Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134342e302f32342d3332203d3e20323635313932.roa
File:                     3136372e3234392e3134342e302f32342d3332203d3e20323635313932.roa (raw, json)
Hash identifier:          /qjfSr2eVcdV0vh6tlGLhoNJNuKbh605TMwWp9h6ZHs=
Subject key identifier:   44:C8:82:A1:74:DE:B4:05:CD:DC:69:C2:63:9C:92:86:3B:F2:5F:ED
Certificate issuer:       /CN=5300F5DDE4075958E44A38138BA9467A0B30154C
Certificate serial:       3F2AB61803456B3D269CD7AFFCF6573E84AAFB69
Authority key identifier: 53:00:F5:DD:E4:07:59:58:E4:4A:38:13:8B:A9:46:7A:0B:30:15:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5300F5DDE4075958E44A38138BA9467A0B30154C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134342e302f32342d3332203d3e20323635313932.roa
Signing time:             Thu 21 Mar 2024 19:06:11 +0000
ROA not before:           Thu 21 Mar 2024 19:01:11 +0000
ROA not after:            Thu 20 Mar 2025 19:06:11 +0000
asID:                     265192
IP address blocks:        167.249.144.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2a:b6:18:03:45:6b:3d:26:9c:d7:af:fc:f6:57:3e:84:aa:fb:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300F5DDE4075958E44A38138BA9467A0B30154C
        Validity
            Not Before: Mar 21 19:01:11 2024 GMT
            Not After : Mar 20 19:06:11 2025 GMT
        Subject: CN=44C882A174DEB405CDDC69C2639C92863BF25FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:13:8d:1c:af:47:20:d8:03:2a:98:ab:82:
                    49:2a:2d:cd:e5:70:02:2e:0b:ca:99:c7:b3:4d:17:
                    07:97:cc:db:56:96:e7:94:8f:fb:a9:24:f9:ac:9c:
                    b3:f9:bb:eb:d8:ef:46:16:13:e1:af:5f:44:6f:7a:
                    e2:a5:45:ec:8e:fb:9e:ab:eb:d6:f9:6d:c3:ac:db:
                    96:03:78:00:cb:c5:e6:5f:b1:a6:34:78:e6:20:1f:
                    f3:f7:b1:46:ce:ec:d4:ee:dc:e3:5e:64:a7:28:77:
                    77:80:3c:d5:99:6d:e3:4f:e1:eb:44:e2:d4:8a:49:
                    00:90:00:ef:42:c8:c1:d5:28:79:a0:6d:34:6e:8b:
                    cc:96:10:05:24:f3:1a:3a:c9:17:33:01:c7:8c:98:
                    63:87:87:b2:f0:e1:27:97:67:02:df:b0:d5:59:a6:
                    dd:61:3a:33:84:80:2a:fd:7e:01:d2:5d:ee:c6:9c:
                    3f:0c:6f:38:92:f2:b9:4d:9b:74:9f:77:bf:31:ea:
                    85:2a:cc:d0:a6:1d:7b:90:68:f7:57:29:d2:5a:a2:
                    2e:8a:5e:73:8b:37:b5:ff:b3:4e:69:af:ad:36:97:
                    4b:06:ca:d7:fb:a5:d3:d1:22:ad:27:52:8e:db:db:
                    25:c7:4f:f1:c0:40:62:f7:78:53:ca:4e:4f:ac:7f:
                    40:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C8:82:A1:74:DE:B4:05:CD:DC:69:C2:63:9C:92:86:3B:F2:5F:ED
            X509v3 Authority Key Identifier:
                keyid:53:00:F5:DD:E4:07:59:58:E4:4A:38:13:8B:A9:46:7A:0B:30:15:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/5300F5DDE4075958E44A38138BA9467A0B30154C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5300F5DDE4075958E44A38138BA9467A0B30154C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/0/3136372e3234392e3134342e302f32342d3332203d3e20323635313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:bf:31:c6:f5:ab:e1:8f:14:98:46:5e:b5:74:d8:64:1b:71:
         ae:0a:a8:9b:c9:05:c9:71:c2:7d:e2:5c:c1:db:c2:41:20:d7:
         41:55:98:7e:17:5e:b5:a2:51:1d:11:5b:ab:5b:54:e7:a3:21:
         6f:45:56:48:be:b6:88:d0:b3:2a:99:41:97:eb:26:a8:37:f6:
         1f:95:c1:26:7b:bc:e1:f7:0b:7f:5a:91:21:4f:6f:0c:79:09:
         93:06:66:6c:b0:4d:a9:57:3a:53:96:5a:d6:6e:1b:86:76:6a:
         61:62:71:87:f8:b8:54:75:5c:21:dc:27:56:50:ed:8f:3c:ea:
         96:c9:b7:26:11:63:18:de:f0:2a:cf:b8:5f:44:3f:78:d4:ab:
         64:bb:0d:5b:fd:1d:6a:18:ca:32:4b:a1:e9:04:42:f0:78:b1:
         af:19:a1:82:83:ba:d0:75:c2:15:3c:07:1b:f8:50:e7:a8:a6:
         e1:74:36:3b:cd:a7:f5:2d:d4:a0:1f:20:aa:ad:1b:ef:9c:9b:
         d8:4a:0a:ce:78:1c:0e:20:a7:12:fb:a5:2f:39:9d:4b:58:3a:
         db:4e:d3:1a:36:ff:58:fe:44:56:48:4a:a7:77:76:0f:12:73:
         73:f9:1f:91:c6:ea:20:87:eb:28:b0:d6:25:46:38:ac:f9:a9:
         d4:7c:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:26 2024 by rpki-client on console-ams.rpki-client.org