Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133362e302f32322d3234203d3e203238353938.roa
File:                     3136372e3235302e3133362e302f32322d3234203d3e203238353938.roa (raw, json)
Hash identifier:          yr00cVwUCWuN49K64FRjiFb5iEEgW1JdWgTLpiHtfmA=
Subject key identifier:   20:2D:E0:7D:A7:35:93:43:29:22:E4:A1:DB:DB:E6:5C:14:CB:84:AD
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       40787ACC49B8FC6F5E7363EA960A113D5F8966FE
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133362e302f32322d3234203d3e203238353938.roa
Signing time:             Wed 14 Sep 2022 14:43:34 +0000
ROA not before:           Wed 14 Sep 2022 14:38:34 +0000
ROA not after:            Wed 13 Sep 2023 14:43:34 +0000
asID:                     28598
IP address blocks:        167.250.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:78:7a:cc:49:b8:fc:6f:5e:73:63:ea:96:0a:11:3d:5f:89:66:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Sep 14 14:38:34 2022 GMT
            Not After : Sep 13 14:43:34 2023 GMT
        Subject: CN=202DE07DA73593432922E4A1DBDBE65C14CB84AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c5:95:24:2b:36:b8:9c:d4:7f:32:28:d6:d7:
                    5b:af:31:71:57:ab:6a:12:4a:6f:d7:5e:0a:b3:e1:
                    ea:e2:2f:df:3a:00:b5:b4:40:29:e8:f0:96:68:ed:
                    d1:ec:fa:63:5b:f4:31:21:74:8a:07:10:6c:a4:e7:
                    2b:8f:8f:c5:ba:4a:6d:49:7a:fc:3a:87:29:3b:87:
                    45:62:9c:2c:47:7b:2e:79:43:48:8e:d2:9d:bb:7b:
                    d9:d8:41:eb:67:1b:88:fa:90:d8:01:2c:d5:90:19:
                    77:87:0a:d8:92:6b:dc:ae:e6:c1:2e:49:11:cb:c1:
                    56:91:5b:93:75:86:46:29:2c:7e:e4:7b:1a:f7:fe:
                    b5:a9:8d:e7:47:85:55:bd:dd:1b:9d:97:94:de:63:
                    e3:32:e1:20:a0:c4:44:ec:c5:9f:3f:c3:c9:33:2e:
                    c4:51:1b:22:5f:d5:ce:3f:11:30:7a:64:0c:cb:ec:
                    9f:bd:69:db:5f:aa:84:59:50:42:62:6c:3e:76:c7:
                    9f:79:92:0e:83:62:f0:b5:c5:9a:b5:9d:3c:0d:f9:
                    b1:ca:14:7c:d6:7e:f6:a7:d5:d0:1e:21:a7:d8:ac:
                    1d:41:a9:13:e6:51:f7:00:4e:9a:9f:41:d8:c6:d3:
                    a1:36:4e:57:28:10:0b:63:d1:18:28:87:76:15:01:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2D:E0:7D:A7:35:93:43:29:22:E4:A1:DB:DB:E6:5C:14:CB:84:AD
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3136372e3235302e3133362e302f32322d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:7a:f9:46:a7:d4:be:82:9f:54:64:03:81:b5:8d:62:94:17:
         e5:43:a7:a3:60:e4:60:19:a1:1c:cb:81:23:a4:62:cd:1f:58:
         9d:13:37:f2:a9:6b:58:92:ab:84:29:41:2d:fb:31:75:9e:ad:
         a1:de:17:87:2d:8c:30:18:33:8e:8e:f6:6a:98:6d:c2:8f:7b:
         18:c8:5b:7b:93:5c:42:86:a2:2f:5a:08:2e:d0:a9:e5:96:b5:
         f3:41:93:6c:31:ec:5d:16:e0:77:e8:bc:7a:b4:d8:a8:ac:16:
         74:93:dc:77:a0:11:a9:a0:b2:1d:8b:d8:e3:16:b4:08:37:74:
         b4:e3:43:e5:5b:ae:df:bc:ad:3c:26:82:f7:bd:e7:c9:dd:03:
         95:39:db:a6:e5:14:06:fe:76:68:21:e3:47:3e:9a:63:3c:8e:
         74:c9:fd:3b:6f:a7:d0:83:50:7d:ce:fa:44:88:8f:f1:91:67:
         03:45:c5:d4:65:3e:ac:34:56:99:1c:cf:15:d0:c8:3b:aa:88:
         ed:04:66:2e:76:81:35:1c:41:48:4f:71:a4:c0:a2:32:ad:2c:
         2b:b1:a8:bb:a4:c7:95:50:d4:dd:5e:d7:cf:93:94:5c:4a:e9:
         cd:9c:5b:ac:65:09:a9:08:c0:1d:52:c2:62:41:6d:f2:d5:f1:
         9b:82:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org