Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa
File:                     3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa (raw, json)
Hash identifier:          j8rfF4Kf4faFAVDrsCKt+5ysJbgkafNZfmEOjYzkUG4=
Subject key identifier:   AA:14:94:C8:62:FB:2D:0D:70:15:97:61:BD:A7:C8:17:EF:45:3A:F3
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       0B94DC87DF8BC6E783FE71DBB6FADDD855CA661E
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa
Signing time:             Fri 15 Sep 2023 18:21:49 +0000
ROA not before:           Fri 15 Sep 2023 18:16:49 +0000
ROA not after:            Fri 13 Sep 2024 18:21:49 +0000
asID:                     61614
IP address blocks:        168.227.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:94:dc:87:df:8b:c6:e7:83:fe:71:db:b6:fa:dd:d8:55:ca:66:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Sep 15 18:16:49 2023 GMT
            Not After : Sep 13 18:21:49 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1a:3a:ec:05:a2:38:2d:5a:63:b5:3a:ec:ad:
                    f0:9c:80:8e:94:3b:0a:d9:4d:9e:28:9b:60:f2:52:
                    02:c7:31:9c:9a:b4:22:08:ba:86:2f:8e:cb:14:1f:
                    4b:85:f8:44:78:ae:81:0e:28:e0:de:b1:ca:ed:fd:
                    f3:c0:7a:4a:e7:73:be:2f:54:3e:42:45:3a:46:79:
                    f4:a8:0d:cd:f4:1c:86:bb:3d:2f:81:91:06:93:a2:
                    75:bb:b8:2b:8e:c0:ef:07:37:43:a5:95:cd:7c:2f:
                    05:64:47:e2:77:ac:67:93:c4:e5:47:55:f7:97:13:
                    76:a8:31:ec:18:43:c0:c8:e5:4b:71:04:79:52:12:
                    65:9e:f9:42:81:07:b8:f7:99:54:63:53:4c:5b:ee:
                    b3:62:f6:09:02:a0:89:7d:2b:a4:47:11:5a:d0:b5:
                    a9:b7:01:1b:5b:00:30:28:2d:65:bd:23:74:54:32:
                    74:05:6c:5f:9c:49:f3:43:73:95:81:be:fd:91:82:
                    18:1e:fa:ea:62:18:67:37:7b:66:93:02:5f:42:11:
                    a6:cc:cd:c1:68:f0:1d:1a:03:08:4c:e7:14:c5:10:
                    1a:cd:8e:da:00:37:5e:3d:3b:9f:58:5f:e4:81:92:
                    7e:e0:a1:e1:0b:55:9c:4f:fd:c3:61:54:69:2f:80:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:14:94:C8:62:FB:2D:0D:70:15:97:61:BD:A7:C8:17:EF:45:3A:F3
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3231302e302f32332d3233203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:6e:f4:5f:7d:53:11:05:78:b3:94:05:f2:df:f9:15:1a:c6:
         55:dc:cb:08:66:2f:73:98:50:b5:71:4e:3b:6f:53:25:a6:7f:
         ce:5b:17:8b:0b:85:4d:84:9d:05:91:a9:28:82:81:fe:69:ad:
         a7:e2:32:f2:86:55:0b:a0:2a:b9:66:a4:b5:77:3e:cb:f4:ca:
         4c:98:63:d2:5a:06:53:3e:87:1d:0c:b3:da:fb:60:9e:f5:35:
         e6:ad:01:96:57:27:83:6b:c9:5d:53:b7:66:ed:66:04:b6:48:
         1b:bd:8e:cf:c9:5a:64:a5:b7:9e:4b:47:92:16:54:7f:cf:4a:
         50:89:f7:bc:15:0c:04:e8:30:84:61:a2:2a:68:67:2b:2c:d8:
         41:b5:89:1e:89:60:5f:12:ec:c8:4c:3f:45:e2:8d:82:9e:fb:
         4c:9d:e1:c5:64:94:fb:b9:96:05:a8:c9:03:b9:2d:df:ec:16:
         77:b8:17:e1:51:d6:18:88:96:42:47:45:b9:8a:b5:e5:de:25:
         0a:69:f6:f1:d1:d1:67:2b:23:f9:e6:44:36:2a:2b:88:23:6a:
         d4:76:0f:eb:b0:6e:b0:5b:fd:f1:73:7c:0f:48:29:bf:f0:75:
         0e:fc:a3:a0:98:7a:05:b3:be:11:c5:84:29:d0:7f:05:51:76:
         80:2e:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org