Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3231312e302f32342d3234203d3e203631363134.roa
File:                     3136382e3232372e3231312e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          zqioxCIFdbzBpR0gDNj6Y9UhHMOir83FKfy0nrN+z9w=
Subject key identifier:   E3:D7:E7:1E:A5:51:C7:E7:17:B8:D3:4C:E3:06:45:BD:C5:1A:F9:D3
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       65F64D5BB48E30032A930A37F3A8C947C07277F9
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3231312e302f32342d3234203d3e203631363134.roa
Signing time:             Fri 15 Sep 2023 18:21:56 +0000
ROA not before:           Fri 15 Sep 2023 18:16:56 +0000
ROA not after:            Fri 13 Sep 2024 18:21:56 +0000
asID:                     61614
IP address blocks:        168.227.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f6:4d:5b:b4:8e:30:03:2a:93:0a:37:f3:a8:c9:47:c0:72:77:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Sep 15 18:16:56 2023 GMT
            Not After : Sep 13 18:21:56 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b1:8e:50:81:7e:27:db:7f:3a:ca:7b:e0:5e:
                    cb:9e:52:b0:3b:00:2c:e2:c3:ba:29:b2:f6:9b:00:
                    92:8d:cc:09:19:cb:0f:0d:4b:20:1c:7f:f1:ea:40:
                    a2:ff:c4:3c:1c:28:cc:91:38:ea:a4:d7:2b:20:ef:
                    c5:ff:43:6e:41:2d:77:1c:ef:55:d8:e5:2f:7e:6d:
                    be:02:66:f7:8b:44:18:97:ec:83:bc:03:a7:56:21:
                    71:e6:0c:6a:08:c8:eb:0f:12:f1:7a:29:6c:c9:05:
                    79:9d:b3:23:37:6f:22:18:26:dd:92:cd:da:5a:9b:
                    5a:91:8d:5b:e6:58:ec:76:40:16:f0:43:dd:17:87:
                    4a:16:90:e5:6f:d7:37:8c:12:4e:fb:05:61:94:1b:
                    a3:0d:b0:28:51:e6:ea:fe:ce:a7:cb:55:8a:fa:b6:
                    ab:7d:2f:c8:78:b3:e6:64:a7:d6:62:14:fd:f2:c2:
                    eb:9c:c9:5d:e4:6e:89:e3:e9:fb:36:f8:83:2c:2f:
                    97:7f:f5:69:cd:24:10:4b:50:65:22:fd:1f:15:76:
                    95:3a:d9:f9:e1:19:a3:12:ec:cb:bf:ca:f0:41:3f:
                    4d:d0:0b:03:cf:57:9a:fe:12:35:bd:36:3a:f7:9c:
                    dc:8e:e5:38:3b:69:81:bf:b0:1e:7f:a4:da:c4:33:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D7:E7:1E:A5:51:C7:E7:17:B8:D3:4C:E3:06:45:BD:C5:1A:F9:D3
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/3136382e3232372e3231312e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:7d:13:f8:2a:97:a5:20:72:f0:88:2c:02:1b:dd:f4:af:97:
         6d:d6:fd:ce:80:e4:0b:7d:5d:04:c4:c3:01:0a:f0:ab:9f:34:
         08:52:b6:6c:44:a4:0e:43:b0:d3:97:cd:25:14:db:5d:dc:93:
         89:fc:24:77:c6:6c:fb:57:25:cc:9c:3b:d7:40:7f:de:b3:bd:
         cd:ff:2f:5d:bb:5f:74:c0:f5:98:c7:5f:fe:ab:42:dd:ba:9a:
         59:7d:d9:3a:14:02:5e:54:38:68:e2:2a:46:49:c4:e0:aa:ab:
         12:c2:bd:c2:5c:e9:8a:6c:3f:dc:e9:96:96:1a:a6:0f:9b:b2:
         c3:37:64:0d:4a:ba:2f:e2:4b:58:5b:9f:23:b6:26:68:ab:e0:
         81:a8:e6:70:61:35:4d:e8:b4:3f:b2:09:ed:e9:9e:3b:81:4a:
         b9:01:2b:d5:eb:46:7c:64:75:69:12:e9:7a:94:6c:af:c7:07:
         89:cc:48:bc:12:d0:9a:f1:fe:99:ed:45:af:f6:e0:35:5a:43:
         8c:61:2e:23:9a:e4:37:36:88:26:e5:38:ca:54:81:e0:e2:22:
         38:52:89:bf:06:a7:79:5b:85:6a:83:6c:a0:d3:79:f4:88:c3:
         b4:da:18:45:0e:66:10:08:a8:dd:67:ec:e8:4e:b7:e8:bb:89:
         00:8a:72:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org