Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa
File:                     3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          UwNRWQPkKftqvlNleHklRixYNB9xOhyP5K48one93q0=
Subject key identifier:   5E:DA:82:ED:9D:70:88:95:91:D4:8A:A4:E3:BC:95:BE:64:D7:92:AB
Certificate issuer:       /CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Certificate serial:       283A3AE528C048BF60B759714D3A9171B26CB91A
Authority key identifier: 42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa
Signing time:             Tue 05 Mar 2024 13:35:18 +0000
ROA not before:           Tue 05 Mar 2024 13:30:18 +0000
ROA not after:            Tue 04 Mar 2025 13:35:18 +0000
asID:                     262595
IP address blocks:        167.250.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3a:3a:e5:28:c0:48:bf:60:b7:59:71:4d:3a:91:71:b2:6c:b9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
        Validity
            Not Before: Mar  5 13:30:18 2024 GMT
            Not After : Mar  4 13:35:18 2025 GMT
        Subject: CN=5EDA82ED9D70889591D48AA4E3BC95BE64D792AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:8e:b4:22:f4:8b:09:80:af:56:f4:07:2d:
                    7a:8a:f4:f9:d0:a9:0c:b1:8b:63:13:bf:9d:90:b6:
                    1e:38:87:95:d1:d1:c5:8e:f5:8e:c3:21:ca:8c:8d:
                    d1:88:de:4a:13:b6:27:51:16:7a:76:91:f1:2e:6d:
                    54:9a:41:ac:9a:19:ff:9a:ab:3e:92:71:26:c0:cb:
                    5d:c0:24:d1:99:4c:77:e3:c8:99:aa:51:9e:d8:ea:
                    af:06:1b:37:54:34:2f:8c:49:fc:b7:43:77:2c:be:
                    ae:a9:b7:a2:ec:97:cf:85:0a:11:30:06:c9:f6:c5:
                    b2:df:d4:96:b4:88:be:75:16:13:51:9d:84:53:62:
                    e5:f7:5e:e6:9b:9c:d0:12:14:b0:1e:b8:94:33:2f:
                    18:12:45:eb:90:c2:50:7d:67:3d:87:46:42:7c:0c:
                    bb:82:66:0e:fa:90:2b:7f:f6:33:c9:a7:7e:e4:e7:
                    7c:83:64:d9:95:61:a8:27:9f:e3:f3:1f:1c:67:8c:
                    40:a8:73:07:8d:bc:5a:c7:b5:77:fe:17:4c:5b:df:
                    7d:d0:69:9e:e9:48:3f:8f:ce:2b:18:e4:9c:eb:ec:
                    7a:e0:32:0c:ca:b8:fc:33:06:fc:77:d4:39:3b:63:
                    9f:48:cc:43:83:26:98:0e:2c:f2:dd:a8:32:74:d4:
                    d9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DA:82:ED:9D:70:88:95:91:D4:8A:A4:E3:BC:95:BE:64:D7:92:AB
            X509v3 Authority Key Identifier:
                keyid:42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3136372e3235302e32302e302f32322d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:e7:2a:e0:f2:d6:06:dd:ea:57:80:4b:7f:5c:3a:a7:13:6d:
         83:39:df:b6:ff:89:52:37:b6:e3:be:0e:11:53:59:87:3e:97:
         75:d8:42:b6:e4:0e:0b:f9:87:33:f5:25:d0:fe:ce:a3:0b:38:
         7b:38:82:6d:b3:52:e4:cc:07:0d:e8:d5:40:76:bc:18:b6:6f:
         e8:3b:00:95:cf:29:c5:ac:c4:16:92:9f:d5:28:a6:5e:98:73:
         f2:5d:d1:f6:09:5a:61:c3:95:76:36:5c:c6:2c:46:be:af:43:
         85:d6:8e:db:e0:16:17:50:f9:ae:ca:5e:2e:de:40:ae:92:60:
         8d:4f:14:a6:a2:7d:96:a6:53:cf:ab:6d:64:b1:e3:0b:de:03:
         4c:cb:67:2c:13:d3:0c:68:6f:0c:b1:c7:e2:d2:f7:2a:7b:68:
         c0:41:7b:8e:30:d3:d2:aa:03:87:7c:1f:d7:33:34:3a:6b:c2:
         b1:c9:20:0e:9b:08:da:79:7e:d6:5b:ea:a3:2e:8a:b1:24:35:
         e6:39:3e:7e:6c:4b:09:59:63:46:eb:2d:b6:60:fb:2a:a5:72:
         a4:c5:1d:e5:05:73:83:b8:33:f7:17:b6:f0:40:e7:7a:5a:bc:
         56:7a:ee:68:28:5d:e2:ac:48:ac:2c:0f:a0:35:7c:55:41:2f:
         1f:d5:94:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org