Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/3136382e3139342e34382e302f32322d3234203d3e20323634303035.roa
File:                     3136382e3139342e34382e302f32322d3234203d3e20323634303035.roa (raw, json)
Hash identifier:          yCCYZGJVbF8luCnUrdXdz825ItRFQlTkXLT5K93liDA=
Subject key identifier:   EC:0A:5C:48:FB:D2:13:15:5E:9B:2F:AF:8B:57:1C:4B:74:D3:F7:B5
Certificate issuer:       /CN=86F4F5F3F82C697369F8DC3463D628990698CCBA
Certificate serial:       05F237949BF9DEA4F644816C262955FB1812F8C4
Authority key identifier: 86:F4:F5:F3:F8:2C:69:73:69:F8:DC:34:63:D6:28:99:06:98:CC:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/3136382e3139342e34382e302f32322d3234203d3e20323634303035.roa
Signing time:             Thu 17 Aug 2023 16:30:00 +0000
ROA not before:           Thu 17 Aug 2023 16:25:00 +0000
ROA not after:            Thu 15 Aug 2024 16:30:00 +0000
asID:                     264005
IP address blocks:        168.194.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f2:37:94:9b:f9:de:a4:f6:44:81:6c:26:29:55:fb:18:12:f8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4F5F3F82C697369F8DC3463D628990698CCBA
        Validity
            Not Before: Aug 17 16:25:00 2023 GMT
            Not After : Aug 15 16:30:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:5b:bb:3c:d3:f4:43:4f:b2:5e:cd:3d:2f:
                    97:6e:3c:00:65:f6:5f:3f:dd:ac:e4:3d:cb:f8:20:
                    14:56:f4:ef:cf:d0:7f:33:5d:45:fd:1d:f8:c5:94:
                    b3:a0:cc:33:f0:02:22:07:2e:f4:aa:2a:de:49:f9:
                    3c:3f:22:3a:27:28:93:c9:ae:fc:72:77:6b:6b:09:
                    97:79:4e:c5:f3:cc:31:b8:e5:b5:bf:38:59:df:a2:
                    98:97:9b:b5:e7:35:f6:c3:c5:f6:f4:c1:f6:e1:c7:
                    ed:ce:08:b7:cd:73:43:2b:54:1f:ea:81:58:36:09:
                    86:2b:41:bb:84:70:6a:66:fc:da:36:c4:de:ae:e5:
                    ba:4c:94:4b:0a:ab:f0:d5:50:3c:6f:8c:28:44:7e:
                    37:96:b4:e6:ee:e2:5f:26:29:9c:31:c2:2a:bc:96:
                    5a:5f:bd:4c:43:e4:bb:44:d9:8b:8f:75:87:ce:c2:
                    76:0a:31:84:cb:7e:2f:10:fd:4b:b6:30:88:bf:10:
                    b0:9e:60:c9:90:f1:e5:8b:c7:db:f9:ff:8f:1f:98:
                    9e:b2:3e:90:fc:33:05:f1:21:47:49:69:71:04:8c:
                    eb:b2:7f:c4:75:b9:72:88:34:a6:f7:50:74:24:42:
                    dc:26:12:d4:3e:69:90:58:d6:08:54:cd:de:4b:ae:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:5C:48:FB:D2:13:15:5E:9B:2F:AF:8B:57:1C:4B:74:D3:F7:B5
            X509v3 Authority Key Identifier:
                keyid:86:F4:F5:F3:F8:2C:69:73:69:F8:DC:34:63:D6:28:99:06:98:CC:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/3136382e3139342e34382e302f32322d3234203d3e20323634303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:26:52:bb:b6:80:3b:3d:e4:c1:79:2a:a4:39:91:ec:3f:3e:
         fc:9f:53:ce:af:e1:e1:7c:de:3c:f9:05:35:bb:0e:a3:48:c9:
         16:58:f6:13:f2:e1:40:4e:61:50:44:dc:68:2c:38:10:cf:8e:
         25:77:6f:10:61:c9:08:fa:cd:00:d0:b7:09:31:c9:81:25:6a:
         cd:5b:c9:0e:84:73:f4:14:c7:74:33:0f:3a:24:ea:da:23:85:
         66:28:4d:7e:50:ba:d9:9d:80:7e:e2:89:46:ee:fc:b5:f9:14:
         2d:49:2b:72:12:30:39:89:dc:f4:bd:42:82:65:39:51:52:cc:
         53:c8:21:47:72:07:8d:97:e9:bb:89:b0:ba:6e:9b:13:20:33:
         65:c0:cc:d3:d1:1a:ef:45:66:dd:cf:3e:34:d3:1d:f5:d2:38:
         7d:d2:67:4f:e3:11:d7:f7:53:49:5f:95:0a:8f:d8:6c:e8:38:
         4a:93:3b:33:0a:55:31:92:9b:d8:87:d5:be:e6:1c:29:c9:0c:
         a8:dc:a5:d2:d6:fd:dc:41:1d:5d:7b:62:b5:50:79:c1:7c:f9:
         b3:6b:b9:5e:62:8e:58:d7:07:d3:ec:1e:a1:4d:1a:33:d3:65:
         3a:66:81:c4:91:80:98:5f:22:9a:04:2e:6c:96:85:1d:fb:66:
         70:ca:27:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org