Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa
File:                     3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa (raw, json)
Hash identifier:          M4QKL0o2RzHl//KDzYx0T8Lx8jXkEb5gdVXddGl0WFk=
Subject key identifier:   62:4B:8F:C5:2A:5F:50:90:7B:A6:7A:E7:73:55:AC:18:0A:07:CA:EA
Certificate issuer:       /CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
Certificate serial:       7A727A9789B8138D359A9139553DB0EC54789EBA
Authority key identifier: 33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa
Signing time:             Sat 10 Jun 2023 22:27:06 +0000
ROA not before:           Sat 10 Jun 2023 22:22:06 +0000
ROA not after:            Sat 08 Jun 2024 22:27:06 +0000
asID:                     271134
IP address blocks:        167.249.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:72:7a:97:89:b8:13:8d:35:9a:91:39:55:3d:b0:ec:54:78:9e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
        Validity
            Not Before: Jun 10 22:22:06 2023 GMT
            Not After : Jun  8 22:27:06 2024 GMT
        Subject: CN=624B8FC52A5F50907BA67AE77355AC180A07CAEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:da:bc:8b:8c:57:b9:b5:6e:1b:50:3d:d4:
                    a4:4e:e5:96:25:83:61:1f:33:29:88:ac:f5:22:c6:
                    e9:41:2c:82:bb:0e:f5:2b:0d:60:14:31:bd:cc:bb:
                    5b:52:e7:57:bf:63:43:e2:f3:fb:ca:18:9a:b9:11:
                    2d:0f:68:f9:77:cc:7c:f1:86:e8:66:41:1c:61:57:
                    f5:d1:8a:77:2b:5f:50:d1:72:01:ae:a3:cd:10:5d:
                    32:d9:b8:49:ab:56:3d:c2:4b:e3:55:1e:36:b0:b3:
                    bd:6c:cf:c7:44:e1:30:a2:69:a4:b6:cf:4c:23:d1:
                    33:0e:d1:e1:6c:b2:b2:6d:f6:b0:7d:5e:c0:76:65:
                    8c:9a:b1:28:f3:ff:3f:2e:fe:c9:d2:93:af:8c:85:
                    74:bb:7e:63:82:8a:97:aa:a0:9e:29:22:f3:9e:21:
                    24:e0:a2:f1:2b:b5:25:49:58:32:e3:9e:a4:4c:81:
                    27:26:0f:4d:22:2b:7a:ad:f0:6d:bc:85:0c:b5:c8:
                    53:b6:a7:3d:22:8c:8c:3e:4e:e5:91:3f:85:6f:93:
                    c7:24:2f:c5:d8:c6:bc:1b:6a:3f:82:99:b6:b1:52:
                    42:8b:ad:99:c3:54:38:e1:a1:57:75:3e:eb:50:64:
                    3f:60:6b:97:a0:8c:fa:58:bd:16:89:e0:12:04:12:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4B:8F:C5:2A:5F:50:90:7B:A6:7A:E7:73:55:AC:18:0A:07:CA:EA
            X509v3 Authority Key Identifier:
                keyid:33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:dd:3a:c3:be:28:93:0f:c8:60:45:a8:87:66:1f:7f:54:75:
         fc:fd:d7:ff:57:59:13:47:ea:dd:c1:aa:06:05:9c:a4:c4:17:
         fc:60:79:a2:e0:2c:2d:79:2f:2d:96:2e:45:93:75:43:bf:a5:
         3d:29:18:ce:4a:6e:2b:2b:84:7d:39:bc:c8:cc:bb:ac:89:40:
         3b:ae:98:0d:f9:93:71:84:e2:c9:80:3c:4a:f9:48:ac:9c:7b:
         a2:76:5f:6d:b8:47:1a:cb:71:6c:14:b5:ae:64:89:0a:98:65:
         1e:a4:32:93:dd:fa:ff:e8:86:fe:41:a5:27:de:9f:1b:6e:b1:
         fc:06:2d:67:88:e2:37:5b:bb:f9:6c:bd:f7:05:06:3f:c6:a8:
         9f:42:50:04:75:77:23:79:ec:7e:3e:11:2b:1e:9c:35:c9:ec:
         2d:23:09:51:9c:c1:28:8a:44:36:80:62:95:98:97:15:5e:83:
         ad:83:81:cc:09:16:e3:cd:d8:49:4b:64:47:cd:0f:a7:86:ae:
         81:40:ca:11:7a:71:09:8b:bf:f9:6a:d9:93:86:45:98:63:e6:
         bd:85:f9:8a:5a:22:17:d1:8e:68:c1:88:c4:b0:06:10:ce:2c:
         34:ea:e9:cc:93:2a:c0:1d:56:5d:c4:51:e6:ef:a9:8c:5c:f9:
         3d:2d:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org