Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa
File:                     3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa (raw, json)
Hash identifier:          kDji0Pk1rsIYDnrkGnziRi2gG/zHM0buLIqjS/c3SWY=
Subject key identifier:   EE:B9:10:20:8B:A2:35:4C:61:5B:A3:7F:61:0A:C7:FF:10:7A:88:00
Certificate issuer:       /CN=3C4C3C3027D89C77D47071FA8A930915BA89BC2C
Certificate serial:       3DAA41A0EC3B6B0EE62E507EAA473B82E194B396
Authority key identifier: 3C:4C:3C:30:27:D8:9C:77:D4:70:71:FA:8A:93:09:15:BA:89:BC:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4C3C3027D89C77D47071FA8A930915BA89BC2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa
Signing time:             Fri 22 Sep 2023 03:00:10 +0000
ROA not before:           Fri 22 Sep 2023 02:55:10 +0000
ROA not after:            Fri 20 Sep 2024 03:00:10 +0000
asID:                     263098
IP address blocks:        167.249.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:aa:41:a0:ec:3b:6b:0e:e6:2e:50:7e:aa:47:3b:82:e1:94:b3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C4C3C3027D89C77D47071FA8A930915BA89BC2C
        Validity
            Not Before: Sep 22 02:55:10 2023 GMT
            Not After : Sep 20 03:00:10 2024 GMT
        Subject: CN=EEB910208BA2354C615BA37F610AC7FF107A8800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:4e:50:dc:49:44:c1:15:7d:c2:b0:31:98:
                    19:7d:1e:11:2a:38:4e:a4:55:fe:29:ef:c3:7f:84:
                    19:a9:8d:fa:04:05:a5:9a:d7:11:c7:6a:b0:b7:ff:
                    13:b5:f9:48:67:3a:ed:d1:71:2a:32:a0:62:35:77:
                    ae:73:0f:41:89:df:96:1a:de:45:44:04:4f:9b:9e:
                    8d:2a:db:47:aa:d3:8b:f6:92:e5:e5:d7:87:69:88:
                    b0:92:29:cb:e3:c3:1e:5d:3d:b5:8d:69:13:53:50:
                    44:87:b5:38:4b:8f:93:53:6b:44:07:1e:52:02:f0:
                    82:84:51:8e:8c:53:e3:58:95:a3:04:fc:f2:f6:52:
                    ea:ca:a9:76:00:e7:bf:fa:61:da:f5:02:62:58:85:
                    cf:38:3f:a4:b1:90:7d:eb:cf:bd:63:75:56:bf:2c:
                    ed:e2:47:33:7b:ac:cf:9b:8a:e5:a0:34:72:38:86:
                    f7:a0:82:97:cf:42:45:0f:25:78:ef:ed:51:d3:ca:
                    2f:e3:3c:2a:f9:7c:e4:c3:91:92:9d:d0:e8:a7:92:
                    8d:b1:4c:5b:68:de:ad:3e:ef:3b:ac:85:32:17:da:
                    5d:05:c9:52:92:5c:96:69:60:19:d1:75:76:73:4f:
                    bf:d2:6b:15:5b:af:8f:0a:28:38:f9:32:27:c5:6d:
                    12:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B9:10:20:8B:A2:35:4C:61:5B:A3:7F:61:0A:C7:FF:10:7A:88:00
            X509v3 Authority Key Identifier:
                keyid:3C:4C:3C:30:27:D8:9C:77:D4:70:71:FA:8A:93:09:15:BA:89:BC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3C4C3C3027D89C77D47071FA8A930915BA89BC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4C3C3027D89C77D47071FA8A930915BA89BC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:84:c7:b7:fd:49:5a:f9:bc:45:b6:78:08:7c:de:cd:7d:58:
         70:ac:26:0c:d5:58:d6:3f:2f:ae:8d:9b:8b:0e:10:0f:ba:76:
         a4:b9:0b:ae:8e:3f:52:67:1d:6f:1e:96:b7:fe:ac:44:29:c8:
         f5:9f:3a:ee:2d:79:7f:32:f6:8c:7a:0e:23:ec:65:12:5c:62:
         6e:f0:f8:c2:d4:2a:79:81:a9:93:95:4a:02:e7:8e:21:db:fb:
         84:53:00:2a:51:1e:2b:fc:d7:78:cc:fd:eb:8f:8b:af:be:9a:
         54:af:27:19:7f:1a:b0:b3:24:9a:99:cd:98:1f:79:30:83:fb:
         0d:6d:f0:1e:8c:bf:4b:04:08:2a:37:20:ba:d8:8d:03:9a:65:
         46:94:86:83:09:97:6f:60:a2:2a:d0:47:15:20:86:cd:e1:d6:
         ef:2e:49:fd:fa:66:a3:15:c7:5e:fa:b2:10:11:90:8c:59:fb:
         f6:ce:04:43:37:20:ae:77:fb:a6:f8:01:70:34:9b:6f:63:d8:
         64:da:f8:58:cb:8e:3d:33:c4:bf:3a:47:67:5f:5c:4e:4b:32:
         ed:aa:6d:b2:f0:3f:25:af:26:d4:ce:5c:2c:ab:7f:5d:09:28:
         dc:c9:6a:f5:ef:87:fa:8e:12:5a:dc:58:c8:60:d4:79:ba:d8:
         df:a2:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org