:b3:c0:0e:8a:
                    47:dd:11:b1:6a:4d:6c:6d:b3:2f:be:73:d4:0e:63:
                    b9:d9:e1:fd:14:e7:f0:d9:8d:45:aa:67:5c:4f:a6:
                    22:e2:fb:70:65:fd:2b:24:2a:8e:7c:b4:ee:98:0a:
                    49:86:57:e8:3c:b7:59:e5:ff:b8:79:5d:5f:64:74:
                    38:7d:7c:d8:e9:fc:94:0b:63:28:13:73:cf:79:82:
                    74:1b:a0:22:96:2f:32:0c:7f:62:b3:a6:d3:0d:49:
                    83:65:14:da:06:4c:84:6c:0d:b7:7b:1c:33:99:48:
                    42:6f:c1:e4:fb:2d:ea:4c:7e:06:5a:79:ac:a5:d0:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4F:83:B2:C6:89:33:C0:F7:65:A3:A3:BF:A1:29:B4:C2:83:65:A9
            X509v3 Authority Key Identifier:
                keyid:EC:49:57:47:25:04:97:21:FF:A5:AC:03:90:E0:8D:94:2C:56:EE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/EC49574725049721FFA5AC0390E08D942C56EE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC49574725049721FFA5AC0390E08D942C56EE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/3136372e3235302e3132352e302f32342d3234203d3e20323732373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2c:92:1f:7f:8a:0d:2d:e4:20:31:49:b4:08:71:a9:07:d5:
         95:39:c3:f9:08:97:2c:36:cd:a4:66:89:bd:51:8e:fa:84:79:
         f7:5c:7f:3a:48:3e:c1:fe:13:91:cf:d0:0e:d6:eb:aa:60:bb:
         30:5c:59:1a:66:85:eb:21:7c:52:f8:92:6f:2f:14:68:0f:97:
         33:7b:35:c6:e3:9e:8f:d1:37:a8:96:b7:f0:41:05:91:b9:58:
         6a:1b:f0:3d:2a:c1:da:95:8c:6b:61:36:40:cf:0e:f3:56:b7:
         8b:25:f1:f4:e0:02:db:a5:5a:99:d7:aa:cc:c8:1a:29:24:04:
         e7:57:44:6d:69:40:9d:6c:0f:f4:b1:eb:59:71:09:51:0c:db:
         ad:e1:59:92:2f:cd:e8:f9:1f:88:2d:0f:47:3a:45:e1:6e:ce:
         c1:ea:ff:06:6f:e6:54:31:c9:9e:24:80:37:23:fc:34:3c:2c:
         da:bd:b9:f7:c7:72:e7:11:aa:15:76:ce:b2:83:1f:2d:48:04:
         00:9d:86:10:35:07:17:04:06:34:2f:ee:ec:92:1f:fb:19:f3:
         ca:e7:65:ad:7c:21:6f:a3:cc:58:be:bc:f6:f1:e9:cb:2e:12:
         12:f5:b1:0a:8a:4b:c6:ef:23:69:6c:3e:25:f1:f2:76:c4:6b:
         bd:7a:ea:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org