Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32332d3233203d3e20323635313734.roa
File:                     3136372e3234392e3230342e302f32332d3233203d3e20323635313734.roa (raw, json)
Hash identifier:          sf5q3bfldqHWSrEAU9HHi43etLotWaVqZCac/+nvnAQ=
Subject key identifier:   E6:E2:B7:6E:3B:81:C8:34:8F:74:03:71:0B:69:24:9A:53:8F:89:B8
Certificate issuer:       /CN=BABF8373B6870DD3972724FADB4B240DCE99E90C
Certificate serial:       2B6922242F675FD58459FB95848CD0E42E5544B4
Authority key identifier: BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32332d3233203d3e20323635313734.roa
Signing time:             Wed 08 Mar 2023 12:03:13 +0000
ROA not before:           Wed 08 Mar 2023 11:58:13 +0000
ROA not after:            Wed 06 Mar 2024 12:03:13 +0000
asID:                     265174
IP address blocks:        167.249.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:69:22:24:2f:67:5f:d5:84:59:fb:95:84:8c:d0:e4:2e:55:44:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BABF8373B6870DD3972724FADB4B240DCE99E90C
        Validity
            Not Before: Mar  8 11:58:13 2023 GMT
            Not After : Mar  6 12:03:13 2024 GMT
        Subject: CN=E6E2B76E3B81C8348F7403710B69249A538F89B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:2d:a2:31:6b:2c:cf:ec:91:7c:dc:76:c0:
                    6a:18:fc:a1:2b:f6:01:52:ab:6f:dc:b9:43:9f:e3:
                    8d:53:5c:cc:ea:45:0b:9b:d7:c6:36:c5:01:11:64:
                    36:fb:34:12:07:d3:19:13:9f:2c:b6:7e:f4:90:73:
                    53:f6:94:e5:51:15:2a:94:ca:66:99:2a:00:e6:c1:
                    28:1d:31:bb:32:65:04:5c:23:50:da:90:59:74:1c:
                    d3:ab:4e:89:fb:56:6f:83:76:0e:ff:90:57:1d:60:
                    60:d9:fb:90:74:28:1f:f5:14:8e:ac:5e:df:a1:67:
                    b7:c8:f9:cc:aa:e9:9a:fe:5e:ad:00:60:f8:5d:1e:
                    45:57:86:07:93:b7:b6:71:66:72:35:ac:d5:15:9a:
                    da:f2:7f:9a:79:ad:bb:ea:22:9a:39:19:32:ec:8f:
                    97:ba:4f:1c:86:d5:68:87:63:86:3d:66:c9:60:41:
                    bf:1a:30:e0:81:ff:08:25:b1:0f:a5:da:a9:68:30:
                    04:54:91:ea:2e:5f:e7:86:3f:ef:cd:e8:33:df:86:
                    b4:2e:5e:13:2b:0d:ba:f1:e5:a5:f2:fd:66:2b:fd:
                    53:7e:ea:e5:78:99:61:a1:c8:c9:02:0f:55:83:e6:
                    23:36:ce:16:f5:bb:d8:d8:16:ed:c5:92:d0:b7:2f:
                    8b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E2:B7:6E:3B:81:C8:34:8F:74:03:71:0B:69:24:9A:53:8F:89:B8
            X509v3 Authority Key Identifier:
                keyid:BA:BF:83:73:B6:87:0D:D3:97:27:24:FA:DB:4B:24:0D:CE:99:E9:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BABF8373B6870DD3972724FADB4B240DCE99E90C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32332d3233203d3e20323635313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:09:8e:08:75:28:f1:7b:a8:d1:48:08:d2:31:d1:da:fe:9e:
         16:60:2c:9f:68:83:02:d7:4c:e8:e2:6b:c5:3f:bc:10:0a:0f:
         45:6e:c3:c5:83:f3:29:d5:e6:db:5d:43:ea:94:3f:56:fd:ac:
         c5:7f:a2:65:f3:41:66:b5:e0:ba:b0:b1:ed:3f:13:52:bf:17:
         85:e4:da:95:64:86:36:0b:64:6f:34:90:08:c1:2b:72:98:b3:
         1c:2c:ba:95:a3:40:be:98:23:9b:e9:29:ad:ce:6b:f5:e7:8d:
         65:8e:9a:31:ca:6d:d6:5f:42:63:55:c0:57:30:48:f3:d4:77:
         e9:29:ed:c0:37:34:ce:95:f0:d7:06:73:97:41:e8:8f:ca:47:
         3c:ee:89:4a:08:9a:02:67:86:65:ae:d1:49:85:91:03:33:f1:
         ae:cf:5c:0d:4b:a9:17:9f:28:9c:54:48:88:7d:ba:bb:96:b9:
         dc:db:31:7d:d5:84:73:a7:51:9f:6e:fe:92:12:63:a0:ac:1a:
         35:10:51:fb:01:4d:38:5c:99:25:9f:2c:7f:a9:ff:b2:cc:4b:
         e0:dd:73:cf:b6:d3:7c:20:22:44:3a:fa:29:d5:f4:5c:78:ea:
         79:34:25:f2:e4:eb:9f:4c:a3:02:8d:f9:1e:ef:04:42:76:b1:
         30:12:02:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org