Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/3136372e3234392e3134342e302f32332d3233203d3e20323635313932.roa
File:                     3136372e3234392e3134342e302f32332d3233203d3e20323635313932.roa (raw, json)
Hash identifier:          QfLyqSHbgAVzSSVINnkMBgucp/iMxLZZw/QQn5P1u8o=
Subject key identifier:   4B:65:26:36:83:91:6C:84:75:66:23:47:45:85:C9:C0:61:3E:BC:C7
Certificate issuer:       /CN=9CDEE6CF6519966891D6D812879D24B89912ACB2
Certificate serial:       134BC586188E50C3EC0A30E88F19EE8C81CF080B
Authority key identifier: 9C:DE:E6:CF:65:19:96:68:91:D6:D8:12:87:9D:24:B8:99:12:AC:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/3136372e3234392e3134342e302f32332d3233203d3e20323635313932.roa
Signing time:             Thu 04 Apr 2024 20:58:56 +0000
ROA not before:           Thu 04 Apr 2024 20:53:56 +0000
ROA not after:            Thu 03 Apr 2025 20:58:56 +0000
asID:                     265192
IP address blocks:        167.249.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4b:c5:86:18:8e:50:c3:ec:0a:30:e8:8f:19:ee:8c:81:cf:08:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDEE6CF6519966891D6D812879D24B89912ACB2
        Validity
            Not Before: Apr  4 20:53:56 2024 GMT
            Not After : Apr  3 20:58:56 2025 GMT
        Subject: CN=4B65263683916C84756623474585C9C0613EBCC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:84:f9:6c:1c:c5:ba:bd:29:8e:01:5a:e1:9d:
                    b7:d9:aa:93:de:ba:a5:43:d9:39:25:fb:9f:38:09:
                    f9:08:3e:98:30:dc:eb:b9:41:2d:d0:9e:6f:60:41:
                    6e:e1:b5:10:55:c7:fd:b0:e9:78:8d:9e:37:ae:e9:
                    34:ee:7b:6b:71:39:5d:dd:4b:9c:08:55:7c:aa:e9:
                    a1:1c:30:de:9a:e2:85:b8:b6:02:41:4f:b6:06:8b:
                    7b:22:01:65:25:53:71:9a:a7:73:f1:87:e8:01:4c:
                    bf:69:55:df:13:b6:8b:f3:9d:4e:b3:0c:30:af:66:
                    84:b6:3a:e0:11:55:a6:c2:00:64:83:7d:11:0a:9a:
                    5a:a0:ec:f4:49:07:9c:aa:31:62:c4:f9:90:8b:64:
                    af:36:7c:b7:02:df:5a:6b:5a:1c:14:bb:af:9a:2f:
                    c2:db:79:b2:55:12:85:14:15:1c:86:68:a1:3a:b9:
                    a1:1e:47:1b:7b:9a:54:b5:d1:29:a2:76:b0:73:72:
                    6c:f1:07:55:1f:41:a3:cf:95:6a:31:43:9d:ca:30:
                    d4:4d:bc:a8:51:5d:3a:e6:c5:90:c5:bb:46:51:e8:
                    ae:11:66:a4:7d:ed:0e:02:01:b7:8c:98:b0:59:62:
                    74:70:d4:45:bc:b4:a3:b5:e0:fe:fc:61:d8:4d:39:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:65:26:36:83:91:6C:84:75:66:23:47:45:85:C9:C0:61:3E:BC:C7
            X509v3 Authority Key Identifier:
                keyid:9C:DE:E6:CF:65:19:96:68:91:D6:D8:12:87:9D:24:B8:99:12:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CDEE6CF6519966891D6D812879D24B89912ACB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8ry8AJmb1MvgJNDdnGtYEpAuryfGhiTPUBwTSLQfkWn/1/3136372e3234392e3134342e302f32332d3233203d3e20323635313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:06:fa:c0:1f:2a:b7:2a:67:76:22:2b:c4:8f:ed:3f:2f:03:
         1b:79:03:24:b6:e0:8c:fb:62:50:f0:00:5c:d7:a9:cc:14:d5:
         62:a3:fa:a9:c4:2b:5e:bf:b3:f8:2f:ee:f0:84:c5:57:97:22:
         d4:62:0b:18:a9:5e:9f:fe:2e:94:e3:a3:6d:22:ee:84:95:ea:
         0e:30:5a:59:f7:9d:17:dc:83:84:93:bd:67:56:7a:9c:f0:f6:
         68:bf:0c:9c:02:d2:bc:89:81:9e:b3:d5:66:f9:07:4b:0d:21:
         23:51:3e:ae:37:ba:1f:96:05:7c:8f:3d:ad:33:b0:39:e1:00:
         0d:fd:ba:51:6b:82:6b:d8:77:6f:91:05:10:99:03:a6:0b:d9:
         f9:c8:24:95:c3:ec:e9:5d:38:ec:cb:69:7e:cc:13:b5:91:cb:
         fe:1e:99:2f:30:2a:24:64:a5:da:90:c8:9a:67:d1:1c:5f:dc:
         94:48:77:34:63:63:37:cf:52:15:d8:1b:37:8c:1f:b3:3f:8e:
         e6:cc:b6:97:fe:59:2f:47:f2:3c:88:fc:86:ba:14:7b:57:16:
         8f:10:10:1a:b6:36:63:0d:3b:b7:1c:c4:54:11:d1:04:21:54:
         c0:b9:08:96:39:59:0c:aa:ec:92:ae:b0:e1:30:f7:dc:e8:dd:
         c2:73:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org