Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130312e302f32342d3234203d3e203631383731.roa
File:                     3136372e3234392e3130312e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          A6+agNOtAOT3DyabxU0Ka47WDM6j3hy3Kt6/1BEG8sQ=
Subject key identifier:   A9:B5:7C:8E:2B:A5:B2:D7:E4:BA:35:1D:78:DE:62:15:0F:05:50:0D
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       43A8AA66599475A637EE77244BE0F3CCDDB7F7C0
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130312e302f32342d3234203d3e203631383731.roa
Signing time:             Fri 20 Oct 2023 15:06:14 +0000
ROA not before:           Fri 20 Oct 2023 15:01:14 +0000
ROA not after:            Fri 18 Oct 2024 15:06:14 +0000
asID:                     61871
IP address blocks:        167.249.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a8:aa:66:59:94:75:a6:37:ee:77:24:4b:e0:f3:cc:dd:b7:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Oct 20 15:01:14 2023 GMT
            Not After : Oct 18 15:06:14 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:47:d3:da:5f:da:c4:6f:e5:f1:a1:bc:5a:
                    0c:1a:d5:e8:f1:19:a8:15:63:be:e3:dd:37:eb:df:
                    84:05:4c:ba:16:8a:68:8c:13:02:38:78:e9:79:06:
                    fb:de:77:30:f3:6c:da:35:b4:81:e7:93:4e:fd:89:
                    0a:8e:4a:be:a2:34:f4:a9:d3:64:96:a0:c3:31:ad:
                    ad:0f:80:9a:a7:41:0b:01:3e:da:ab:71:63:e9:ff:
                    d1:9c:1f:75:9c:d0:37:03:ab:48:02:1e:da:34:e1:
                    fb:96:cb:ab:26:07:4c:e2:e2:92:8f:d0:19:87:c1:
                    72:29:b0:ca:39:cd:01:69:09:d1:36:13:dd:67:16:
                    8c:ec:67:7d:21:c2:42:b7:2f:3e:12:a1:8a:a0:d3:
                    8b:85:18:10:58:b1:b5:35:32:6f:3c:4e:f8:0c:fe:
                    e3:62:d4:7c:bb:3a:1c:4e:ae:3d:ab:6c:f0:c5:73:
                    9c:50:5a:8f:34:ff:39:ec:d5:b1:6c:32:24:4b:24:
                    fd:32:11:6e:89:3c:0e:26:1b:88:94:42:30:55:42:
                    54:f7:70:df:d2:83:33:21:b3:ed:5d:40:c2:31:71:
                    b4:5f:0d:a6:06:2c:f3:e0:c4:3e:ee:fd:27:fd:23:
                    73:bb:da:08:91:b3:01:32:10:89:74:c2:f1:e7:c4:
                    52:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B5:7C:8E:2B:A5:B2:D7:E4:BA:35:1D:78:DE:62:15:0F:05:50:0D
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130312e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:e5:b1:cf:64:55:47:67:20:ee:68:8c:42:8d:54:84:62:64:
         e8:34:44:ae:35:83:95:45:2e:77:f1:c2:5a:fe:d9:60:3d:c6:
         85:3a:59:5d:da:ce:38:e6:bf:b5:a2:21:cc:f8:c6:97:cc:fb:
         ec:2f:6b:ad:85:5f:1d:9b:5e:63:26:15:d7:19:d8:f4:dc:20:
         11:9d:57:20:5e:48:4a:74:9b:69:c8:c7:32:78:7a:9a:dc:21:
         62:a1:e4:e3:57:f6:1e:1a:e5:f5:14:62:35:47:a1:f1:c9:19:
         99:5b:61:63:3c:84:e2:ad:ec:1f:43:f6:b2:77:cb:be:02:e3:
         f3:aa:60:97:e0:1b:fd:01:8b:b0:47:02:66:77:0d:9a:3f:c2:
         c8:85:c2:13:d8:38:c9:9c:47:b8:39:f5:54:2a:60:15:94:3c:
         0a:22:3c:e4:4f:ec:c6:6a:af:44:4d:9b:9b:86:f8:e3:5b:42:
         01:45:ca:d2:1c:e9:76:34:16:64:83:18:6f:1e:0d:40:e7:21:
         33:0e:9d:b7:7e:98:68:be:3a:22:89:34:1e:77:fe:ea:53:d4:
         c9:9c:5e:8f:73:af:5c:bb:fd:07:c1:73:87:19:91:60:ef:17:
         f8:b1:fa:cb:8e:9d:f9:84:48:01:fd:eb:eb:5d:e4:e6:92:d4:
         58:1e:1a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org