Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130302e302f32322d3232203d3e203631383731.roa
File:                     3136372e3234392e3130302e302f32322d3232203d3e203631383731.roa (raw, json)
Hash identifier:          AZbbtCwR3PnpVJthm5lMI9+Hpf3RbC4pGZApakYzDm4=
Subject key identifier:   81:7F:16:92:EB:82:5B:74:CA:17:31:67:76:66:DE:E2:A2:CA:B1:EE
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       7BECE1B6DBB2C2D4FE90339E1BF971693FB8D95D
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130302e302f32322d3232203d3e203631383731.roa
Signing time:             Thu 28 Dec 2023 22:46:00 +0000
ROA not before:           Thu 28 Dec 2023 22:41:00 +0000
ROA not after:            Thu 26 Dec 2024 22:46:00 +0000
asID:                     61871
IP address blocks:        167.249.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ec:e1:b6:db:b2:c2:d4:fe:90:33:9e:1b:f9:71:69:3f:b8:d9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Dec 28 22:41:00 2023 GMT
            Not After : Dec 26 22:46:00 2024 GMT
        Subject: CN=3082010A0282010100D3A95CD1782A7FB26A0F77387667200E80D426C7AC7D2ABB72B526E060025767BBD4583C36433A57608576CEC9071F8C2F9FD6CE88D969C8889F3624F4ABF7694D9AA84437B6F64FF47671E44334882E32300FA6AA37DE8DC96E48ECE321489A407693B96BAD50B59685672B03731ABFB011293D93FF2F8A64EFCB779F3BF990DF2409AEA2D66C56EB002D909485BC2691CED46204F570334083570342B3BCE48BCE316FB7B0A6ECA1E36E047917F9E6072AA4B3599FF311913417F3E4BB168AB154BCDA2A1172E1930FF7F0B1573C48B1FD13441DD50CAFD7E61E2E47B3AB07507E0DCF4E53538CB5F66FF44FEFB38025DDD4662529C1CDD5765D809A3373510203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:5c:d1:78:2a:7f:b2:6a:0f:77:38:76:67:
                    20:0e:80:d4:26:c7:ac:7d:2a:bb:72:b5:26:e0:60:
                    02:57:67:bb:d4:58:3c:36:43:3a:57:60:85:76:ce:
                    c9:07:1f:8c:2f:9f:d6:ce:88:d9:69:c8:88:9f:36:
                    24:f4:ab:f7:69:4d:9a:a8:44:37:b6:f6:4f:f4:76:
                    71:e4:43:34:88:2e:32:30:0f:a6:aa:37:de:8d:c9:
                    6e:48:ec:e3:21:48:9a:40:76:93:b9:6b:ad:50:b5:
                    96:85:67:2b:03:73:1a:bf:b0:11:29:3d:93:ff:2f:
                    8a:64:ef:cb:77:9f:3b:f9:90:df:24:09:ae:a2:d6:
                    6c:56:eb:00:2d:90:94:85:bc:26:91:ce:d4:62:04:
                    f5:70:33:40:83:57:03:42:b3:bc:e4:8b:ce:31:6f:
                    b7:b0:a6:ec:a1:e3:6e:04:79:17:f9:e6:07:2a:a4:
                    b3:59:9f:f3:11:91:34:17:f3:e4:bb:16:8a:b1:54:
                    bc:da:2a:11:72:e1:93:0f:f7:f0:b1:57:3c:48:b1:
                    fd:13:44:1d:d5:0c:af:d7:e6:1e:2e:47:b3:ab:07:
                    50:7e:0d:cf:4e:53:53:8c:b5:f6:6f:f4:4f:ef:b3:
                    80:25:dd:d4:66:25:29:c1:cd:d5:76:5d:80:9a:33:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7F:16:92:EB:82:5B:74:CA:17:31:67:76:66:DE:E2:A2:CA:B1:EE
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130302e302f32322d3232203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:41:52:8e:bc:12:79:9d:d3:44:c8:ce:30:9e:b5:14:a9:56:
         cd:7e:31:75:a2:dc:93:d8:b5:96:ec:5f:83:0d:1b:ea:ef:9e:
         1a:d3:d2:0f:d3:17:d2:8f:5c:be:3e:b8:5f:f7:7a:8f:28:78:
         3f:37:cb:76:86:8c:a1:d4:ab:90:da:c0:9f:e0:83:9a:8c:7d:
         d9:74:f4:f4:88:bf:04:39:f1:8e:87:5a:49:b7:73:eb:0a:b4:
         45:4d:db:3f:d8:15:2a:38:22:4d:ab:90:44:6e:3c:c9:96:c5:
         0c:44:4f:3c:d2:b6:10:2a:54:b0:4a:59:22:b2:9b:63:10:d7:
         e4:56:32:78:6d:28:f0:aa:e1:34:2d:ef:26:10:e0:2b:cb:49:
         c5:5a:5c:ae:60:17:70:99:51:8b:54:7f:d5:f4:6e:a2:0d:7d:
         50:07:00:1f:39:6a:92:50:ff:70:6d:2e:cb:0d:ea:7c:9f:88:
         d1:c1:9d:4f:ae:07:ff:d1:2e:08:ab:47:61:11:92:19:7e:91:
         70:a0:10:b6:2f:b4:0e:a0:fd:3f:a3:98:1b:85:ef:aa:0c:81:
         0f:4c:3d:35:9a:f9:a1:b1:e5:0d:fb:11:d6:b7:e1:82:6b:b0:
         80:33:f5:49:5c:15:0a:98:28:5e:27:ed:09:5f:6f:5f:a4:90:
         2b:83:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org