Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130322e302f32332d3233203d3e203631383731.roa
File:                     3136372e3234392e3130322e302f32332d3233203d3e203631383731.roa (raw, json)
Hash identifier:          93bdii5lC9TQj5LmaK+OworARJavLwQG9Fz1hjlUpks=
Subject key identifier:   7C:C1:30:C8:F1:F0:21:A2:8A:8D:82:72:D2:1F:D5:78:E5:60:3A:65
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       7814D730613EAB97F2C26B3AB131B0A5C012A748
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130322e302f32332d3233203d3e203631383731.roa
Signing time:             Thu 28 Dec 2023 22:46:01 +0000
ROA not before:           Thu 28 Dec 2023 22:41:01 +0000
ROA not after:            Thu 26 Dec 2024 22:46:01 +0000
asID:                     61871
IP address blocks:        167.249.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:14:d7:30:61:3e:ab:97:f2:c2:6b:3a:b1:31:b0:a5:c0:12:a7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Dec 28 22:41:01 2023 GMT
            Not After : Dec 26 22:46:01 2024 GMT
        Subject: CN=3082010A028201010094F09ADC835E31E5534EFBB3DA8037F23C0A4AF57459340C65D27E657246F344A0738258F43A3BC8E7A6037466DCD2D6C9FF6B5CEDA20EDE6D668A2C42A96BCA97A478D4BA1A3803E674D5037529B0FCBEB92DDBFCAAFE126661A78D13055EF6356D1E852B7DC169138AF3932DCEEE06996B09076E116F72ED93368C5EE58652B114BDC7EE7F7205808F581B8D3D763E8B2FD5E1DD0276DC2398A4FEF8361089D9678E6D7A3B210CB7A532B834CB4F2ACB759E6FE695EAC0C83F359D6E60460C8B2E1D7E4F8BEB359502448EC94758AD722634A796336EEFCF09D554A5967930E7960EF8CCD6FF27DC8C2D3EEAE19714E5639172C80E4FB888BC4BF0F3DC30590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:9a:dc:83:5e:31:e5:53:4e:fb:b3:da:80:
                    37:f2:3c:0a:4a:f5:74:59:34:0c:65:d2:7e:65:72:
                    46:f3:44:a0:73:82:58:f4:3a:3b:c8:e7:a6:03:74:
                    66:dc:d2:d6:c9:ff:6b:5c:ed:a2:0e:de:6d:66:8a:
                    2c:42:a9:6b:ca:97:a4:78:d4:ba:1a:38:03:e6:74:
                    d5:03:75:29:b0:fc:be:b9:2d:db:fc:aa:fe:12:66:
                    61:a7:8d:13:05:5e:f6:35:6d:1e:85:2b:7d:c1:69:
                    13:8a:f3:93:2d:ce:ee:06:99:6b:09:07:6e:11:6f:
                    72:ed:93:36:8c:5e:e5:86:52:b1:14:bd:c7:ee:7f:
                    72:05:80:8f:58:1b:8d:3d:76:3e:8b:2f:d5:e1:dd:
                    02:76:dc:23:98:a4:fe:f8:36:10:89:d9:67:8e:6d:
                    7a:3b:21:0c:b7:a5:32:b8:34:cb:4f:2a:cb:75:9e:
                    6f:e6:95:ea:c0:c8:3f:35:9d:6e:60:46:0c:8b:2e:
                    1d:7e:4f:8b:eb:35:95:02:44:8e:c9:47:58:ad:72:
                    26:34:a7:96:33:6e:ef:cf:09:d5:54:a5:96:79:30:
                    e7:96:0e:f8:cc:d6:ff:27:dc:8c:2d:3e:ea:e1:97:
                    14:e5:63:91:72:c8:0e:4f:b8:88:bc:4b:f0:f3:dc:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C1:30:C8:F1:F0:21:A2:8A:8D:82:72:D2:1F:D5:78:E5:60:3A:65
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130322e302f32332d3233203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:67:03:3e:b9:5a:64:cf:a6:ec:0f:75:46:9f:d6:63:e1:ae:
         fb:81:1e:1d:fa:5d:64:8c:43:17:ac:40:41:29:e9:e2:a3:5d:
         8e:ed:fe:46:79:49:cc:29:82:52:c8:6f:04:be:c2:75:3f:c6:
         e1:d2:bb:01:62:8a:86:4a:f4:01:fe:69:11:22:08:81:ec:74:
         3b:ee:9f:4d:0f:f4:7d:68:ff:57:30:56:05:a3:f4:61:57:0e:
         dc:c1:de:ff:64:8e:d5:39:2a:54:5b:6e:07:a8:42:31:4f:fd:
         68:b4:ea:5d:13:65:54:64:cc:ad:f1:d2:1f:4c:82:42:a9:3f:
         de:96:33:e2:eb:5c:92:61:17:da:a0:d6:93:50:22:30:df:4c:
         f5:e3:6d:a8:91:8f:05:2e:b3:98:af:5e:20:bc:31:d1:5f:4e:
         3d:0f:38:96:24:f3:ae:73:41:ce:a7:b2:8c:4f:e0:91:41:74:
         fa:d3:12:95:5d:21:35:6a:18:f5:0b:47:55:5f:c1:bd:f4:0c:
         5d:27:a8:06:a0:ce:30:21:91:54:00:ac:c8:86:07:3c:db:1a:
         d2:fd:71:57:23:71:22:1c:d7:e2:aa:4b:09:8a:73:9b:60:5a:
         eb:c8:28:08:ee:11:66:d5:d8:e0:3f:4d:9d:02:ed:9d:b1:e3:
         d8:b7:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org