Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136302e302f32332d3233203d3e20323637353735.roa
File:                     3136372e3234392e3136302e302f32332d3233203d3e20323637353735.roa (raw, json)
Hash identifier:          G3IIesP4p9l9IOch9auYWssxw0rKoxD/Etp8wL77eEA=
Subject key identifier:   B9:E8:66:59:54:32:42:B3:AE:CA:79:F9:CB:D4:B1:B2:A6:BD:98:A7
Certificate issuer:       /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial:       1D9D11173D373100A9A3FF9261644725C10A49EF
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136302e302f32332d3233203d3e20323637353735.roa
Signing time:             Thu 11 Jan 2024 18:03:46 +0000
ROA not before:           Thu 11 Jan 2024 17:58:46 +0000
ROA not after:            Thu 09 Jan 2025 18:03:46 +0000
asID:                     267575
IP address blocks:        167.249.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9d:11:17:3d:37:31:00:a9:a3:ff:92:61:64:47:25:c1:0a:49:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Validity
            Not Before: Jan 11 17:58:46 2024 GMT
            Not After : Jan  9 18:03:46 2025 GMT
        Subject: CN=B9E86659543242B3AECA79F9CBD4B1B2A6BD98A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:29:93:69:13:49:99:e8:b1:ff:9f:d1:12:
                    2e:2a:8e:9c:73:8a:4c:9d:aa:fb:b9:ff:9c:6e:67:
                    76:cb:ce:88:ac:75:2a:49:c1:58:4f:59:41:9e:78:
                    0c:9d:fd:8e:cc:84:22:33:47:7b:2e:c0:3d:8e:c1:
                    ab:c7:3f:3f:6f:9c:8f:ea:a4:f0:45:c3:42:34:8a:
                    89:3c:52:27:2e:6b:42:cb:b4:dd:14:08:42:32:1b:
                    fb:c6:99:7f:1e:4a:6e:d6:3c:69:34:e9:81:b3:51:
                    f1:b5:a0:15:6c:62:21:fe:3c:4b:35:cf:24:e7:13:
                    26:f6:c6:34:19:cf:26:f7:a9:74:84:85:1c:70:9b:
                    0d:04:53:97:52:5f:63:57:0a:e3:71:84:b9:7a:44:
                    e4:cb:f6:b6:24:07:9a:d1:34:4f:4d:6f:67:b2:e1:
                    1e:76:ad:ac:8a:76:ba:88:87:c3:d7:b1:96:5a:83:
                    c2:98:e2:f3:ea:55:af:4f:9a:be:5b:90:39:54:22:
                    c9:02:89:ed:40:82:8d:70:13:81:02:bc:bb:06:3e:
                    bf:15:20:ee:2c:8d:97:f2:e0:b8:07:8b:22:5f:55:
                    7b:28:d7:5e:5d:0c:c2:eb:29:94:0c:8d:a0:1d:c1:
                    df:b2:de:61:7b:72:b3:e2:71:8c:59:93:02:19:9b:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E8:66:59:54:32:42:B3:AE:CA:79:F9:CB:D4:B1:B2:A6:BD:98:A7
            X509v3 Authority Key Identifier:
                keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136302e302f32332d3233203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:4e:b8:6c:58:3d:0e:64:00:8b:14:33:a2:99:8e:2a:a0:8a:
         24:1b:f7:45:71:bb:28:18:92:64:19:35:87:82:ef:4e:47:73:
         eb:a0:a6:80:b3:5b:34:69:e0:42:01:e6:3e:14:f8:7b:87:7f:
         de:ea:c4:dc:65:cf:23:c6:35:b3:8b:02:94:13:8d:3c:cc:8b:
         96:21:fd:dc:f1:4c:75:f8:c2:b3:fc:4e:df:ab:df:06:2c:28:
         28:c5:5e:e6:bf:79:d9:d1:cf:d1:18:55:9b:cb:a8:08:66:a9:
         88:4d:5f:79:9d:f1:18:c2:2a:cc:a4:74:90:18:a1:65:18:e3:
         32:17:48:af:c8:9d:de:74:bc:34:b5:fa:84:ef:79:0b:c3:8e:
         33:25:2f:54:5c:b0:68:76:e9:62:ae:2c:40:fb:fc:c4:99:bc:
         43:87:58:12:df:08:af:29:68:75:69:07:63:7b:90:38:a7:a1:
         6d:65:16:62:06:16:47:51:a1:47:13:38:a8:7e:28:92:3c:11:
         09:a9:68:33:07:a9:a4:91:53:a5:a5:b3:7b:b2:b0:1a:a2:d8:
         b4:53:90:9b:34:a2:64:45:7c:3b:26:ba:59:7f:bd:7f:43:f3:
         69:57:2e:f1:c7:48:1f:fd:96:80:9b:b7:95:27:83:ed:40:bb:
         09:71:ef:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org