Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32322d3332203d3e20323731313334.roa
File:                     3136372e3234392e38382e302f32322d3332203d3e20323731313334.roa (raw, json)
Hash identifier:          DfZxdhePkBbRdiIPsXeDXsTzDUiwv7agGxMf1NBR3eE=
Subject key identifier:   16:63:57:E0:AB:AA:D7:14:0A:92:93:94:55:B6:86:A5:1D:C2:E6:56
Certificate issuer:       /CN=B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09
Certificate serial:       307B5F2BE8E71B21F9A45F6F20CE4E79BFB14E13
Authority key identifier: B8:4D:B7:C8:E0:02:C7:BD:63:00:4D:52:A6:EF:D4:A7:C9:3A:5F:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32322d3332203d3e20323731313334.roa
Signing time:             Thu 27 Jun 2024 15:48:32 +0000
ROA not before:           Thu 27 Jun 2024 15:43:32 +0000
ROA not after:            Thu 26 Jun 2025 15:48:32 +0000
asID:                     271134
IP address blocks:        167.249.88.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7b:5f:2b:e8:e7:1b:21:f9:a4:5f:6f:20:ce:4e:79:bf:b1:4e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09
        Validity
            Not Before: Jun 27 15:43:32 2024 GMT
            Not After : Jun 26 15:48:32 2025 GMT
        Subject: CN=166357E0ABAAD7140A92939455B686A51DC2E656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:d6:9d:77:e0:da:ff:cd:d6:15:06:35:c9:
                    86:f0:24:07:61:1a:c8:da:17:2d:4d:ea:24:16:a4:
                    38:2e:c2:d6:ce:4a:e1:b5:48:45:10:91:25:d2:88:
                    7c:35:6e:bb:13:0e:36:32:83:5c:3e:80:0b:64:f0:
                    0d:ff:47:b8:b9:a7:8c:f4:4f:c3:78:06:bf:97:d0:
                    66:47:d6:03:ad:e3:2e:8c:25:6d:76:96:46:ff:cd:
                    f9:23:61:35:9c:53:fc:5d:ed:81:23:a5:38:df:6d:
                    f1:8c:7a:d0:43:d9:4b:ae:72:e1:c3:6c:f1:b3:2d:
                    8f:82:0a:a9:3e:b6:69:eb:63:1d:f5:8f:b7:79:f8:
                    22:4d:59:9a:06:84:32:ba:4c:3b:94:34:4b:23:e4:
                    d8:e0:46:35:d7:7f:de:b1:3e:57:73:d3:37:38:10:
                    fe:bb:b4:69:0f:79:a5:3c:3c:89:ef:e0:cb:c2:4f:
                    da:58:f0:6c:79:fe:c7:6e:d8:dc:01:f7:07:b1:d9:
                    91:54:0b:35:9d:4c:df:01:21:b2:0f:65:4b:16:2c:
                    92:53:cb:ae:db:6e:23:c1:2d:38:40:e3:de:09:25:
                    76:e5:d3:3f:02:79:7d:58:fd:a6:15:34:ff:5a:1b:
                    de:ea:4b:ee:ac:9d:f7:f4:ac:82:13:d5:34:2d:d2:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:63:57:E0:AB:AA:D7:14:0A:92:93:94:55:B6:86:A5:1D:C2:E6:56
            X509v3 Authority Key Identifier:
                keyid:B8:4D:B7:C8:E0:02:C7:BD:63:00:4D:52:A6:EF:D4:A7:C9:3A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B84DB7C8E002C7BD63004D52A6EFD4A7C93A5F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38382e302f32322d3332203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:87:e6:c1:d6:c4:1d:de:c0:b4:8a:22:be:8b:bc:2d:5f:fc:
         53:d0:8c:71:27:ab:25:55:4b:71:04:14:eb:d4:a0:b2:2e:6a:
         76:13:12:55:48:c4:f0:f5:8a:b0:e3:f1:c9:c7:01:ae:f3:04:
         3a:a8:4a:56:cf:52:1d:06:3c:fb:5b:41:60:17:cb:d6:3a:61:
         97:9b:51:e5:81:df:de:56:62:86:30:87:cc:85:c6:77:08:f3:
         14:fd:83:a4:36:85:c1:d4:f3:ec:7d:46:2e:75:dc:de:7d:2c:
         7a:e7:c2:8a:6b:b4:7a:2e:9c:4f:e6:a4:97:89:e5:41:3d:db:
         73:36:58:b9:e6:0e:f9:3d:8a:86:98:bd:5b:1a:14:ea:59:21:
         c8:4a:78:10:fe:5a:3d:57:f4:1c:d3:aa:47:a9:40:b6:45:f1:
         90:fa:44:8e:74:64:39:ee:62:f6:38:02:cc:ba:a5:06:32:5a:
         8b:76:59:0c:6f:3a:38:e3:9d:0b:d2:af:16:9b:bf:f3:8a:13:
         f8:3c:f1:97:d2:cd:6a:31:27:ed:05:6b:b2:11:01:37:c8:fa:
         ad:f5:10:da:39:db:e4:6c:50:55:57:10:77:30:68:aa:77:fc:
         be:8b:2c:0e:49:33:23:c9:50:b6:c6:ac:27:d2:27:f9:0d:94:
         a1:9c:31:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 20:19:36 2024 by rpki-client on console-ams.rpki-client.org