Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136322e302f32332d3233203d3e20323637353735.roa
File:                     3136372e3234392e3136322e302f32332d3233203d3e20323637353735.roa (raw, json)
Hash identifier:          LlonHIRi7wK9GbGR9KyRpby0hUwlSyQYmBbgH6okJ28=
Subject key identifier:   78:40:1F:B0:68:8F:A9:72:5E:A6:9A:75:85:4F:8E:2A:D7:BF:A6:8E
Certificate issuer:       /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial:       24A088CCD1FF23DF85D9D5670825D7ABC0EA674C
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136322e302f32332d3233203d3e20323637353735.roa
Signing time:             Thu 11 Jan 2024 18:03:45 +0000
ROA not before:           Thu 11 Jan 2024 17:58:45 +0000
ROA not after:            Thu 09 Jan 2025 18:03:45 +0000
asID:                     267575
IP address blocks:        167.249.162.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a0:88:cc:d1:ff:23:df:85:d9:d5:67:08:25:d7:ab:c0:ea:67:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Validity
            Not Before: Jan 11 17:58:45 2024 GMT
            Not After : Jan  9 18:03:45 2025 GMT
        Subject: CN=78401FB0688FA9725EA69A75854F8E2AD7BFA68E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:27:9b:78:87:11:5d:54:fc:1f:04:c4:15:
                    cf:fb:4b:f0:81:f8:b8:86:24:44:d7:93:05:80:e3:
                    82:f3:6e:bc:83:b3:58:e6:5d:75:b6:80:d4:d9:67:
                    7f:58:ca:47:51:51:55:60:fe:48:e6:4f:45:dc:29:
                    f7:ee:f8:c7:df:81:74:d3:2e:e1:7e:da:04:b0:db:
                    45:92:0b:63:66:ad:7c:b7:96:b9:6b:fd:5e:e3:15:
                    0f:2a:7b:c1:e5:83:d5:8e:7d:84:c9:ef:1a:25:ad:
                    f6:77:3b:18:8a:09:bc:2c:dc:a8:30:8b:04:f4:26:
                    f6:5d:8d:cc:7e:3b:27:5c:b2:0f:46:53:d0:66:59:
                    20:76:69:8a:6c:84:58:42:47:88:11:fe:b7:0d:51:
                    39:f4:84:d7:1c:f7:cd:64:e9:e4:e7:ab:86:b3:77:
                    17:d6:5b:bd:21:02:21:ef:4a:cc:d2:5f:2d:34:cc:
                    f3:2c:aa:03:53:7b:6a:6e:10:c5:15:6f:e5:a3:5e:
                    6e:03:dc:a5:1e:8f:ff:15:c8:ef:a2:3b:2e:f2:82:
                    87:c4:81:41:26:49:8e:d6:5d:aa:a9:a7:78:ef:4b:
                    c2:7f:12:05:14:ab:b3:09:21:cb:ba:57:27:86:a4:
                    a4:6e:52:d6:c7:9e:4b:14:5c:1f:bf:85:af:54:08:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:40:1F:B0:68:8F:A9:72:5E:A6:9A:75:85:4F:8E:2A:D7:BF:A6:8E
            X509v3 Authority Key Identifier:
                keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136322e302f32332d3233203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:fa:4f:a6:7c:ef:b7:67:f5:ab:b6:c8:ac:28:ff:84:be:b2:
         db:0e:64:3e:a4:84:60:01:18:8d:9c:a1:c1:e1:67:bb:0d:96:
         97:c7:39:e3:16:1a:bd:e1:93:34:5b:db:f5:68:90:f2:f2:c0:
         1c:6d:d3:ef:b5:2e:39:1e:6d:b1:15:ee:f6:ed:cc:94:2a:c9:
         3b:5f:40:2e:d8:96:59:40:d9:23:a4:d3:0c:72:4f:83:88:10:
         3d:86:58:00:24:d4:8e:9b:97:5e:da:47:7d:ec:42:69:b3:7f:
         39:47:9c:e2:25:6f:3c:ac:98:29:4d:63:7e:b8:97:8d:6f:ed:
         42:8a:e3:a9:ed:c3:c7:86:0a:09:c7:4c:41:bd:37:4f:9a:7f:
         e9:c1:11:ec:df:5d:eb:74:1b:fd:a7:0f:31:e5:a1:b1:8e:b9:
         30:39:09:d1:9d:13:82:dc:de:30:73:47:98:d8:23:98:1d:78:
         46:dc:fe:08:4f:8e:2b:0c:48:33:1f:9a:08:95:68:46:e4:1b:
         f1:c3:33:11:ac:8f:6d:1b:31:c5:04:17:dd:f2:08:0f:52:57:
         5b:67:6b:46:72:6b:5a:24:d5:84:7a:40:bd:64:c3:51:8d:fd:
         04:ef:61:6a:e3:42:40:aa:38:bd:ea:11:03:b8:c2:d4:5d:32:
         2d:9f:99:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org