Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134342e302f32342d3234203d3e20323635313932.roa
File:                     3136372e3234392e3134342e302f32342d3234203d3e20323635313932.roa (raw, json)
Hash identifier:          hfBK8CD/67/vzeMFdDjm3jobqFYv3SdY0krvi29SDdo=
Subject key identifier:   7B:4A:3A:1D:FD:AF:6E:C4:69:3C:E6:61:11:C7:3C:0D:EB:78:FF:15
Certificate issuer:       /CN=5300F5DDE4075958E44A38138BA9467A0B30154C
Certificate serial:       1AF24399F6EFF208C9C73987B9E617CC8F5971C2
Authority key identifier: 53:00:F5:DD:E4:07:59:58:E4:4A:38:13:8B:A9:46:7A:0B:30:15:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5300F5DDE4075958E44A38138BA9467A0B30154C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134342e302f32342d3234203d3e20323635313932.roa
Signing time:             Sat 23 Mar 2024 13:57:34 +0000
ROA not before:           Sat 23 Mar 2024 13:52:34 +0000
ROA not after:            Sat 22 Mar 2025 13:57:34 +0000
asID:                     265192
IP address blocks:        167.249.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f2:43:99:f6:ef:f2:08:c9:c7:39:87:b9:e6:17:cc:8f:59:71:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300F5DDE4075958E44A38138BA9467A0B30154C
        Validity
            Not Before: Mar 23 13:52:34 2024 GMT
            Not After : Mar 22 13:57:34 2025 GMT
        Subject: CN=7B4A3A1DFDAF6EC4693CE66111C73C0DEB78FF15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0a:10:c4:4c:14:f5:d0:1d:f3:c4:f1:a9:ee:
                    01:71:87:7d:73:be:01:fc:29:bb:17:8c:87:81:68:
                    5c:fd:c3:2a:f0:fc:ce:d6:9d:98:2b:33:7e:93:c9:
                    e3:1f:32:ff:eb:48:00:cc:a5:07:68:97:ee:45:26:
                    53:db:40:4e:7f:92:91:9a:15:12:31:eb:b6:18:c9:
                    a9:55:e7:7a:1a:14:67:cb:fb:50:4e:4e:f8:b2:a7:
                    4e:49:1d:a4:a4:83:5a:71:e6:df:70:be:b7:db:0a:
                    a0:3a:bd:05:a1:fa:46:92:89:36:4e:96:45:83:98:
                    ab:f9:d3:73:45:53:28:58:4f:d6:7d:03:83:70:53:
                    e5:ae:d1:18:bf:d3:4c:4f:fd:fe:b1:37:f0:54:ae:
                    dc:02:d7:f8:d2:88:89:ff:2f:6d:da:0b:57:25:84:
                    cd:22:68:f9:62:43:03:5c:a7:9e:21:57:a6:da:05:
                    15:a8:d8:bf:73:56:07:f9:13:e7:b3:59:8e:13:a0:
                    e9:cd:fa:d6:c6:5d:4b:17:cf:a4:bd:65:96:a6:25:
                    c8:a8:25:1b:03:b4:8e:50:da:f5:78:29:43:10:bc:
                    15:92:da:60:af:10:91:61:82:67:9f:52:2f:d5:76:
                    db:34:40:a9:7e:38:3e:10:84:14:17:12:15:ab:66:
                    21:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4A:3A:1D:FD:AF:6E:C4:69:3C:E6:61:11:C7:3C:0D:EB:78:FF:15
            X509v3 Authority Key Identifier:
                keyid:53:00:F5:DD:E4:07:59:58:E4:4A:38:13:8B:A9:46:7A:0B:30:15:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/5300F5DDE4075958E44A38138BA9467A0B30154C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5300F5DDE4075958E44A38138BA9467A0B30154C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134342e302f32342d3234203d3e20323635313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:1f:ab:32:18:f1:19:b3:88:30:be:14:92:91:70:fc:b3:7a:
         78:1d:1b:03:e5:e7:81:f6:8f:5f:37:96:84:46:13:3f:58:14:
         17:b9:43:fc:cf:51:2b:8a:a6:84:c5:a5:68:98:e4:7b:e5:28:
         ad:0b:c8:a8:66:47:1d:df:5d:b1:82:6f:e2:ba:9d:a6:c3:e2:
         bf:77:18:62:29:fe:39:f6:b2:09:12:6c:01:3a:19:1c:ac:3a:
         c2:d9:d7:2f:1d:07:78:06:8f:de:ad:e5:83:95:03:c1:2e:26:
         b1:27:8d:30:23:15:37:3c:d4:66:c5:fd:6c:fe:03:af:94:7c:
         37:7e:79:85:70:07:7e:a0:89:1c:0f:c7:83:09:24:14:69:4c:
         df:98:ed:76:99:a4:90:0b:0a:8f:d1:6c:47:27:3b:8f:6c:a1:
         9d:46:41:b2:07:d6:33:e1:94:db:78:a0:e3:56:74:e7:58:11:
         05:ee:4d:a7:cc:60:50:65:bd:25:a2:df:68:b1:a4:aa:59:ab:
         1c:66:cc:a4:e0:11:5c:9e:27:f8:7d:84:23:4d:45:04:69:31:
         a0:cf:e9:a1:5e:37:47:66:65:d3:56:6d:43:b2:eb:a5:cc:1a:
         c1:46:8c:7e:d4:27:a2:1b:85:ba:0f:f6:d5:58:cb:55:f8:91:
         b8:aa:f4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org