Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa
File:                     3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa (raw, json)
Hash identifier:          8laM349jZ0FrUQZ44xAso2mDtbJanN5wKxRnlL2ODZg=
Subject key identifier:   7B:4A:C3:F9:AE:2B:BC:2A:31:E2:40:DA:6F:84:40:7E:80:95:49:F8
Certificate issuer:       /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial:       0EF4C918C6F5BF8CE74B7D8DA36ED742D55BBE92
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa
Signing time:             Thu 11 Jan 2024 18:03:47 +0000
ROA not before:           Thu 11 Jan 2024 17:58:47 +0000
ROA not after:            Thu 09 Jan 2025 18:03:47 +0000
asID:                     267575
IP address blocks:        167.249.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f4:c9:18:c6:f5:bf:8c:e7:4b:7d:8d:a3:6e:d7:42:d5:5b:be:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Validity
            Not Before: Jan 11 17:58:47 2024 GMT
            Not After : Jan  9 18:03:47 2025 GMT
        Subject: CN=7B4AC3F9AE2BBC2A31E240DA6F84407E809549F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:82:7a:1d:6c:ac:96:a5:fe:82:6a:47:a8:37:
                    f5:d0:d7:b6:7e:63:0d:91:2f:7f:af:d7:20:e3:a3:
                    20:04:e4:bd:0a:ac:56:89:2c:52:b3:f9:ca:02:de:
                    4c:99:0c:e6:21:3d:da:b3:c6:be:13:61:cc:49:11:
                    0d:7a:2d:b3:5e:c9:b3:4b:ba:da:ef:db:88:ba:05:
                    7e:b9:19:ff:08:10:f5:63:8e:75:33:3a:38:3e:7f:
                    98:73:ab:09:e2:c2:2e:64:66:04:0b:68:b2:2c:25:
                    eb:a3:4d:a2:51:cc:78:3c:93:ea:07:9c:f4:16:2c:
                    f2:90:13:e3:29:b5:d2:d4:1c:25:cf:11:79:0d:47:
                    6a:72:0f:1f:7d:51:f0:f7:a1:49:56:b5:81:af:46:
                    f9:05:35:cf:3c:8b:d5:67:81:c7:27:a6:0b:6f:f2:
                    ed:17:e2:1e:8e:af:22:f0:fe:25:98:b2:22:93:c7:
                    44:9d:36:f8:55:98:84:55:b0:44:b5:61:1b:ac:09:
                    93:4f:f8:76:72:ef:15:92:fb:62:b2:d1:a8:9a:6c:
                    47:ff:e9:f4:bf:e5:e2:fa:77:82:08:41:0e:e5:c6:
                    36:0a:9e:03:11:8d:26:72:fd:aa:db:0d:4c:f6:ab:
                    62:c6:ed:b3:f6:3e:78:9f:c5:77:5e:e1:3c:1f:bc:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4A:C3:F9:AE:2B:BC:2A:31:E2:40:DA:6F:84:40:7E:80:95:49:F8
            X509v3 Authority Key Identifier:
                keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136332e302f32342d3234203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:af:14:e3:b8:74:c4:9f:de:cc:97:65:a2:bd:ba:6b:ad:16:
         4e:87:80:23:f9:c1:7d:35:3a:e1:3e:26:20:d1:17:f4:06:fe:
         5e:fa:5a:a8:6b:c1:bd:f5:0d:47:6a:20:b8:95:33:f4:84:83:
         42:dd:ca:69:82:f4:65:08:f5:40:b2:8b:53:60:6f:40:fa:ba:
         22:5c:7f:77:48:50:62:c2:2d:50:44:b5:9c:9f:dc:84:3d:57:
         3c:5b:3a:61:7f:56:6b:d6:e0:42:72:e5:20:c2:cd:1a:a5:47:
         35:ca:c5:f4:db:73:38:b6:a9:41:93:4d:99:c6:56:02:17:c8:
         a9:16:86:be:ab:4e:84:69:de:20:18:9b:a7:95:ad:58:ed:a4:
         a0:a1:a6:d1:dd:70:99:de:f2:da:c8:f1:40:8e:18:3e:2b:1d:
         80:04:4e:0d:9e:5e:df:e5:87:ef:75:b2:29:e7:8c:5b:5e:e8:
         bf:a8:57:bb:7f:f4:f1:da:21:b4:c4:b0:87:1b:0c:22:4a:bd:
         60:38:9d:c7:d7:7e:25:fa:51:3c:a9:ba:85:fc:45:26:7b:26:
         f9:f3:cc:39:7e:c1:0b:b5:96:7a:74:18:f1:c4:7a:85:76:ad:
         6f:82:8c:1a:3e:32:d6:c7:1c:bf:b2:cf:84:b0:25:a9:92:91:
         f2:e1:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org