Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa
File:                     3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          HASu/veJvxaaNcIMFs1+HdKp7DhkpQg+Q66kGTPvY5Q=
Subject key identifier:   67:D5:C2:89:24:2D:CA:58:5E:04:52:DB:46:64:EF:AA:11:34:5F:F2
Certificate issuer:       /CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
Certificate serial:       6D9D7B1F18CA247CB916CBF9E4D54917A01588F3
Authority key identifier: 82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa
Signing time:             Thu 04 Apr 2024 07:35:03 +0000
ROA not before:           Thu 04 Apr 2024 07:30:03 +0000
ROA not after:            Thu 03 Apr 2025 07:35:03 +0000
asID:                     262535
IP address blocks:        167.249.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9d:7b:1f:18:ca:24:7c:b9:16:cb:f9:e4:d5:49:17:a0:15:88:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
        Validity
            Not Before: Apr  4 07:30:03 2024 GMT
            Not After : Apr  3 07:35:03 2025 GMT
        Subject: CN=67D5C289242DCA585E0452DB4664EFAA11345FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:41:0d:c0:a7:c9:27:89:8d:7e:e0:4f:2d:
                    f3:5a:9c:e2:61:e1:ef:b6:08:5e:ec:69:56:47:c2:
                    ce:2d:0c:e1:eb:ba:80:bf:c1:d3:70:e2:70:e8:61:
                    8b:59:f6:7d:a7:7c:43:4d:fc:90:5b:1e:a6:18:e3:
                    53:07:f5:ad:a0:2d:57:1a:ff:f6:55:ad:85:5c:95:
                    2b:e9:d1:6f:03:24:6e:c7:b5:2a:60:42:16:4d:92:
                    ae:f6:ec:71:4f:44:50:a4:d8:8a:7b:be:d5:8a:52:
                    eb:c7:58:a4:a5:05:3a:4e:d0:5f:66:f7:09:87:e1:
                    cc:f1:d3:00:42:34:1e:ba:af:ae:a2:a5:31:1e:ee:
                    2f:27:99:c4:89:dd:75:3a:e2:01:9b:1b:cb:7c:cc:
                    4c:b8:82:4c:8b:b9:c1:dc:2c:49:61:1a:ee:96:5b:
                    7e:66:07:45:49:b4:cd:9d:a6:0b:59:da:80:f7:dc:
                    7d:44:4e:d0:e1:d4:74:6e:89:c0:94:86:ba:89:78:
                    c9:ed:b8:fa:59:82:81:5e:55:77:37:08:c4:3c:24:
                    4d:d1:f9:58:e5:23:1d:35:f0:69:a7:21:ec:81:99:
                    46:3e:11:57:43:e5:6c:e5:a5:9c:60:d5:ed:6f:b6:
                    4d:d3:ca:23:ac:70:a0:9f:6e:b1:b3:62:d4:d6:12:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D5:C2:89:24:2D:CA:58:5E:04:52:DB:46:64:EF:AA:11:34:5F:F2
            X509v3 Authority Key Identifier:
                keyid:82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35362e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b0:e2:cd:e0:7a:9c:c0:f6:d1:d4:7a:19:13:a1:3a:38:04:
         b8:7c:13:31:2c:b5:1f:87:66:cc:51:1d:7a:79:be:b5:93:1b:
         db:2a:3a:1a:34:29:89:e5:7a:c9:2c:64:dc:8d:70:5e:20:ef:
         3b:7e:21:7b:d6:08:95:f6:01:51:5d:9e:08:21:e1:24:ab:bc:
         b6:82:b3:ab:7f:74:97:93:b7:f8:a6:db:82:c7:55:99:35:56:
         f2:b9:43:c3:a5:cc:fa:94:e5:fc:03:39:9d:1f:1d:a0:3d:37:
         da:10:be:e9:37:b6:19:4d:6d:49:17:00:dc:67:12:eb:47:61:
         1b:e2:db:97:16:80:07:cd:00:5b:f3:1c:3b:3b:e9:7b:0f:b0:
         cb:70:9d:47:cc:1c:fe:04:b6:76:13:f6:d9:e4:a9:4a:98:fa:
         74:b8:2b:e2:d2:aa:2b:a2:64:0b:64:76:e3:10:dd:56:32:e8:
         ae:a4:1b:2b:ae:d8:a4:dd:b5:1b:f7:ac:65:74:f4:6b:ec:d8:
         5c:cb:6b:1f:94:b7:ce:77:f4:16:3c:59:d3:ab:25:09:f2:b1:
         74:74:80:ea:85:85:9b:db:3e:9c:af:6d:2b:f9:e6:4a:db:66:
         18:28:a5:6f:28:b1:31:58:84:34:d5:a4:67:ad:41:ee:2f:f8:
         94:83:94:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbZ17HxjKJHy5Fsv55NVJF6AViPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI3MDE2QUEyNTNBNzYxQTc1M0RBQzE3RDFDNzhGNUE3
REJEMkZFOTAeFw0yNDA0MDQwNzMwMDNaFw0yNTA0MDMwNzM1MDNaMDMxMTAvBgNV
BAMTKDY3RDVDMjg5MjQyRENBNTg1RTA0NTJEQjQ2NjRFRkFBMTEzNDVGRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZ0ENwKfJJ4mNfuBPLfNanOJh
4e+2CF7saVZHws4tDOHruoC/wdNw4nDoYYtZ9n2nfENN/JBbHqYY41MH9a2gLVca
//ZVrYVclSvp0W8DJG7HtSpgQhZNkq727HFPRFCk2Ip7vtWKUuvHWKSlBTpO0F9m
9wmH4czx0wBCNB66r66ipTEe7i8nmcSJ3XU64gGbG8t8zEy4gkyLucHcLElhGu6W
W35mB0VJtM2dpgtZ2oD33H1ETtDh1HRuicCUhrqJeMntuPpZgoFeVXc3CMQ8JE3R
+VjlIx018GmnIeyBmUY+EVdD5WzlpZxg1e1vtk3TyiOscKCfbrGzYtTWEj4LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ9XCiSQtylheBFLbRmTvqhE0X/IwHwYDVR0j
BBgwFoAUgnAWqiU6dhp1PawX0cePWn29L+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMS84MjcwMTZBQTI1M0E3NjFBNzUzREFDMTdEMUM3OEY1QTdEQkQyRkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyNzAxNkFBMjUzQTc2MUE3
NTNEQUMxN0QxQzc4RjVBN0RCRDJGRTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzEv
MzEzNjM3MmUzMjM0MzkyZTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACn+TgwDQYJKoZIhvcNAQELBQADggEBAHOw4s3g
epzA9tHUehkToTo4BLh8EzEstR+HZsxRHXp5vrWTG9sqOho0KYnlesksZNyNcF4g
7zt+IXvWCJX2AVFdnggh4SSrvLaCs6t/dJeTt/im24LHVZk1VvK5Q8OlzPqU5fwD
OZ0fHaA9N9oQvuk3thlNbUkXANxnEutHYRvi25cWgAfNAFvzHDs76XsPsMtwnUfM
HP4EtnYT9tnkqUqY+nS4K+LSqiuiZAtkduMQ3VYy6K6kGyuu2KTdtRv3rGV09Gvs
2FzLax+Ut8539BY8WdOrJQnysXR0gOqFhZvbPpyvbSv55krbZhgopW8osTFYhDTV
pGetQe4v+JSDlDU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org