Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38392e302f32342d3234203d3e20323731313334.roa
File:                     3136372e3234392e38392e302f32342d3234203d3e20323731313334.roa (raw, json)
Hash identifier:          5r74+O/bsGsoo/NpNalb7tq+QUI1IKJobRc/vJsSLWA=
Subject key identifier:   2E:2C:9B:24:53:90:27:A1:10:7A:11:35:DB:A5:69:8C:84:AE:CE:07
Certificate issuer:       /CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
Certificate serial:       196783A8153223539F56A8E15501329277461182
Authority key identifier: 33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38392e302f32342d3234203d3e20323731313334.roa
Signing time:             Sat 10 Jun 2023 22:27:02 +0000
ROA not before:           Sat 10 Jun 2023 22:22:02 +0000
ROA not after:            Sat 08 Jun 2024 22:27:02 +0000
asID:                     271134
IP address blocks:        167.249.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:67:83:a8:15:32:23:53:9f:56:a8:e1:55:01:32:92:77:46:11:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
        Validity
            Not Before: Jun 10 22:22:02 2023 GMT
            Not After : Jun  8 22:27:02 2024 GMT
        Subject: CN=2E2C9B24539027A1107A1135DBA5698C84AECE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:2a:d9:48:8e:ad:9f:ae:1a:05:f5:c8:91:
                    70:b2:be:42:73:4e:0d:42:1f:ea:9c:02:18:4d:ec:
                    7f:73:3a:b4:39:d7:cd:f5:c3:d0:03:3c:63:8f:05:
                    98:c7:4a:d3:03:a4:7f:52:98:3c:c4:ef:78:9d:8d:
                    7b:01:ce:ab:1d:da:b7:8c:db:24:7a:ec:65:d5:ab:
                    fc:07:a1:40:b7:92:c7:79:fe:b9:e7:27:4c:b2:4f:
                    e4:53:bd:b7:5e:b9:d2:08:58:87:68:b2:4b:cc:2c:
                    8a:c1:3f:b0:3e:c8:3f:b1:6d:72:5f:65:c6:ce:ad:
                    10:63:88:7a:2a:be:51:ec:b7:ae:15:10:a6:8a:2f:
                    ef:ce:31:c8:c4:65:03:ca:c1:3e:21:f2:24:e4:20:
                    58:e4:8d:c2:58:90:15:e7:78:63:9d:58:75:b1:6f:
                    44:4a:a7:72:c6:02:19:0f:c8:3e:92:9c:02:70:b2:
                    6c:d8:5b:88:e6:79:49:5c:3c:76:6b:f0:ce:89:d5:
                    2c:64:99:b2:f9:82:10:a6:87:e2:d5:90:77:cf:c2:
                    c9:a1:1a:a6:13:22:f1:66:d7:eb:d6:2d:fb:d8:c2:
                    b9:db:1e:68:35:36:6a:24:cc:4f:16:fe:5e:40:9e:
                    43:c6:40:41:a6:be:41:c4:6d:05:1e:54:c8:9e:d6:
                    45:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2C:9B:24:53:90:27:A1:10:7A:11:35:DB:A5:69:8C:84:AE:CE:07
            X509v3 Authority Key Identifier:
                keyid:33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e38392e302f32342d3234203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:0b:f9:ae:bc:70:60:8b:97:32:19:7d:ea:15:f3:e2:16:aa:
         a5:78:15:4d:68:19:6f:8f:bc:82:0e:bb:ca:73:61:86:fc:49:
         72:36:bc:1c:f6:bc:a2:ca:a3:96:8a:a7:aa:9a:e9:5c:2d:e6:
         bf:04:37:21:29:ee:d4:0d:c2:d7:f7:da:65:0b:be:29:80:4c:
         ad:d2:d4:98:d0:35:8e:96:4a:eb:d9:d1:16:c0:5e:e1:3a:14:
         4f:6f:49:b0:31:39:7b:86:28:80:2e:06:a0:fe:e9:57:1f:f2:
         fa:65:0d:72:1d:19:3a:40:31:73:df:df:9c:4e:f9:b8:72:e6:
         aa:7e:7c:1c:a8:8d:b4:7d:b6:17:fe:81:d3:b9:ba:2b:05:2f:
         18:a3:e5:b8:a6:00:3f:96:b5:43:e3:43:24:4b:be:8d:86:eb:
         b2:40:42:ae:40:83:fa:24:7d:fc:31:82:15:f8:bb:dc:df:65:
         5a:3b:4b:36:a5:22:5d:bf:b1:17:ee:42:bb:dd:39:d9:27:cf:
         16:73:98:ca:10:4f:2c:27:92:0d:a2:d8:d2:c7:87:43:0c:5d:
         de:17:34:c5:b4:14:cb:84:2b:9d:75:9c:39:23:b4:33:c6:95:
         60:ba:5e:eb:cd:7f:c0:e6:2c:97:a0:ef:85:2e:46:74:23:bd:
         a9:77:05:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org