Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa
File:                     3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          5+VDpYEymRzEoXhRGVWf2PtK1l69BP0yqa/3Uh1iMKM=
Subject key identifier:   16:9F:4F:FE:29:70:C0:15:AB:61:7A:0D:2B:5E:50:9B:D9:9A:03:B6
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       51EC006F5BB1301F515A88F260EFF44189372347
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa
Signing time:             Fri 15 Sep 2023 18:21:46 +0000
ROA not before:           Fri 15 Sep 2023 18:16:46 +0000
ROA not after:            Fri 13 Sep 2024 18:21:46 +0000
asID:                     61614
IP address blocks:        168.227.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ec:00:6f:5b:b1:30:1f:51:5a:88:f2:60:ef:f4:41:89:37:23:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Sep 15 18:16:46 2023 GMT
            Not After : Sep 13 18:21:46 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:27:01:14:fe:b7:9b:c4:ed:4a:66:19:6e:
                    f6:1c:ca:af:35:a6:55:31:f0:e4:db:9d:1d:10:39:
                    bb:7b:89:dd:da:54:22:ed:5d:ce:ef:da:19:d7:ec:
                    8f:5c:e5:7a:17:8b:48:17:a7:6b:e2:ef:81:b9:45:
                    3c:20:ab:67:a6:8a:6f:2e:b2:98:a0:a1:4f:6f:14:
                    0b:94:cc:fb:07:62:7d:82:ca:6f:ee:81:21:20:78:
                    8d:3d:fc:3d:b2:f0:58:5a:76:84:11:37:32:86:ba:
                    13:10:78:90:c5:26:3d:c6:cd:6f:f9:97:de:2f:73:
                    7a:6e:c2:7d:f1:12:19:27:b9:e5:ce:db:be:93:31:
                    d9:91:5e:a4:17:e4:44:9c:93:e6:04:b0:35:a0:fb:
                    77:69:16:13:a1:ef:4b:3b:12:a2:cf:42:39:27:71:
                    73:e1:46:94:06:bb:44:f1:5c:b5:8e:bf:1a:7a:d1:
                    11:33:da:40:d0:0e:06:67:03:cf:3a:d5:c0:d2:15:
                    17:8d:b1:d4:81:71:14:14:33:74:68:b9:b6:2d:86:
                    5c:14:0d:d4:59:a1:5b:7f:72:37:d4:f0:17:39:3c:
                    0d:b8:1d:c3:29:35:f0:63:e7:bc:b4:8a:5c:64:83:
                    97:47:34:e6:73:81:e7:14:2c:77:88:01:5d:89:be:
                    63:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9F:4F:FE:29:70:C0:15:AB:61:7A:0D:2B:5E:50:9B:D9:9A:03:B6
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:91:da:f8:f7:62:8f:f6:ed:52:ee:4c:69:29:1d:60:7b:a0:
         10:ea:41:71:c2:22:51:ee:f7:d3:c2:a5:bc:e1:37:80:3e:d5:
         c7:68:e7:49:88:3f:79:0e:88:67:d0:96:28:ed:7b:e0:e9:c2:
         00:00:f0:4c:08:a1:42:8d:d8:c0:cb:f1:c9:fe:1b:6e:ba:26:
         c3:6b:3f:71:ec:8f:b9:22:08:30:7d:55:85:86:db:74:3a:d4:
         50:82:11:bf:85:2f:dd:7c:22:70:96:57:bf:99:71:d3:f4:07:
         7b:5c:58:97:8a:b3:3a:b8:9e:b1:c8:e2:ab:a5:36:d5:c9:90:
         26:27:83:94:74:b2:31:08:31:26:39:87:3d:e9:2e:0e:d7:ff:
         32:14:56:06:a6:c0:2f:93:fc:2a:c2:ef:8f:5a:7a:6f:a8:ca:
         cf:ca:84:92:29:55:a3:cb:0e:05:9c:a9:88:aa:16:6a:d2:15:
         db:1b:ea:bd:35:d2:2f:af:f7:87:8e:47:c4:a5:91:8d:02:a9:
         80:c3:ff:98:01:98:a0:41:71:69:2e:2e:ce:dd:92:a8:9a:64:
         f6:7d:78:8f:51:13:c4:55:89:ef:f5:7e:f3:6b:6b:3c:55:d2:
         84:49:db:9b:d6:7e:18:81:4a:e8:00:93:64:1f:ea:b5:98:1a:
         a4:35:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org