Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35382e302f32342d3234203d3e20323632353335.roa
File:                     3136372e3234392e35382e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          fpBSBJ4XZjeBae1Tf69A1gIGD7xFLJMCDogOezox6XE=
Subject key identifier:   75:BB:E9:BA:34:77:AD:0B:A4:1C:08:20:39:B9:10:29:BA:AB:67:A3
Certificate issuer:       /CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
Certificate serial:       231E7C1F3BCC11E3074F8FFBC980F38A08D41976
Authority key identifier: 0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35382e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 01 Mar 2023 11:40:33 +0000
ROA not before:           Wed 01 Mar 2023 11:35:33 +0000
ROA not after:            Wed 28 Feb 2024 11:40:33 +0000
asID:                     262535
IP address blocks:        167.249.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1e:7c:1f:3b:cc:11:e3:07:4f:8f:fb:c9:80:f3:8a:08:d4:19:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
        Validity
            Not Before: Mar  1 11:35:33 2023 GMT
            Not After : Feb 28 11:40:33 2024 GMT
        Subject: CN=75BBE9BA3477AD0BA41C082039B91029BAAB67A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cb:6f:2e:a7:90:91:63:29:6f:8b:82:fa:53:
                    1d:d4:3f:ab:4e:9d:a0:b2:14:bc:67:ed:93:96:f2:
                    91:55:ac:fe:fc:d6:ea:06:44:1c:12:08:10:4b:95:
                    ec:64:2f:4a:71:1b:ba:9f:95:df:88:8b:05:4c:5a:
                    b1:c6:b9:89:61:ce:bb:7c:ba:de:fc:c5:0f:f6:31:
                    dc:e9:62:f6:ef:9e:f5:98:c4:9b:a6:df:88:70:57:
                    4f:b2:1e:d2:32:74:bd:07:c1:b2:83:a0:14:4b:21:
                    cc:bc:08:08:5c:2d:ce:93:71:11:1f:f5:c2:ed:f8:
                    4f:c4:bd:6e:e1:74:17:f4:da:9a:49:9a:0c:26:45:
                    47:1f:08:cc:a3:fa:0b:8a:b1:f9:53:a9:7d:f7:dd:
                    9f:ab:03:12:4f:ca:a7:cf:18:5e:b5:b2:b6:81:23:
                    74:97:15:db:3f:3e:0f:c9:97:c6:8e:4a:b4:be:fb:
                    e4:0d:14:0d:db:37:1b:0a:9f:ca:30:f1:83:22:b4:
                    2f:0c:99:40:62:fe:ad:c0:f9:cf:f4:f3:60:c8:45:
                    05:9d:07:6c:60:04:d6:a3:d6:89:3f:e0:02:0e:d8:
                    ff:99:21:de:fb:b8:0b:a9:59:20:db:99:93:b2:83:
                    5c:bb:3a:ef:5f:5d:5b:a1:92:fb:1d:cf:be:07:6d:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BB:E9:BA:34:77:AD:0B:A4:1C:08:20:39:B9:10:29:BA:AB:67:A3
            X509v3 Authority Key Identifier:
                keyid:0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3136372e3234392e35382e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:3d:1c:14:83:56:37:d4:be:cc:4e:82:35:70:27:fd:5b:
         75:80:6a:8b:fa:83:b4:62:de:4d:8c:1a:b1:e5:84:82:37:b4:
         b7:05:31:8f:09:05:8f:4d:a5:1e:59:b7:1f:80:76:db:4e:50:
         12:c3:a6:c5:6c:61:ee:e6:00:ed:ac:2e:db:54:50:32:a2:76:
         34:2e:53:8d:a7:4d:a2:c7:d4:e5:11:50:41:30:c0:84:87:a9:
         87:ae:2f:b5:ec:2d:85:6e:fa:15:15:88:b0:a0:9b:a0:c8:2d:
         5a:47:ed:d8:bc:46:1d:37:5f:b8:36:47:a2:4a:24:97:0a:47:
         d1:d8:a9:32:4e:e5:be:b2:cd:ef:89:03:cb:30:98:16:3e:44:
         ea:62:70:37:a1:d4:05:bb:08:b9:58:5f:fc:4c:c9:94:a8:bb:
         f0:7b:ad:43:53:87:1a:25:64:97:7f:af:bb:3e:17:b6:16:e0:
         c5:a1:60:52:95:5f:03:a9:e7:a5:8c:aa:9f:e8:8d:8d:b6:34:
         d2:dc:12:9c:c6:6f:ba:d7:58:7e:a3:34:56:34:e5:b7:d1:9b:
         f9:19:9d:1d:c8:43:c3:8d:b5:bf:57:ed:cb:9a:18:4d:2e:46:
         56:a8:5f:2c:c8:3a:2c:4b:98:62:a9:2b:b2:f6:df:71:75:5b:
         48:fd:f9:9b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIx58HzvMEeMHT4/7yYDzigjUGXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5NDQ2Q0E3NzdFMENFQTI3QzMyRkIxNTE5OUJCQkJF
QjJCQkZGRTAeFw0yMzAzMDExMTM1MzNaFw0yNDAyMjgxMTQwMzNaMDMxMTAvBgNV
BAMTKDc1QkJFOUJBMzQ3N0FEMEJBNDFDMDgyMDM5QjkxMDI5QkFBQjY3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWy28up5CRYylvi4L6Ux3UP6tO
naCyFLxn7ZOW8pFVrP781uoGRBwSCBBLlexkL0pxG7qfld+IiwVMWrHGuYlhzrt8
ut78xQ/2MdzpYvbvnvWYxJum34hwV0+yHtIydL0HwbKDoBRLIcy8CAhcLc6TcREf
9cLt+E/EvW7hdBf02ppJmgwmRUcfCMyj+guKsflTqX333Z+rAxJPyqfPGF61sraB
I3SXFds/Pg/Jl8aOSrS+++QNFA3bNxsKn8ow8YMitC8MmUBi/q3A+c/082DIRQWd
B2xgBNaj1ok/4AIO2P+ZId77uAupWSDbmZOyg1y7Ou9fXVuhkvsdz74HbWAFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdbvpujR3rQukHAggObkQKbqrZ6MwHwYDVR0j
BBgwFoAUD5RGynd+DOonwy+xUZm7u+srv/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMC8wRjk0NDZDQTc3N0UwQ0VBMjdDMzJGQjE1MTk5QkJCQkVCMkJCRkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBGOTQ0NkNBNzc3RTBDRUEy
N0MzMkZCMTUxOTlCQkJCRUIyQkJGRkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzAv
MzEzNjM3MmUzMjM0MzkyZTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACn+TowDQYJKoZIhvcNAQELBQADggEBAHRNPRwU
g1Y31L7MToI1cCf9W3WAaov6g7Ri3k2MGrHlhII3tLcFMY8JBY9NpR5Ztx+AdttO
UBLDpsVsYe7mAO2sLttUUDKidjQuU42nTaLH1OURUEEwwISHqYeuL7XsLYVu+hUV
iLCgm6DILVpH7di8Rh03X7g2R6JKJJcKR9HYqTJO5b6yze+JA8swmBY+ROpicDeh
1AW7CLlYX/xMyZSou/B7rUNThxolZJd/r7s+F7YW4MWhYFKVXwOp56WMqp/ojY22
NNLcEpzGb7rXWH6jNFY05bfRm/kZnR3IQ8ONtb9X7cuaGE0uRlaoXyzIOixLmGKp
K7L233F1W0j9+Zs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org