Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa
File:                     3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa (raw, json)
Hash identifier:          xLWvItEzoTQHQ3k2NvzX+t91ticzj1qd3EEkAos78nA=
Subject key identifier:   0A:24:CE:3E:88:AA:1B:83:E3:E6:BA:B9:32:B5:12:3F:56:F3:6D:02
Certificate issuer:       /CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
Certificate serial:       11353A5B04C58AA6C1B113C5F458CFD1D4091DB4
Authority key identifier: 33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa
Signing time:             Sat 10 Jun 2023 22:27:13 +0000
ROA not before:           Sat 10 Jun 2023 22:22:13 +0000
ROA not after:            Sat 08 Jun 2024 22:27:13 +0000
asID:                     271134
IP address blocks:        167.249.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:35:3a:5b:04:c5:8a:a6:c1:b1:13:c5:f4:58:cf:d1:d4:09:1d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
        Validity
            Not Before: Jun 10 22:22:13 2023 GMT
            Not After : Jun  8 22:27:13 2024 GMT
        Subject: CN=0A24CE3E88AA1B83E3E6BAB932B5123F56F36D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:71:81:25:ea:bd:fe:55:43:18:09:35:68:
                    2d:00:80:9d:e5:4a:40:e7:5b:ba:58:d9:32:20:62:
                    2a:e4:82:69:3c:ee:e7:6a:e8:80:84:e5:69:2e:87:
                    04:71:77:a9:25:ad:0e:74:cd:1e:3b:4f:0e:c6:8c:
                    44:b2:ad:e5:c2:b6:5b:bc:42:6e:23:87:36:c8:3d:
                    1c:01:31:63:f9:8d:7a:4b:16:ff:dc:a7:a0:36:7d:
                    c7:45:8c:88:7d:23:09:85:d6:bb:a0:08:f6:a0:df:
                    f8:b1:b2:fa:ae:b6:fd:e2:ad:28:d6:3b:5d:0f:97:
                    45:79:1f:56:88:f6:9a:50:78:68:69:6d:fb:a2:4c:
                    c2:f2:30:72:a8:43:cd:fa:9c:03:b9:da:fe:be:97:
                    cc:7d:90:43:94:bb:67:39:4f:4e:bf:f2:4e:18:88:
                    ac:62:13:04:f7:ba:62:b9:84:b1:7f:9c:b4:5f:52:
                    43:03:f0:6d:8f:b0:45:c8:70:15:06:58:06:26:3c:
                    c0:76:79:06:25:ab:0e:d8:ff:6a:7b:05:1c:30:89:
                    c7:a7:23:0c:f1:26:9f:98:95:63:c2:88:75:25:7c:
                    45:b3:9e:57:29:d1:32:f9:f7:59:50:26:1f:ed:f6:
                    3a:ea:68:fe:76:a1:a9:d8:98:11:70:41:96:bd:17:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:24:CE:3E:88:AA:1B:83:E3:E6:BA:B9:32:B5:12:3F:56:F3:6D:02
            X509v3 Authority Key Identifier:
                keyid:33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/3136372e3234392e39312e302f32342d3234203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:2e:4b:f2:92:87:34:32:54:a6:8a:ff:39:7f:1d:81:30:74:
         63:06:f1:71:03:b2:7b:82:ee:57:30:de:52:08:e7:62:24:3e:
         e9:08:d3:02:8c:59:d6:45:9c:f1:3d:eb:23:e0:ba:ec:e6:fc:
         73:4a:47:54:da:c9:3e:54:fa:13:b1:77:06:a8:78:81:b2:41:
         c1:93:53:10:ed:d3:7c:5a:37:69:bd:02:20:84:c4:87:8d:e8:
         b1:3a:be:a7:b1:2e:e4:a2:42:bf:95:92:bd:dc:70:3e:cd:0d:
         23:0e:e7:ef:ed:90:45:50:b4:04:39:a4:a0:27:e0:e9:68:bf:
         6f:45:f1:f7:11:af:32:49:40:c8:70:74:da:92:0c:02:e7:53:
         ae:70:af:73:08:2f:71:fe:2e:f3:de:bf:f7:01:74:c3:6d:58:
         c2:a1:4f:93:6c:08:9b:21:99:4a:cd:08:f0:f8:0a:40:27:28:
         59:56:c3:36:1a:5d:e1:3a:f3:e3:4c:49:f0:27:33:96:34:38:
         54:f0:5c:86:b0:af:cd:a8:c5:9f:66:1e:c3:e6:ef:66:fe:a5:
         f9:29:c0:85:61:30:5b:aa:70:73:44:03:68:f5:cf:51:44:5f:
         56:04:f4:36:9f:87:da:78:2a:9e:75:f1:bf:97:b9:7d:74:ae:
         1f:f2:26:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org