Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
File:                     3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier:          t4i7tNiWGGtBaBRUGAOUT6gWyB4AoNyr6vD69TUqwh4=
Subject key identifier:   79:51:AC:4E:48:78:B1:D5:99:68:70:5F:A7:2E:3B:94:AC:85:72:28
Certificate issuer:       /CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Certificate serial:       025625C5765B38ADE05EB216AE3EB4E47C1AA528
Authority key identifier: 1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa
Signing time:             Mon 20 May 2024 13:18:43 +0000
ROA not before:           Mon 20 May 2024 13:13:43 +0000
ROA not after:            Mon 19 May 2025 13:18:43 +0000
asID:                     28287
IP address blocks:        167.249.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:56:25:c5:76:5b:38:ad:e0:5e:b2:16:ae:3e:b4:e4:7c:1a:a5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
        Validity
            Not Before: May 20 13:13:43 2024 GMT
            Not After : May 19 13:18:43 2025 GMT
        Subject: CN=7951AC4E4878B1D59968705FA72E3B94AC857228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a1:7e:56:f2:fc:7e:6f:f9:1f:c4:16:f5:da:
                    9a:0d:79:5e:b2:96:70:de:b9:04:3e:3a:e2:9c:fe:
                    b0:40:b6:c8:2b:68:ea:21:0e:af:7f:09:ba:c5:22:
                    67:21:5f:fa:42:fd:7a:3d:dc:45:fb:bc:a4:b8:f6:
                    7f:40:e8:8c:e3:ec:28:2c:00:32:e3:2c:6d:2c:4c:
                    3e:80:c9:e2:60:fb:6e:83:8f:74:6f:cd:a5:77:bd:
                    e4:c8:43:a0:60:00:32:6a:63:0b:a8:b4:1a:db:66:
                    c3:62:0a:0a:d1:4b:aa:6d:5a:40:d7:f3:24:09:02:
                    ec:b0:0f:cc:eb:54:60:9d:1b:aa:93:cb:47:7f:33:
                    6f:63:d9:a9:93:fe:c3:7c:c9:2c:c5:a4:31:df:0d:
                    e7:8d:b5:f8:31:aa:bd:a4:d5:cf:75:b5:00:ef:28:
                    a4:c7:10:50:24:60:dd:71:f7:bd:7d:66:d2:5c:5b:
                    a2:b3:00:84:99:18:79:2b:4c:99:2a:3a:c5:3a:e4:
                    68:3a:d6:5d:83:63:98:c6:79:57:7c:3f:b3:96:f0:
                    9c:44:89:81:84:76:32:5a:6b:6f:b5:5b:ab:bf:67:
                    65:5a:6a:0e:cb:ca:40:43:aa:40:f1:16:bc:d0:fb:
                    14:8c:ca:1f:d0:bb:77:e4:2b:f2:63:b8:e4:da:a8:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:51:AC:4E:48:78:B1:D5:99:68:70:5F:A7:2E:3B:94:AC:85:72:28
            X509v3 Authority Key Identifier:
                keyid:1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3136372e3234392e3137362e302f32322d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:56:21:29:f5:1f:30:82:83:65:c6:96:2b:72:41:7f:a5:9a:
         76:86:09:8e:cf:0f:1d:e7:51:bb:34:84:cf:57:82:c8:7e:a7:
         b8:ef:fe:93:1a:5f:60:2a:de:0d:b5:a8:4e:0f:2c:17:3d:29:
         02:60:64:0a:1a:6b:39:36:83:6f:79:1e:0d:f4:9a:08:69:75:
         48:ba:c3:f4:42:b0:7a:bd:f0:03:af:ba:82:6b:1e:47:0c:2b:
         dc:4f:a1:31:16:77:a1:04:b4:b5:05:57:35:f6:db:6a:41:d1:
         c0:2c:56:42:72:10:ce:bd:ee:ef:59:a7:2f:d8:56:91:87:41:
         f9:dd:da:54:e5:19:50:b7:40:df:cd:db:1c:f2:5c:e2:12:20:
         9f:9c:21:26:5e:db:56:e1:93:9b:c4:71:13:64:15:18:2f:29:
         27:a7:a8:98:e0:f7:0a:bb:20:88:29:bf:13:6f:b3:be:f3:22:
         8e:e4:ac:5b:d1:cb:18:53:1b:54:08:ff:3b:89:dc:6a:44:59:
         03:50:40:03:22:73:29:ae:bc:ab:1c:e8:c4:2a:43:c1:7d:22:
         0c:c0:02:e6:4c:93:fb:86:80:87:f8:0f:53:61:56:d9:00:b3:
         4f:2e:ef:79:25:31:be:88:6c:1a:12:77:80:bd:bf:df:4a:9b:
         02:bb:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org