Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130322e302f32342d3234203d3e203631383731.roa
File:                     3136372e3234392e3130322e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          m9xA+atNnrpUIQ4+nyloYSx5JxS2PJ/PpY9wqpwFjF8=
Subject key identifier:   7B:C5:F3:2F:4F:10:A8:4F:E0:4E:67:96:21:DD:B0:09:DB:A2:32:09
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       74F711E9F53C6D69D64428E49CA8DBD2EF56531E
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130322e302f32342d3234203d3e203631383731.roa
Signing time:             Thu 28 Dec 2023 22:46:00 +0000
ROA not before:           Thu 28 Dec 2023 22:41:00 +0000
ROA not after:            Thu 26 Dec 2024 22:46:00 +0000
asID:                     61871
IP address blocks:        167.249.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f7:11:e9:f5:3c:6d:69:d6:44:28:e4:9c:a8:db:d2:ef:56:53:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Dec 28 22:41:00 2023 GMT
            Not After : Dec 26 22:46:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:38:e9:14:ac:8e:6a:25:39:ce:89:f6:ca:
                    8a:bf:bd:bf:90:20:47:63:7d:f8:d2:5e:b2:af:fe:
                    ed:ad:3a:eb:da:6f:fb:18:be:0d:2e:47:46:0c:15:
                    9a:eb:d8:6d:57:b8:c7:a7:e4:db:a8:34:10:bd:e6:
                    c5:1c:5e:dd:f0:88:d3:88:47:f8:c9:f1:13:94:90:
                    93:63:62:26:8f:4a:5a:77:e2:48:f1:fc:c9:cc:4e:
                    39:a4:b2:4d:12:b0:13:4a:53:ae:43:b7:87:93:c3:
                    b4:d1:9e:2f:94:4f:c6:a3:81:3e:ba:ff:2c:da:03:
                    2a:92:1a:4f:9b:d3:e1:9f:26:e9:af:48:2b:6e:70:
                    50:00:ca:8e:a9:93:87:a3:ea:f1:75:b1:16:19:6a:
                    05:13:67:e2:a0:03:4b:eb:31:d9:c0:dc:d7:8f:56:
                    3c:a5:2b:de:48:5f:07:ff:b0:60:fd:2a:06:e6:e3:
                    2e:8e:65:99:30:63:b2:ad:a5:e4:a4:7d:32:a5:cb:
                    f3:50:20:9c:d1:ef:99:0c:6a:f3:82:60:eb:c5:e0:
                    66:40:9b:ed:58:af:2b:27:4e:b1:c9:40:88:2f:8a:
                    76:95:db:69:7e:f7:c6:20:ab:bb:c0:18:e5:b2:66:
                    95:b3:69:53:bf:b7:76:33:5a:27:d2:a2:99:51:0a:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C5:F3:2F:4F:10:A8:4F:E0:4E:67:96:21:DD:B0:09:DB:A2:32:09
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3136372e3234392e3130322e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:bc:ec:e4:59:2c:de:ff:63:5b:ca:fa:10:c0:f7:c0:74:
         ab:98:00:05:0d:c1:e7:6e:c9:60:20:69:87:21:24:b1:3a:b6:
         2b:a5:f2:2a:d0:6f:4f:a5:7f:7b:53:8b:84:d0:9b:08:83:f2:
         f0:ad:96:db:45:c2:b2:9c:ab:ec:1c:d1:14:db:fc:dd:7b:1e:
         9e:04:ae:6e:da:d1:74:6a:ec:a6:95:a1:fc:c7:63:b9:44:bf:
         07:14:10:23:b1:ac:04:ff:0e:35:b9:0e:78:33:6b:c6:df:18:
         50:5d:ae:13:f6:2a:90:b7:ff:e6:ba:12:ee:04:02:08:f7:03:
         91:f6:dc:0d:08:ed:d8:46:34:18:19:c3:fc:b4:a2:12:72:cf:
         97:b2:7d:c1:38:b1:cf:24:70:e8:7f:60:94:7f:a0:6e:e8:81:
         94:c6:e1:ec:4c:e6:2d:68:f6:02:27:da:61:61:ff:9a:f6:7d:
         6e:44:b7:b9:b7:d1:5a:88:63:89:cb:88:0f:67:76:52:8f:77:
         00:a4:17:78:0b:e7:80:8b:51:ec:85:d0:1a:15:43:84:48:c2:
         05:e1:1e:f5:98:5d:df:98:bb:a7:1d:e6:91:a4:28:69:43:bc:
         bc:b8:a3:e3:b4:93:14:6f:8e:33:9b:cf:eb:b3:a1:9d:c0:43:
         d3:9a:ab:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org