Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35362e302f32332d3233203d3e20323632353335.roa
File:                     3136372e3234392e35362e302f32332d3233203d3e20323632353335.roa (raw, json)
Hash identifier:          H+mi5kHXFoWN80pkRAO/sOJbW9nRMJqCXOljeN4nWjE=
Subject key identifier:   D2:39:16:3C:7C:BA:E3:25:30:78:1D:38:51:99:02:14:72:D4:32:8B
Certificate issuer:       /CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
Certificate serial:       2AEA82CECF5D3FEE01FD2566DDCC3F0CBAC84901
Authority key identifier: 82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35362e302f32332d3233203d3e20323632353335.roa
Signing time:             Thu 04 Apr 2024 07:35:00 +0000
ROA not before:           Thu 04 Apr 2024 07:30:00 +0000
ROA not after:            Thu 03 Apr 2025 07:35:00 +0000
asID:                     262535
IP address blocks:        167.249.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ea:82:ce:cf:5d:3f:ee:01:fd:25:66:dd:cc:3f:0c:ba:c8:49:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
        Validity
            Not Before: Apr  4 07:30:00 2024 GMT
            Not After : Apr  3 07:35:00 2025 GMT
        Subject: CN=D239163C7CBAE32530781D385199021472D4328B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:db:1c:36:17:da:b8:87:63:65:63:8f:d7:
                    80:fa:b9:d2:a3:86:4a:05:68:22:1a:f2:65:54:2d:
                    95:17:02:78:3c:aa:fe:67:83:6e:b5:1a:5e:61:15:
                    8e:78:7e:8b:50:3b:a1:cc:1a:f1:d2:f2:62:85:39:
                    6d:5a:cf:ed:58:ce:34:ff:e5:39:78:c4:2a:02:fb:
                    e3:04:4b:c8:5c:de:19:8d:e9:29:e5:58:07:38:26:
                    73:f1:a9:02:68:42:81:de:96:f0:83:18:2e:63:9d:
                    0b:9a:3e:05:1c:ee:5a:9f:a0:48:fc:31:7d:be:98:
                    46:17:a8:23:bd:eb:79:2f:61:26:6c:3a:0c:3b:b8:
                    6a:48:c2:67:1f:5c:e7:69:d0:7f:5f:fb:bc:f2:db:
                    84:c5:b1:bd:08:94:45:49:d9:30:d6:a0:02:ed:b9:
                    3a:82:37:28:71:7d:33:a0:37:4b:ec:4b:ac:cb:eb:
                    35:7c:dd:b3:d5:0f:ba:31:f7:e1:69:0d:7e:5d:53:
                    89:0c:70:ca:4a:dc:89:0d:c6:49:46:ab:f5:5a:3f:
                    19:92:f9:7b:97:91:03:9d:eb:26:5c:2e:98:60:7b:
                    bf:3c:69:b2:95:ce:89:74:80:30:c7:f9:01:97:20:
                    b8:4b:2c:34:3b:38:aa:93:3f:93:49:11:ab:0b:0a:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:16:3C:7C:BA:E3:25:30:78:1D:38:51:99:02:14:72:D4:32:8B
            X509v3 Authority Key Identifier:
                keyid:82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35362e302f32332d3233203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:e0:a1:7f:33:19:45:c2:c2:69:7a:0c:48:57:06:97:f5:
         7d:57:90:4c:df:d2:28:ed:a9:b5:ea:a3:89:2b:14:e6:d2:cd:
         44:91:c6:74:96:73:0a:be:f8:b4:63:55:57:64:8e:0d:99:0b:
         67:4f:67:8a:b6:db:b6:3c:57:ef:5a:c8:24:8b:50:6b:e5:49:
         ba:ba:7b:af:30:90:ce:21:3e:a1:5f:5f:3e:9f:3c:6f:9c:16:
         07:59:1b:0a:cf:de:02:d7:2f:02:af:09:a7:f6:4b:9e:ec:94:
         c2:84:a9:12:8f:da:ad:c8:79:9e:83:2d:c2:e2:71:1e:0a:b7:
         0f:cb:47:bd:d0:e7:3d:e2:9c:b7:02:94:d3:ae:f2:b8:d5:fe:
         c5:3d:9b:9e:90:f1:f5:64:f1:1a:63:b4:60:fc:33:28:18:06:
         9b:96:e9:9e:31:cb:ea:3c:a3:b0:7c:91:ef:11:5f:a3:a1:b9:
         6d:46:b3:e5:9c:90:79:e3:61:f0:ed:3b:03:7c:e4:15:2b:6c:
         ee:42:8f:55:3d:86:dc:3c:b5:91:54:82:6e:52:5d:9c:03:af:
         ae:0f:79:cb:93:70:a6:be:6b:37:62:9a:bc:ed:56:a0:93:42:
         56:32:cb:26:5a:cb:77:69:80:92:e4:e2:23:96:30:d0:58:20:
         8c:c4:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org