Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35392e302f32342d3234203d3e20323632353335.roa
File:                     3136372e3234392e35392e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          SUor322GhD33osZGKZYQtYq75YSMpR5L+mnaE7zcYmw=
Subject key identifier:   23:9B:7F:CC:B9:AE:47:5E:96:10:E1:19:37:7C:51:0E:40:60:86:1B
Certificate issuer:       /CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
Certificate serial:       3B7D6753306C8D20D3B1B7C977BFBCA43EEB17ED
Authority key identifier: 82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35392e302f32342d3234203d3e20323632353335.roa
Signing time:             Thu 04 Apr 2024 07:35:03 +0000
ROA not before:           Thu 04 Apr 2024 07:30:03 +0000
ROA not after:            Thu 03 Apr 2025 07:35:03 +0000
asID:                     262535
IP address blocks:        167.249.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7d:67:53:30:6c:8d:20:d3:b1:b7:c9:77:bf:bc:a4:3e:eb:17:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
        Validity
            Not Before: Apr  4 07:30:03 2024 GMT
            Not After : Apr  3 07:35:03 2025 GMT
        Subject: CN=239B7FCCB9AE475E9610E119377C510E4060861B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:18:9d:0c:0c:cb:54:ab:ab:1b:af:98:de:
                    a8:4d:91:88:ae:d6:68:dd:89:44:82:21:52:a8:2d:
                    d7:59:8c:2a:b0:12:1b:26:97:95:91:9c:3d:86:37:
                    41:66:dd:93:f1:0e:ae:ac:3d:71:e1:84:25:5d:ea:
                    1e:15:31:59:1c:ec:17:b4:78:29:5c:f9:9d:a1:97:
                    48:47:ae:d6:e3:ac:6f:60:e2:2b:c5:bd:91:44:ba:
                    e7:8e:6c:3e:ef:b1:59:d2:f7:df:cb:8b:2e:ac:97:
                    e2:ae:60:ba:40:e9:48:05:ea:38:cd:9f:06:ec:6f:
                    98:a7:e9:df:31:ca:8b:72:11:8e:92:a1:6b:4d:34:
                    55:a6:65:2b:5f:4c:dd:24:a0:a0:6f:01:df:e4:12:
                    70:3d:5f:9f:73:7a:4f:79:25:50:2f:99:06:4d:0f:
                    99:9b:88:6d:6a:fa:a9:33:4d:5c:cb:6e:de:97:5e:
                    64:11:bf:43:f7:76:a7:45:a1:aa:f9:fa:29:45:a3:
                    43:bc:2b:01:e4:e5:4d:74:33:29:70:dc:50:37:ab:
                    94:a1:35:23:87:d5:7b:27:10:4d:79:29:99:8c:e7:
                    06:6e:95:a2:ad:bd:f7:62:c7:43:60:09:61:2d:01:
                    19:68:76:97:1b:0a:13:88:d2:81:77:79:9e:ae:0e:
                    85:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9B:7F:CC:B9:AE:47:5E:96:10:E1:19:37:7C:51:0E:40:60:86:1B
            X509v3 Authority Key Identifier:
                keyid:82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3136372e3234392e35392e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:4d:f2:88:cc:6e:24:8a:68:2a:10:93:5b:62:cf:ca:11:3e:
         6b:ab:8f:d4:95:97:0f:e0:7f:a1:83:37:ee:95:5e:7e:f2:1c:
         fb:78:04:4b:8d:d5:ca:39:aa:60:fd:db:ed:f3:0c:7c:c5:e6:
         61:eb:df:b2:a8:0a:0d:22:bf:64:e6:ca:de:49:2d:9f:10:1d:
         c2:e6:ea:13:f5:5d:42:fa:19:6d:d9:a9:fd:07:67:97:20:48:
         84:47:f6:d8:c2:92:b8:80:db:ed:89:17:50:68:5b:9c:f9:01:
         e7:6a:88:12:a3:32:05:9d:f8:59:01:e3:08:e9:ab:a3:e4:14:
         66:d3:7a:cd:c6:1f:f3:89:87:a7:6b:51:e3:4a:64:9f:ec:bc:
         8e:b6:dd:fa:55:33:6a:e5:0b:6b:d0:3a:9a:8f:a1:7b:4b:db:
         6e:3b:89:3b:5f:b9:9f:34:e4:94:bf:57:3e:c6:9d:e0:1b:b6:
         98:bd:a2:87:32:af:48:f9:a3:30:93:d1:95:f8:3e:a3:f4:d1:
         36:d0:a0:8f:a7:f5:4a:08:28:c4:af:c3:2d:1f:31:a8:b1:6b:
         09:00:34:a7:7f:df:c4:20:bb:4c:5c:3d:8a:e4:5a:ca:23:78:
         d2:8a:f7:34:a3:fe:7e:9b:37:d8:a9:57:f1:11:67:57:77:c5:
         49:2d:2d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org