Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa
File:                     3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa (raw, json)
Hash identifier:          SJ1KL7sgOlxb1TXxem1fGT2wnw/mURhnAkg6v0Xrym0=
Subject key identifier:   05:0A:37:67:81:F2:61:1C:56:0C:5D:5D:60:94:D3:64:2F:AE:98:2F
Certificate issuer:       /CN=EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A
Certificate serial:       46B7EC6E881DA3053ACD3AF7726DA9E5DE3F4E28
Authority key identifier: EE:2E:C7:1E:CC:9E:7B:D6:A4:E8:9A:AC:11:06:04:12:CE:5D:E6:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa
Signing time:             Wed 25 Oct 2023 13:56:00 +0000
ROA not before:           Wed 25 Oct 2023 13:51:00 +0000
ROA not after:            Wed 23 Oct 2024 13:56:00 +0000
asID:                     265197
IP address blocks:        167.250.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b7:ec:6e:88:1d:a3:05:3a:cd:3a:f7:72:6d:a9:e5:de:3f:4e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A
        Validity
            Not Before: Oct 25 13:51:00 2023 GMT
            Not After : Oct 23 13:56:00 2024 GMT
        Subject: CN=3082010A0282010100B304416EE3AB07AF3B6F1F5E4B66E93A67C0E7F7AD6FACA3EB7B2467CDF73D7EC2906A671089F48E8B95C93F5F36E93A983C0F957D3EE0E3C2BBC8ED45EE0704F6D34B7F3A19838BE725F46EC51800B9ED6A1A230197BCE684115B66E25386C5B1E7385A0A0E3B7BF525E32285A17B5FC7C67F7C3919E25B352D3C817341FF6D636991E594AA9E7A33198162C699C7CE34A24BC4B77100DCEFB30E8A9F12065626E15A57971703A3B0006EB1001F2B45557ECA3011D410F168463E7D3CC456DD55671210C437BCE5642D441D9FEF25818AF70817CF99B14569CC4AB1138A2165645C5826FA74CDA76E7F074C2D2EEE6B8E74DFCC231C65469D96E69881DF19570203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:41:6e:e3:ab:07:af:3b:6f:1f:5e:4b:66:
                    e9:3a:67:c0:e7:f7:ad:6f:ac:a3:eb:7b:24:67:cd:
                    f7:3d:7e:c2:90:6a:67:10:89:f4:8e:8b:95:c9:3f:
                    5f:36:e9:3a:98:3c:0f:95:7d:3e:e0:e3:c2:bb:c8:
                    ed:45:ee:07:04:f6:d3:4b:7f:3a:19:83:8b:e7:25:
                    f4:6e:c5:18:00:b9:ed:6a:1a:23:01:97:bc:e6:84:
                    11:5b:66:e2:53:86:c5:b1:e7:38:5a:0a:0e:3b:7b:
                    f5:25:e3:22:85:a1:7b:5f:c7:c6:7f:7c:39:19:e2:
                    5b:35:2d:3c:81:73:41:ff:6d:63:69:91:e5:94:aa:
                    9e:7a:33:19:81:62:c6:99:c7:ce:34:a2:4b:c4:b7:
                    71:00:dc:ef:b3:0e:8a:9f:12:06:56:26:e1:5a:57:
                    97:17:03:a3:b0:00:6e:b1:00:1f:2b:45:55:7e:ca:
                    30:11:d4:10:f1:68:46:3e:7d:3c:c4:56:dd:55:67:
                    12:10:c4:37:bc:e5:64:2d:44:1d:9f:ef:25:81:8a:
                    f7:08:17:cf:99:b1:45:69:cc:4a:b1:13:8a:21:65:
                    64:5c:58:26:fa:74:cd:a7:6e:7f:07:4c:2d:2e:ee:
                    6b:8e:74:df:cc:23:1c:65:46:9d:96:e6:98:81:df:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0A:37:67:81:F2:61:1C:56:0C:5D:5D:60:94:D3:64:2F:AE:98:2F
            X509v3 Authority Key Identifier:
                keyid:EE:2E:C7:1E:CC:9E:7B:D6:A4:E8:9A:AC:11:06:04:12:CE:5D:E6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE2EC71ECC9E7BD6A4E89AAC11060412CE5DE69A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANzouTv9s2Ng7v2FCEXZUFduQkK5YqoXriiQq7T22eXQ/0/3136372e3235302e37322e302f32322d3234203d3e20323635313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:94:91:63:88:f2:d5:ec:3f:7e:9b:38:dd:26:e6:b3:1f:52:
         04:f6:26:a6:16:7b:5b:59:76:a9:fd:f1:e7:11:8f:dc:da:cb:
         a0:44:9a:c1:35:4e:c9:84:e6:1a:55:9f:70:07:9c:40:bb:42:
         22:c5:0a:a6:17:a6:e2:b0:1c:b7:26:fc:88:d7:94:8b:84:ef:
         0f:50:fa:2c:32:e8:a7:31:40:c4:75:92:f0:fe:3b:a3:59:17:
         65:91:f4:d8:61:cc:78:93:a9:f4:be:53:64:9a:09:92:13:ec:
         30:0f:29:37:c4:73:6b:d4:ce:2f:01:7f:3c:99:1a:3e:b3:23:
         a3:59:fd:bc:eb:a5:c5:90:f9:ac:6b:20:59:63:af:bc:a8:11:
         48:ed:cf:66:2f:d2:33:0d:e4:d7:14:d6:bd:f8:b2:b1:f2:9d:
         19:ac:69:30:94:a8:75:49:62:95:2c:7d:4c:d0:a6:49:f3:b4:
         00:57:c9:68:0d:e0:a7:60:fa:a1:ca:30:4d:03:77:50:67:15:
         db:65:de:91:c4:a1:a1:c7:7c:96:f4:01:ed:9c:c6:f3:dc:5b:
         a6:21:ed:e8:c8:06:74:e6:f3:e2:8e:7b:5f:12:6e:84:6d:66:
         ae:30:1c:f0:51:1d:e2:ed:43:19:c7:92:57:ed:3c:08:fe:d7:
         dc:0e:d8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org