Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3231302e302f32342d3234203d3e203631363134.roa
File:                     3136382e3232372e3231302e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          FfVcarcEgj0skdIKL9x25WUhnDKJX6cx7jIjkYXCJbo=
Subject key identifier:   72:A3:39:8C:A0:2C:F8:F5:77:65:42:8A:F4:05:08:81:8B:9D:87:95
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       4FFE773E35CDA660ABD415F49B6040204076A632
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3231302e302f32342d3234203d3e203631363134.roa
Signing time:             Fri 15 Sep 2023 18:21:52 +0000
ROA not before:           Fri 15 Sep 2023 18:16:52 +0000
ROA not after:            Fri 13 Sep 2024 18:21:52 +0000
asID:                     61614
IP address blocks:        168.227.210.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fe:77:3e:35:cd:a6:60:ab:d4:15:f4:9b:60:40:20:40:76:a6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Sep 15 18:16:52 2023 GMT
            Not After : Sep 13 18:21:52 2024 GMT
        Subject: CN=3082010A02820101009CAA08E18CC4B4DDB6BBF8E167502EA85936D107ED5F34426574D1D44A56C490E46DFF49A30AA47F57816457196A4F6C5B7DD481C7F04ACEAFDF89B222866A3B0F66839135B7460C6C6801AAC1DD3DE90204F4E56154A523D476BA8CB4390E134068A4E9D503CACEE790150F923E2ED1ABA2AB6D8F73BB66F2F655F0D0ECEECC5B673BAA8027E387459AAAFADA2C3DD55FE1C1E06B09054E58602D527F657EC45DA54EB0FFA2587FEF9A387F33946DF2773DFAF4D79F2200DF9A4264332F259C0E7268A76345839ED2606448C4B0D6F93D051F6A54B2C1042B2A4DDC06C0E109B931632DBB8D57156E1E13ACFF69DE66386A0308BA9B7497E03CD95161ADE41F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:08:e1:8c:c4:b4:dd:b6:bb:f8:e1:67:50:
                    2e:a8:59:36:d1:07:ed:5f:34:42:65:74:d1:d4:4a:
                    56:c4:90:e4:6d:ff:49:a3:0a:a4:7f:57:81:64:57:
                    19:6a:4f:6c:5b:7d:d4:81:c7:f0:4a:ce:af:df:89:
                    b2:22:86:6a:3b:0f:66:83:91:35:b7:46:0c:6c:68:
                    01:aa:c1:dd:3d:e9:02:04:f4:e5:61:54:a5:23:d4:
                    76:ba:8c:b4:39:0e:13:40:68:a4:e9:d5:03:ca:ce:
                    e7:90:15:0f:92:3e:2e:d1:ab:a2:ab:6d:8f:73:bb:
                    66:f2:f6:55:f0:d0:ec:ee:cc:5b:67:3b:aa:80:27:
                    e3:87:45:9a:aa:fa:da:2c:3d:d5:5f:e1:c1:e0:6b:
                    09:05:4e:58:60:2d:52:7f:65:7e:c4:5d:a5:4e:b0:
                    ff:a2:58:7f:ef:9a:38:7f:33:94:6d:f2:77:3d:fa:
                    f4:d7:9f:22:00:df:9a:42:64:33:2f:25:9c:0e:72:
                    68:a7:63:45:83:9e:d2:60:64:48:c4:b0:d6:f9:3d:
                    05:1f:6a:54:b2:c1:04:2b:2a:4d:dc:06:c0:e1:09:
                    b9:31:63:2d:bb:8d:57:15:6e:1e:13:ac:ff:69:de:
                    66:38:6a:03:08:ba:9b:74:97:e0:3c:d9:51:61:ad:
                    e4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A3:39:8C:A0:2C:F8:F5:77:65:42:8A:F4:05:08:81:8B:9D:87:95
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3231302e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:0f:02:78:0b:ce:c3:1a:c7:7f:ca:6e:5b:21:c4:7e:e6:
         9e:65:03:db:23:c3:94:fb:03:32:fc:35:09:1d:b8:9b:73:6c:
         44:ca:05:15:8f:e2:90:36:19:61:c5:da:1f:fb:d8:02:16:5d:
         f0:2f:13:4c:83:8a:36:aa:50:85:13:4b:61:6a:29:5b:2c:b3:
         e3:a4:6d:ba:e1:37:1a:b1:09:9c:b4:a3:91:f5:89:18:70:32:
         33:91:52:02:c9:3d:61:e1:e6:ee:40:47:ef:c0:50:ce:87:1c:
         9b:15:81:c3:77:e2:6b:aa:bb:27:73:4e:e4:22:7a:71:95:c3:
         95:17:c2:86:06:69:05:5c:47:d1:50:70:4f:c4:96:af:33:19:
         e2:64:5c:1b:16:c5:df:c1:64:76:cc:c3:ae:4c:11:85:de:c9:
         3f:1a:1b:27:5d:42:28:bd:4f:af:76:6c:65:ab:b3:bc:da:fd:
         35:ef:dd:da:52:a0:f1:da:e9:6c:8f:4e:05:27:c5:8c:3d:4d:
         26:b5:e4:32:0e:66:13:13:73:28:92:e7:40:2e:b6:e3:a3:dd:
         a4:6d:34:1b:55:a9:d5:f1:14:ad:ad:17:39:ce:a3:79:af:33:
         21:21:1c:21:3e:7e:76:33:99:0e:40:18:b1:28:97:9d:8d:46:
         ce:de:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:39 2025 by rpki-client