Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/3136372e3234392e3134342e302f32322d3232203d3e20323635313932.roa
File:                     3136372e3234392e3134342e302f32322d3232203d3e20323635313932.roa (raw, json)
Hash identifier:          DqWq6xPvaLdmc5Dl70LyCNfZR+3fAWDR73TjPD4qiZs=
Subject key identifier:   AE:7E:FF:04:AA:B8:8C:C8:2C:98:21:76:17:7E:13:66:39:F4:68:9F
Certificate issuer:       /CN=9CDEE6CF6519966891D6D812879D24B89912ACB2
Certificate serial:       7233E621B0F1B71C0F0FA78E46BC06C05D405054
Authority key identifier: 9C:DE:E6:CF:65:19:96:68:91:D6:D8:12:87:9D:24:B8:99:12:AC:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/3136372e3234392e3134342e302f32322d3232203d3e20323635313932.roa
Signing time:             Thu 04 Apr 2024 20:58:56 +0000
ROA not before:           Thu 04 Apr 2024 20:53:56 +0000
ROA not after:            Thu 03 Apr 2025 20:58:56 +0000
asID:                     265192
IP address blocks:        167.249.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:33:e6:21:b0:f1:b7:1c:0f:0f:a7:8e:46:bc:06:c0:5d:40:50:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDEE6CF6519966891D6D812879D24B89912ACB2
        Validity
            Not Before: Apr  4 20:53:56 2024 GMT
            Not After : Apr  3 20:58:56 2025 GMT
        Subject: CN=AE7EFF04AAB88CC82C982176177E136639F4689F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:6a:25:ae:8d:24:00:aa:c6:2b:5c:e4:3d:
                    da:85:6f:14:6f:41:48:be:71:85:76:f0:04:85:8b:
                    de:0f:f6:40:95:7c:88:37:e2:a8:a6:78:b1:25:4e:
                    4b:96:e2:b5:1b:bb:5e:29:ae:eb:08:37:0a:f6:02:
                    76:47:2d:42:62:2b:92:ca:df:28:02:cd:10:1a:b4:
                    24:b9:12:52:3b:aa:39:b8:d4:92:1d:3f:05:d5:06:
                    13:78:09:3a:de:d8:b8:bd:d6:9d:0d:c3:d1:b4:0a:
                    b0:bb:52:88:67:93:68:4b:d6:f2:d3:58:bb:b8:b2:
                    44:d6:3d:12:3d:23:f5:71:8c:97:61:6f:4b:e5:9a:
                    c9:0e:f9:05:17:9a:77:71:e1:09:5c:81:5e:21:ed:
                    a8:91:67:fd:e4:1c:d0:54:0e:32:3b:17:45:0f:32:
                    17:70:a2:29:2a:8d:0d:59:1a:2c:ed:02:70:27:5c:
                    28:4b:5a:ba:c3:94:09:bf:5e:15:b6:c1:a3:ca:6e:
                    d1:8a:27:6d:9e:74:53:d2:e8:3b:44:04:bf:9f:c5:
                    db:51:e3:c2:8c:04:3f:03:ce:9c:d8:ef:b0:bf:54:
                    33:2a:a6:fd:b3:ab:9b:71:7a:7b:b3:67:3d:7c:25:
                    12:64:d2:22:61:e8:6e:a6:2c:b8:94:18:9b:3f:f2:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7E:FF:04:AA:B8:8C:C8:2C:98:21:76:17:7E:13:66:39:F4:68:9F
            X509v3 Authority Key Identifier:
                keyid:9C:DE:E6:CF:65:19:96:68:91:D6:D8:12:87:9D:24:B8:99:12:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/3136372e3234392e3134342e302f32322d3232203d3e20323635313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:85:7c:a5:52:41:36:b4:a1:05:e1:4a:aa:1a:94:02:45:7d:
         9a:8b:4c:6f:78:27:8d:df:26:10:77:9a:79:c1:e4:bf:7a:fa:
         0e:aa:0a:17:63:70:44:50:59:65:68:8d:52:0b:51:6c:1f:90:
         fa:0f:46:32:24:74:c1:2a:10:42:81:36:dc:5f:98:d2:79:38:
         04:98:a9:51:40:c9:ae:02:e3:93:f6:36:2d:6d:1f:ae:e8:c8:
         d8:83:98:c0:d0:b0:b8:ea:29:3d:93:10:4f:5b:ca:67:a5:bd:
         04:20:72:5d:b8:8c:3a:19:1f:d6:2c:1d:2e:57:e0:4f:20:14:
         a9:d2:d2:8b:3a:4e:8d:7e:e9:e4:4e:8d:b6:0e:68:03:69:b2:
         22:c0:c6:36:5c:af:d2:ce:45:93:85:fa:29:db:ec:09:91:d6:
         71:28:2e:2d:2e:95:e8:74:67:62:13:95:77:65:9a:24:15:a4:
         72:28:54:f4:61:80:a7:53:ad:8f:f2:9b:e7:08:e3:76:5a:04:
         43:d5:a9:4b:06:21:fa:0a:e9:9a:00:c5:3e:ac:6a:ab:26:72:
         48:1b:65:c4:2c:06:ee:71:ee:5b:ea:b9:1c:65:12:11:a4:7f:
         28:82:20:e2:ed:eb:41:41:13:6a:e6:a8:37:7a:05:3c:37:ac:
         20:88:b4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org