Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133362e302f32322d3232203d3e203238353938.roa
File:                     3136372e3235302e3133362e302f32322d3232203d3e203238353938.roa (raw, json)
Hash identifier:          BldLanQRlyVwBWx3eKw6abpLwoEQEnkTgJ0JzQ1l43o=
Subject key identifier:   94:A9:19:B2:94:4B:18:46:C2:B4:34:F4:B4:B1:8D:FC:83:67:6E:73
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       7612A77299BB05931C35FF2DA538486D83317B
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133362e302f32322d3232203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:01:01 +0000
ROA not before:           Mon 23 Oct 2023 12:56:01 +0000
ROA not after:            Mon 21 Oct 2024 13:01:01 +0000
asID:                     28598
IP address blocks:        167.250.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:12:a7:72:99:bb:05:93:1c:35:ff:2d:a5:38:48:6d:83:31:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:56:01 2023 GMT
            Not After : Oct 21 13:01:01 2024 GMT
        Subject: CN=94A919B2944B1846C2B434F4B4B18DFC83676E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:04:23:6c:a7:94:c2:42:44:38:9b:f3:02:
                    ae:08:93:69:ff:da:8d:80:cf:d7:d0:f7:36:47:4e:
                    bd:2d:e8:02:74:02:aa:52:73:d8:5c:0c:a6:bb:69:
                    ba:67:61:72:15:8f:8d:e3:08:e8:d3:dc:d9:81:ff:
                    46:0e:0a:5b:04:8b:da:07:90:f1:b4:c8:39:d8:31:
                    75:f1:6b:3f:34:03:59:5f:c3:1b:b3:45:cf:ec:f8:
                    a1:d4:79:7f:78:11:44:42:b2:5d:a8:9b:13:9f:8d:
                    ff:ca:0d:08:13:56:4b:e9:08:5a:dd:71:c4:33:8f:
                    bf:dc:9f:df:78:da:f9:f0:14:74:27:69:20:cb:8b:
                    bb:34:2c:0c:db:44:9c:dd:5a:2c:53:7c:19:31:c2:
                    11:08:62:a5:9a:b1:a4:42:ac:a5:e7:82:5e:0f:69:
                    49:f0:fb:0d:8f:13:e1:a2:3e:b1:80:2c:26:bc:af:
                    24:37:65:71:93:9a:f5:ff:10:1e:b3:7e:ec:55:e6:
                    30:dc:c5:c3:9b:b4:94:0a:96:0b:48:37:54:a2:d1:
                    08:bc:ce:8b:43:5c:a5:96:a0:4a:59:9c:06:d1:41:
                    50:2b:04:77:82:f0:cf:43:fb:5a:93:16:82:e6:71:
                    88:4d:21:0c:ef:5e:18:94:55:e7:b6:9d:16:18:e8:
                    10:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A9:19:B2:94:4B:18:46:C2:B4:34:F4:B4:B1:8D:FC:83:67:6E:73
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133362e302f32322d3232203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:c0:49:17:58:a2:fc:c3:3b:20:1c:3a:ea:6e:c6:78:fb:
         5e:b0:4f:60:65:8f:3a:63:1a:3d:0b:50:91:80:1a:08:78:5a:
         b7:9b:40:f1:fa:a9:ba:52:86:98:c3:fe:b9:bb:8b:5b:4c:c3:
         cb:3d:05:4e:40:00:ec:b0:bf:ae:b5:6d:de:3a:00:98:41:5e:
         99:c1:8c:a2:e7:c6:9a:bf:53:81:cf:c5:68:38:36:06:a0:fa:
         38:63:fa:65:1f:19:b3:ec:80:2e:d8:f9:62:ac:86:bf:2b:97:
         9d:4c:96:ad:e1:5f:6f:78:58:85:ea:f5:96:71:ce:dd:d4:f5:
         32:fd:55:b9:58:c5:c1:4d:94:48:b4:83:7f:b3:2e:07:ce:25:
         74:e8:c8:3c:de:b4:9f:db:e1:61:17:8b:81:2e:ed:af:dc:5d:
         16:85:1e:5b:29:05:5e:f9:3d:fb:8d:bb:3f:f7:8f:71:96:72:
         10:a9:e5:bc:6f:7a:a7:d5:87:a8:39:ab:98:81:a5:0c:aa:5a:
         9d:7c:01:53:be:10:ec:68:b3:5a:2f:7e:bb:b9:b5:52:2a:6c:
         9b:8d:a4:ba:ca:41:94:5d:a6:35:8a:33:f0:62:c5:10:5a:01:
         2c:7e:57:3a:68:24:5f:6a:6f:88:f8:32:9e:5a:0e:72:ae:45:
         f1:d2:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:48 2025 by rpki-client