Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa
File:                     3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa (raw, json)
Hash identifier:          CRx0ejMsGaF4Brsdu4rSJpa35ZdHR8aII4XirvyaZJc=
Subject key identifier:   C0:C7:D4:D1:0E:BE:F0:BA:B4:70:E9:1C:91:44:8E:E9:4A:92:8D:1D
Certificate issuer:       /CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
Certificate serial:       68D004E22524EE8C5421F119626B5FEB26DFE3DF
Authority key identifier: E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa
Signing time:             Wed 18 Sep 2024 12:17:31 +0000
ROA not before:           Wed 18 Sep 2024 12:12:31 +0000
ROA not after:            Wed 17 Sep 2025 12:17:31 +0000
asID:                     267575
IP address blocks:        167.249.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d0:04:e2:25:24:ee:8c:54:21:f1:19:62:6b:5f:eb:26:df:e3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
        Validity
            Not Before: Sep 18 12:12:31 2024 GMT
            Not After : Sep 17 12:17:31 2025 GMT
        Subject: CN=C0C7D4D10EBEF0BAB470E91C91448EE94A928D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:bd:c6:5a:fd:12:30:7f:bc:e3:0a:0f:43:
                    8a:2e:6f:b4:e8:24:2e:e0:90:22:43:94:92:4c:d3:
                    d3:4a:0f:18:22:b5:5f:03:e0:8d:e9:80:4b:ea:94:
                    b6:3b:d6:55:44:0d:bb:2b:39:80:82:1a:ab:9f:8e:
                    4c:a5:f3:8f:10:41:24:b0:bd:ac:70:6c:82:03:df:
                    40:07:15:6a:bd:2d:af:33:4f:5d:92:97:cb:f5:44:
                    b4:16:06:2f:cb:fd:64:a7:a0:07:35:fe:10:62:94:
                    b9:c7:f1:00:38:74:b2:ca:eb:78:d3:07:96:af:bb:
                    6d:12:b7:a1:15:88:5c:50:1c:7a:8b:23:e1:79:24:
                    3d:44:d8:d7:83:b6:fb:dd:d7:3e:21:37:56:79:bf:
                    d5:1f:6b:11:ce:d7:7b:72:09:b2:be:69:0a:dc:98:
                    31:1b:2f:da:7b:d8:27:83:f1:00:a9:dc:c9:56:ad:
                    b1:c3:c4:f4:4b:b2:91:61:4f:19:36:90:7c:4c:09:
                    df:23:bf:98:d9:71:ad:bd:c5:dd:2f:11:f2:32:6c:
                    66:05:8a:09:64:fa:22:08:4e:04:25:33:5b:58:b8:
                    ea:a6:d8:0d:25:cc:a0:32:8e:f0:9e:49:b6:3b:bc:
                    27:d2:18:ad:43:17:1d:f9:05:49:2d:79:50:5f:ff:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C7:D4:D1:0E:BE:F0:BA:B4:70:E9:1C:91:44:8E:E9:4A:92:8D:1D
            X509v3 Authority Key Identifier:
                keyid:E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:7b:8c:ef:14:da:78:aa:82:25:7f:17:4e:af:68:57:b2:7d:
         5b:88:cc:b0:26:f1:55:84:13:27:27:ad:8c:0e:04:dd:fb:be:
         a4:63:e3:fe:3f:aa:26:a5:14:b3:07:c6:3a:83:17:56:72:34:
         57:6d:09:92:c0:e3:36:44:d7:9e:75:f4:99:d5:21:76:ed:e3:
         f5:30:35:20:03:26:c9:ac:66:f3:19:b5:c4:b2:40:c8:2e:a2:
         7f:bb:8c:a1:cc:fa:78:73:49:d4:27:d9:d6:91:17:25:e0:04:
         af:a7:25:38:3e:68:b5:09:2f:52:98:61:fe:56:d2:29:9b:70:
         2d:0f:11:30:98:d2:be:53:44:3d:a1:a3:63:55:c8:f7:4e:4a:
         b1:ec:a3:a7:3f:19:23:4f:f1:ef:f4:f6:82:e6:40:ad:e8:54:
         2c:e7:a6:82:4f:6e:7f:5a:7e:52:28:85:f3:69:26:31:5e:67:
         90:75:3d:ca:b2:84:c6:e4:46:f3:f1:1b:57:30:dc:e8:a6:9c:
         1d:c5:86:32:16:6f:a8:0c:9b:b7:cd:8a:f9:59:38:b5:20:bd:
         de:09:f0:a2:3a:ec:c9:5f:18:c0:43:fc:db:b0:4e:84:a2:ea:
         67:4b:54:9b:30:17:60:60:d7:13:e3:03:72:13:77:16:2f:99:
         f9:df:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:21 2025 by rpki-client