Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3136372e3234392e302e302f32322d3233203d3e20323632373332.roa
File:                     3136372e3234392e302e302f32322d3233203d3e20323632373332.roa (raw, json)
Hash identifier:          xX6plE+we2O7xhW9nOJwXod3nwDbMRORKKgOYrOKgMs=
Subject key identifier:   95:8D:70:EB:38:37:7F:EE:3C:1D:83:47:CC:F1:44:A2:E3:F4:4B:8E
Certificate issuer:       /CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
Certificate serial:       16F581A7ECC4DB8E6DAF9DEBD9E081209A5631FA
Authority key identifier: 17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3136372e3234392e302e302f32322d3233203d3e20323632373332.roa
Signing time:             Fri 02 Sep 2022 03:14:31 +0000
ROA not before:           Fri 02 Sep 2022 03:09:31 +0000
ROA not after:            Fri 01 Sep 2023 03:14:31 +0000
asID:                     262732
IP address blocks:        167.249.0.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f5:81:a7:ec:c4:db:8e:6d:af:9d:eb:d9:e0:81:20:9a:56:31:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
        Validity
            Not Before: Sep  2 03:09:31 2022 GMT
            Not After : Sep  1 03:14:31 2023 GMT
        Subject: CN=958D70EB38377FEE3C1D8347CCF144A2E3F44B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:28:12:cf:ef:e6:0a:86:70:75:b9:07:39:
                    61:3f:c5:32:5e:ea:94:67:00:83:69:3b:d0:98:71:
                    d5:f7:12:d3:0f:67:61:8a:ad:66:a5:29:22:a8:3a:
                    f7:31:59:ff:5c:7b:69:59:67:2e:4f:be:9c:fe:b0:
                    44:5f:70:0f:6a:63:7c:4e:84:42:d2:c6:0b:f4:9f:
                    3a:74:3d:e1:71:52:69:9d:a6:8e:b7:87:46:c4:ae:
                    53:f2:75:c5:76:36:89:51:46:22:c3:1f:40:19:25:
                    08:48:21:6f:ed:42:52:c0:35:d2:06:d9:6d:e0:e4:
                    6a:90:d8:ea:b7:cb:96:d0:30:82:3b:36:2e:23:82:
                    84:da:9f:35:14:3e:cb:13:a5:9a:67:6d:62:47:ef:
                    09:99:ac:7c:a1:18:be:bb:a8:6e:5e:46:c0:b6:a7:
                    11:fd:b6:9e:39:21:fc:05:6d:f8:3d:ed:3d:d3:ac:
                    63:06:c4:29:ca:10:6e:51:52:f5:96:ff:4b:94:32:
                    58:5c:39:2e:5f:fe:bf:7f:ee:71:a3:39:ca:66:c7:
                    e2:1c:b1:14:da:68:c5:ca:9a:18:bf:f3:a2:4b:54:
                    12:77:3f:3b:c9:6c:41:bc:af:df:1c:73:34:3b:a0:
                    c8:68:e5:23:e5:dd:21:2e:c7:76:89:ce:b1:3a:1d:
                    be:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8D:70:EB:38:37:7F:EE:3C:1D:83:47:CC:F1:44:A2:E3:F4:4B:8E
            X509v3 Authority Key Identifier:
                keyid:17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3136372e3234392e302e302f32322d3233203d3e20323632373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:91:83:5e:51:a2:ae:bb:f4:ce:7b:bb:dc:68:4e:22:4c:d4:
         d7:8d:96:f1:7b:6d:4d:6e:2b:31:33:8b:0c:a8:86:9c:99:85:
         47:f0:bc:52:63:b6:fa:fc:f4:48:72:46:6c:4b:f5:82:4b:c9:
         d7:1d:dd:2b:20:16:f2:f8:99:1d:33:db:6e:5d:d6:64:13:25:
         11:2c:df:5c:2f:92:1b:96:da:b2:8a:bd:0e:c8:11:72:64:84:
         3b:83:b8:bd:c7:74:ef:12:be:20:a9:6a:06:61:a8:04:79:7e:
         b6:0b:39:ed:f1:c5:35:eb:99:42:81:d5:d2:59:e0:c5:e0:02:
         9d:db:d8:24:87:fa:b4:e2:71:97:4a:31:8c:c9:49:08:69:9f:
         13:c8:28:b6:2c:11:a5:7c:97:f3:55:7f:4b:bf:e9:09:38:f0:
         ed:39:16:50:3b:b0:e0:57:62:76:e1:43:44:66:ed:f3:d2:1f:
         3d:f5:1a:32:2a:da:59:93:56:7e:66:6e:44:5a:53:66:04:b7:
         ed:8b:ce:51:91:24:f9:14:80:94:50:c3:c3:bd:08:19:d7:a2:
         27:a2:20:8f:e6:40:f9:f8:9a:31:db:95:29:05:a9:81:c7:7b:
         05:ba:b9:49:b3:63:14:42:52:84:74:17:6d:f7:c7:6c:fb:3d:
         e3:a6:80:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org