Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136312e302f32342d3234203d3e20323637353735.roa
File:                     3136372e3234392e3136312e302f32342d3234203d3e20323637353735.roa (raw, json)
Hash identifier:          5+Y9Qv/TkdAXtfDmkfR1fdom93YeUud/z2Cg95UHl/g=
Subject key identifier:   4C:0E:68:B5:CB:1F:8C:5F:59:A6:8C:9E:04:03:8B:A3:6F:27:68:FB
Certificate issuer:       /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial:       29D40C10F8622ACFEC4B53D4306E418D80D88DA2
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136312e302f32342d3234203d3e20323637353735.roa
Signing time:             Thu 11 Jan 2024 18:03:44 +0000
ROA not before:           Thu 11 Jan 2024 17:58:44 +0000
ROA not after:            Thu 09 Jan 2025 18:03:44 +0000
asID:                     267575
IP address blocks:        167.249.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d4:0c:10:f8:62:2a:cf:ec:4b:53:d4:30:6e:41:8d:80:d8:8d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Validity
            Not Before: Jan 11 17:58:44 2024 GMT
            Not After : Jan  9 18:03:44 2025 GMT
        Subject: CN=4C0E68B5CB1F8C5F59A68C9E04038BA36F2768FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:c4:2f:f3:d8:4e:ce:70:dd:06:cb:8a:ac:
                    51:11:ae:bb:94:30:b0:18:e0:87:61:76:32:69:c9:
                    4f:d0:b1:f8:8a:5b:92:b9:fc:b4:5d:ae:ad:9b:51:
                    5b:fb:0a:fb:4d:20:8e:71:e1:b4:2a:ce:f2:44:34:
                    16:4a:f6:9c:9b:87:3a:14:8d:38:dd:3f:ad:b2:3c:
                    ff:d9:c5:05:e1:f9:13:13:ed:ef:62:d6:d8:8a:e7:
                    78:76:14:54:e8:20:7a:83:82:56:85:dd:24:c1:3e:
                    b5:ba:4d:da:17:80:f8:f6:8c:22:4a:5f:c9:34:df:
                    01:d2:8c:36:99:76:df:c5:42:14:55:9d:51:53:3e:
                    0d:c1:b3:4d:ed:1d:af:d2:46:83:b8:22:4f:99:cf:
                    76:ef:6a:bc:8f:30:dc:0a:fc:0a:ba:64:09:43:55:
                    cc:cf:fd:df:db:6e:45:d9:07:0c:dd:d0:9e:2c:02:
                    7c:0a:8f:1f:2b:6d:84:dc:ed:6b:11:ef:6c:68:b7:
                    13:30:d0:14:1c:39:60:ba:ea:1a:c4:03:5c:76:fc:
                    da:9c:cd:2d:6d:99:d5:f2:60:43:c6:63:50:2a:43:
                    d9:e3:c4:a7:06:4e:b3:c9:91:5b:a2:68:95:75:25:
                    98:a0:67:a9:bf:a0:42:02:e5:89:a4:db:9a:d1:bf:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0E:68:B5:CB:1F:8C:5F:59:A6:8C:9E:04:03:8B:A3:6F:27:68:FB
            X509v3 Authority Key Identifier:
                keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136312e302f32342d3234203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d1:26:9c:52:e3:83:d1:9f:7e:dc:d8:0a:f2:63:a3:5a:9a:
         3d:ed:d3:b8:53:e7:c2:70:3d:6a:a6:06:54:76:41:11:53:92:
         ea:1c:58:07:48:b0:4d:3e:b2:cb:88:20:a5:2a:9f:b0:f6:fa:
         99:c4:c2:e1:1d:8a:80:1c:24:7b:23:1a:10:c8:eb:83:00:a2:
         14:4c:8f:fd:e5:6e:c4:b0:f5:d7:c4:35:ce:17:8c:c9:ee:9a:
         1f:42:b4:f3:bb:f3:f5:32:af:56:aa:02:db:fe:c4:29:ed:6e:
         bb:9b:6a:96:96:e8:5d:31:57:5d:23:8a:61:4b:1d:0c:51:f9:
         86:ee:8c:87:cc:12:71:8b:b6:9f:c7:01:24:11:2a:b4:fc:b4:
         a8:cb:a9:10:49:e3:be:df:0f:9e:e9:7c:ef:92:e3:7a:d9:eb:
         99:56:7f:59:51:c8:bc:f8:4a:54:b1:69:6c:82:5e:32:98:3f:
         0e:e6:3a:ab:bc:32:43:6d:af:28:9f:b6:b4:4c:ce:9e:01:82:
         7a:e2:ee:d3:87:f4:54:a2:a9:86:49:a1:63:1e:f5:57:a2:c7:
         30:05:4d:c0:81:c4:d0:ea:dd:20:8b:6b:d4:82:f4:18:0a:1f:
         29:d0:61:e0:26:87:18:db:b2:a1:20:f5:e5:b0:83:dd:40:52:
         18:77:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org