Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3136372e3235302e382e302f32322d3234203d3e20323632373835.roa
File:                     3136372e3235302e382e302f32322d3234203d3e20323632373835.roa (raw, json)
Hash identifier:          3Aw172TJ1TU4x31T47SV97plOF5NXJq43yAotLWq2Ck=
Subject key identifier:   56:DF:E9:51:BB:1D:CD:13:19:36:A1:E0:58:9B:44:14:04:25:FB:1A
Certificate issuer:       /CN=0A756EBEBF4D659E57B9AF964C23376698E6FF96
Certificate serial:       5CA6F24DCDFD4488038E61C881D4E722B11DD242
Authority key identifier: 0A:75:6E:BE:BF:4D:65:9E:57:B9:AF:96:4C:23:37:66:98:E6:FF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A756EBEBF4D659E57B9AF964C23376698E6FF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3136372e3235302e382e302f32322d3234203d3e20323632373835.roa
Signing time:             Fri 08 Sep 2023 14:08:44 +0000
ROA not before:           Fri 08 Sep 2023 14:03:44 +0000
ROA not after:            Fri 06 Sep 2024 14:08:44 +0000
asID:                     262785
IP address blocks:        167.250.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a6:f2:4d:cd:fd:44:88:03:8e:61:c8:81:d4:e7:22:b1:1d:d2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A756EBEBF4D659E57B9AF964C23376698E6FF96
        Validity
            Not Before: Sep  8 14:03:44 2023 GMT
            Not After : Sep  6 14:08:44 2024 GMT
        Subject: CN=56DFE951BB1DCD131936A1E0589B44140425FB1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:06:ce:45:9b:f0:46:c9:8a:46:46:68:5b:33:
                    a3:81:07:8e:a9:02:c8:fc:37:0e:2a:bc:07:5b:0e:
                    c5:8c:e3:7b:5e:c0:15:a4:21:e1:03:5d:a9:c0:5a:
                    ed:37:14:53:de:9a:b8:ff:35:f5:b5:5e:0d:61:88:
                    f5:d3:28:36:3e:e0:15:6c:f9:8f:f6:89:c3:75:a8:
                    22:47:57:58:62:d0:3b:1b:8f:32:f4:88:89:17:21:
                    4c:3a:82:4d:e2:95:3a:71:8c:b2:d7:4f:4c:d6:ee:
                    ee:8f:5e:ed:24:1e:96:94:40:05:8f:d3:22:e1:d7:
                    4a:98:6c:6c:9b:c6:97:1b:9b:c9:ff:30:11:dc:fe:
                    a8:e2:f9:e5:dc:e0:bd:a4:44:1b:43:9e:28:64:b7:
                    cf:69:0f:1c:44:e4:09:ef:e0:6e:83:41:a3:d1:59:
                    9c:7a:db:7a:b9:66:8b:14:61:a9:53:6a:0d:1c:c0:
                    53:6c:31:d8:34:d2:04:81:c3:85:cb:00:6f:e2:be:
                    9c:bd:fa:55:26:9c:55:e4:b2:89:15:74:f6:4f:d6:
                    c5:37:55:d2:14:b9:0a:50:a9:71:96:15:c3:fd:0e:
                    8f:ad:f9:c2:41:e5:e4:9f:27:1c:83:45:76:b6:b0:
                    c0:7d:60:ec:c0:e0:f5:2c:9a:6f:a0:18:bd:b6:75:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DF:E9:51:BB:1D:CD:13:19:36:A1:E0:58:9B:44:14:04:25:FB:1A
            X509v3 Authority Key Identifier:
                keyid:0A:75:6E:BE:BF:4D:65:9E:57:B9:AF:96:4C:23:37:66:98:E6:FF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/0A756EBEBF4D659E57B9AF964C23376698E6FF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A756EBEBF4D659E57B9AF964C23376698E6FF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3136372e3235302e382e302f32322d3234203d3e20323632373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:eb:d3:d7:8f:c9:3c:e4:9b:2f:4a:21:85:d4:e2:7b:13:
         ec:47:86:52:82:d0:00:55:67:63:11:bd:7f:2c:6e:00:eb:0c:
         91:c9:99:3c:66:ab:88:b2:86:9c:db:4f:c6:eb:f3:16:f6:5c:
         7b:c2:a7:a5:f9:30:3f:aa:ea:1a:7a:bc:8e:8f:5d:b3:cc:e2:
         3d:2f:24:af:d3:87:86:3a:d3:7e:9b:9b:da:07:3e:3f:ae:16:
         a8:53:a1:12:6f:62:33:22:ed:60:7a:10:3f:0c:0a:b8:e2:f2:
         63:ff:1d:71:8f:21:90:24:eb:fc:37:96:c0:fc:16:2d:70:58:
         a2:0c:a9:f7:99:5e:e8:a8:44:09:59:61:ed:68:4b:78:e0:8f:
         30:04:25:ae:a8:04:2c:20:d7:70:52:83:95:93:d7:2a:9d:b6:
         2f:75:17:a8:05:d3:7d:94:f3:3d:05:93:69:e8:a3:f0:66:33:
         c6:05:39:75:b0:94:cd:1b:a1:7d:04:10:91:f3:66:c7:eb:3c:
         87:a5:b2:0e:c1:57:1a:f9:7b:d5:be:9f:62:5d:9c:9f:51:3b:
         80:e5:c6:74:dd:13:71:59:01:74:2b:90:68:a5:c3:4e:4b:e7:
         93:fc:1a:f9:9f:ed:10:57:ed:77:f7:ea:57:b9:a6:64:31:ef:
         f8:65:28:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org