Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35362e302f32322d3232203d3e20323632353335.roa
File:                     3136372e3234392e35362e302f32322d3232203d3e20323632353335.roa (raw, json)
Hash identifier:          e8iJZC8tymcuZe0Ue0aWxl4y6b2dq/8ycito8U1jNqg=
Subject key identifier:   D7:F9:57:0D:2B:43:F9:8F:FC:9F:45:09:DC:EE:81:AB:FD:15:99:EC
Certificate issuer:       /CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
Certificate serial:       1D2C77B7B3307C00BD9F13AE23AE87B74FBBF398
Authority key identifier: 82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35362e302f32322d3232203d3e20323632353335.roa
Signing time:             Thu 04 Apr 2024 07:35:01 +0000
ROA not before:           Thu 04 Apr 2024 07:30:01 +0000
ROA not after:            Thu 03 Apr 2025 07:35:01 +0000
asID:                     262535
IP address blocks:        167.249.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2c:77:b7:b3:30:7c:00:bd:9f:13:ae:23:ae:87:b7:4f:bb:f3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
        Validity
            Not Before: Apr  4 07:30:01 2024 GMT
            Not After : Apr  3 07:35:01 2025 GMT
        Subject: CN=D7F9570D2B43F98FFC9F4509DCEE81ABFD1599EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:12:7e:bb:5b:ca:a0:4f:0a:fd:7b:9f:e1:76:
                    a6:b0:2f:e6:00:72:fc:23:40:8e:3d:ff:77:87:55:
                    3b:03:1f:71:2f:83:c1:04:de:88:94:ad:12:eb:54:
                    3d:68:30:e2:a5:f9:f5:25:67:7f:cd:73:06:10:30:
                    44:fc:84:da:ab:6b:96:f7:26:42:aa:20:43:51:af:
                    0d:33:ca:09:c5:2b:7b:b8:ce:0f:f1:e6:b5:d0:72:
                    8d:34:5e:24:03:5b:56:80:89:12:ca:ba:6b:ec:2f:
                    66:c3:87:14:ee:a7:d6:77:91:41:c3:0a:b0:b1:27:
                    27:e2:02:f0:5e:1f:8f:94:e4:88:4e:9d:fb:80:09:
                    d2:70:fa:54:14:ac:ca:02:26:8e:44:1e:61:2f:31:
                    09:4c:1d:17:e9:e2:9a:cd:09:24:56:63:9f:81:d9:
                    78:55:8e:e4:db:14:a2:08:c3:9a:75:9a:d5:fc:01:
                    2a:f9:ad:72:28:04:c2:8b:49:74:2c:b9:3f:26:7c:
                    45:ae:fd:7b:ae:28:c4:7a:6c:86:a2:f3:4c:04:af:
                    10:81:49:05:3a:0d:da:ed:4e:20:82:ce:15:9b:04:
                    42:69:17:40:ea:a5:04:f2:2f:71:4f:46:b7:3c:d3:
                    d9:be:31:f4:01:6c:55:f2:22:47:a8:74:27:03:f5:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F9:57:0D:2B:43:F9:8F:FC:9F:45:09:DC:EE:81:AB:FD:15:99:EC
            X509v3 Authority Key Identifier:
                keyid:82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35362e302f32322d3232203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:99:3d:36:20:95:dc:05:6c:ab:74:86:29:6d:f1:20:c1:61:
         8c:fd:cb:3c:62:de:09:4e:a2:4b:69:ec:b6:b0:37:2b:69:cb:
         ad:e6:7e:7b:70:03:2f:0b:63:37:e1:d1:c2:d5:cc:f6:69:ac:
         44:c0:0f:e7:c2:8f:09:83:e3:8c:f3:bd:f3:28:aa:0b:94:c2:
         db:38:db:f3:ce:71:b0:62:66:d2:9f:ed:ca:0d:b3:f7:a6:7f:
         4f:78:3e:c8:f3:14:6e:82:14:44:fc:d7:8f:20:cf:68:34:e0:
         f4:1b:e6:22:54:f4:c3:1d:77:5e:f6:3c:e4:94:24:c8:31:df:
         a8:fa:28:53:e9:00:f2:53:a1:fd:3c:0a:2f:c3:f1:ad:a6:c9:
         a1:61:42:cd:97:76:b6:41:da:6e:08:a3:cd:5c:73:db:b9:91:
         1b:0b:a4:57:ac:a9:0c:90:c6:57:59:a3:56:9a:29:39:88:84:
         f3:68:09:98:85:55:9d:8c:23:6c:9d:98:5e:63:5c:1f:99:74:
         1b:30:4a:9f:56:94:21:cb:fb:5d:64:17:65:8c:3d:d3:fc:bb:
         0d:ff:47:b5:c9:18:9d:32:4c:2a:4e:0c:62:d2:87:94:f2:7f:
         a2:b7:fe:96:85:e0:24:74:85:17:33:48:d9:10:f7:fa:43:da:
         28:49:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org