Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32322d3332203d3e20323632353335.roa
File:                     3136372e3234392e35362e302f32322d3332203d3e20323632353335.roa (raw, json)
Hash identifier:          N7KP0xwXr+0VcGKRn1DK6gGpFD3aCRBT6GSUBofcrH0=
Subject key identifier:   32:F2:D8:BF:1F:F5:6C:9B:F8:0F:6B:9A:9D:EB:96:2A:8A:95:4B:6A
Certificate issuer:       /CN=2AA1791D91BFFF6ECDE295F6F522FB764A332153
Certificate serial:       5363B45845F87224D33187ABCC0C7C912D962C98
Authority key identifier: 2A:A1:79:1D:91:BF:FF:6E:CD:E2:95:F6:F5:22:FB:76:4A:33:21:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AA1791D91BFFF6ECDE295F6F522FB764A332153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32322d3332203d3e20323632353335.roa
Signing time:             Mon 13 Mar 2023 15:30:50 +0000
ROA not before:           Mon 13 Mar 2023 15:25:50 +0000
ROA not after:            Mon 11 Mar 2024 15:30:50 +0000
asID:                     262535
IP address blocks:        167.249.56.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:63:b4:58:45:f8:72:24:d3:31:87:ab:cc:0c:7c:91:2d:96:2c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA1791D91BFFF6ECDE295F6F522FB764A332153
        Validity
            Not Before: Mar 13 15:25:50 2023 GMT
            Not After : Mar 11 15:30:50 2024 GMT
        Subject: CN=32F2D8BF1FF56C9BF80F6B9A9DEB962A8A954B6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:81:d3:47:c7:fb:90:02:40:54:e4:f2:22:0f:
                    31:e7:ce:94:c9:c2:4e:c3:b7:61:db:a5:55:86:3b:
                    13:4f:48:eb:d5:e0:b1:76:9e:20:65:5e:6e:0d:88:
                    80:2f:f1:82:5a:40:4a:f9:b1:47:32:20:d3:98:60:
                    7d:8f:66:c2:90:2a:fa:cf:37:36:f0:72:78:0d:26:
                    bd:67:a6:ef:ad:c8:88:3f:34:bb:f3:62:66:d6:78:
                    b0:f7:6b:de:1a:7f:0b:a2:99:bc:5f:fd:df:8d:18:
                    58:fd:2b:84:26:b7:9f:da:73:25:51:3c:45:85:80:
                    ca:ac:e3:4f:db:1d:00:5e:f0:88:2e:fb:c2:f3:56:
                    b6:26:e7:df:76:df:3e:3b:e1:f6:bb:e9:0b:22:6b:
                    f2:34:b9:ca:b9:15:e4:50:f7:7f:ab:27:66:c3:e3:
                    39:1a:c5:73:1a:88:52:eb:95:72:77:8e:79:ba:35:
                    04:4c:23:cb:30:a3:c4:85:5f:e0:1f:95:19:a8:e3:
                    a6:06:dd:38:a4:21:a1:40:09:17:0a:66:20:88:ea:
                    a8:36:ad:d9:34:fa:99:fe:25:4c:f5:32:14:48:b0:
                    f8:80:c9:71:c1:df:4e:84:6a:c6:ca:1b:57:39:a0:
                    c6:d2:d4:d4:39:4c:24:dc:b1:6b:6d:a8:94:8f:87:
                    16:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F2:D8:BF:1F:F5:6C:9B:F8:0F:6B:9A:9D:EB:96:2A:8A:95:4B:6A
            X509v3 Authority Key Identifier:
                keyid:2A:A1:79:1D:91:BF:FF:6E:CD:E2:95:F6:F5:22:FB:76:4A:33:21:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/2AA1791D91BFFF6ECDE295F6F522FB764A332153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AA1791D91BFFF6ECDE295F6F522FB764A332153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35362e302f32322d3332203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:28:3e:1f:05:bb:5d:06:b6:07:bc:db:d5:38:3e:cf:75:
         09:d0:b9:de:c8:10:b9:76:81:e2:72:77:c7:51:73:2b:1f:0c:
         c0:ea:24:03:1a:44:a4:66:44:5e:9c:f3:55:31:51:ea:36:38:
         02:f6:78:98:49:45:7e:c8:10:52:1c:c0:e6:60:0c:cd:3b:00:
         ad:a0:9b:06:30:4d:3c:43:92:db:4a:cc:6e:cf:7c:57:62:09:
         3a:0f:14:99:c6:ea:4d:b3:77:65:95:d4:5a:7b:6d:38:c8:ef:
         1f:87:a0:56:e4:1f:15:49:62:1a:60:64:a2:cb:88:f2:57:f2:
         f1:c8:15:48:07:1a:ab:7c:4d:55:cc:47:51:5d:7f:e6:76:7d:
         f8:b5:9f:81:9d:a4:48:32:0d:00:37:72:23:39:0d:e8:50:81:
         91:fa:46:84:ed:6d:fe:e7:03:1f:40:fb:dd:31:74:67:83:46:
         62:dd:bf:ff:8a:f3:ba:f2:86:fd:59:5c:5d:a5:e7:68:f7:fa:
         47:aa:a0:dd:98:5f:92:f2:5f:0c:47:4e:99:ab:ad:0e:8a:9a:
         5c:b3:94:2f:75:67:9f:a9:36:19:e5:70:8b:fd:17:01:e1:6f:
         52:c1:21:be:0b:b2:1d:e7:f5:c4:86:f6:48:df:5e:e4:17:7d:
         50:30:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org