Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa
File:                     3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa (raw, json)
Hash identifier:          uxRc7z/CR+ezcQmVmPTv/Ag29T/QwEOAQWYipOCSy1w=
Subject key identifier:   C4:2B:D1:80:87:28:D5:B1:D5:5A:AF:3E:B2:B1:E1:16:0D:60:D1:DC
Certificate issuer:       /CN=78151C7AED024C90945657A6AA5EC78F610B0D64
Certificate serial:       1FBC5B48BDFC790596DEB7908E389AEA4C830EDE
Authority key identifier: 78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa
Signing time:             Thu 30 Nov 2023 20:19:02 +0000
ROA not before:           Thu 30 Nov 2023 20:14:02 +0000
ROA not after:            Thu 28 Nov 2024 20:19:02 +0000
asID:                     265935
IP address blocks:        164.163.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bc:5b:48:bd:fc:79:05:96:de:b7:90:8e:38:9a:ea:4c:83:0e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78151C7AED024C90945657A6AA5EC78F610B0D64
        Validity
            Not Before: Nov 30 20:14:02 2023 GMT
            Not After : Nov 28 20:19:02 2024 GMT
        Subject: CN=C42BD1808728D5B1D55AAF3EB2B1E1160D60D1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a5:49:b7:1b:bb:f5:79:30:e3:c5:f1:93:43:
                    20:48:17:fa:22:45:e4:bf:0d:64:26:b8:31:76:a0:
                    ff:05:5d:d6:be:c3:c2:b4:a2:d5:ca:29:87:28:89:
                    54:c0:43:07:da:07:62:df:99:b0:6f:ea:29:8d:fa:
                    45:5f:dd:49:d4:66:b0:7b:e2:6a:4b:22:c3:13:3a:
                    c1:7c:84:21:4a:6e:a5:94:a4:1a:21:12:a8:97:a8:
                    8e:ef:2e:8d:f6:0d:20:dc:1f:b0:78:7d:86:8e:b6:
                    9c:cb:81:2e:1c:dd:e0:86:df:42:01:5d:61:ac:f3:
                    e2:ce:16:c8:64:bd:4d:19:4f:1a:42:44:5a:9f:70:
                    07:36:fe:4a:96:3f:78:ef:a4:99:e5:25:06:38:db:
                    fd:f9:04:c1:87:91:69:2f:e8:20:49:86:7a:b8:63:
                    1b:6c:0d:9d:35:cf:ca:75:13:d9:90:6a:af:45:70:
                    19:49:aa:41:bd:97:b8:c4:17:df:d9:65:e0:d6:ef:
                    c3:e9:d0:28:66:b7:34:db:fb:ad:6c:f2:c1:d1:a3:
                    e2:e0:c9:de:2f:3d:01:29:89:cd:1c:5e:5a:44:8b:
                    dc:9e:ba:33:40:96:0d:87:a8:65:1a:93:11:3c:ca:
                    f6:c0:ad:bf:8d:96:2b:c4:61:e1:84:9d:cc:a9:85:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2B:D1:80:87:28:D5:B1:D5:5A:AF:3E:B2:B1:E1:16:0D:60:D1:DC
            X509v3 Authority Key Identifier:
                keyid:78:15:1C:7A:ED:02:4C:90:94:56:57:A6:AA:5E:C7:8F:61:0B:0D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/78151C7AED024C90945657A6AA5EC78F610B0D64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78151C7AED024C90945657A6AA5EC78F610B0D64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/0/3136342e3136332e32302e302f32322d3232203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:3a:28:26:25:02:25:3d:62:9b:3b:6d:4d:1a:25:e9:14:80:
         8d:2b:cc:29:51:43:ab:03:19:98:dc:55:92:0e:4c:32:0c:6b:
         3a:35:4b:a9:89:1b:f9:3b:27:a1:86:a5:0b:1c:c3:ca:eb:27:
         b8:04:de:ea:3a:3d:54:21:fc:ca:2f:c2:fc:ea:1f:b7:d6:bc:
         f2:31:88:f8:09:3f:79:cf:f9:7d:2c:68:d0:6e:c9:eb:69:64:
         ea:dc:3d:79:69:42:aa:09:1b:16:ae:04:7b:50:cf:44:d1:11:
         6d:f0:c2:20:d5:94:d0:7d:ba:e3:2c:43:46:7a:dd:56:62:e3:
         c8:65:f5:ab:8e:7b:51:3d:b3:5c:fa:f5:2b:17:3c:c9:6b:f9:
         77:2b:5e:65:be:22:66:3c:f1:e8:9c:da:a6:bc:45:fe:51:6d:
         bf:cc:32:7a:6f:34:97:da:90:d1:8d:b5:af:0b:56:90:43:01:
         ce:7e:9d:01:83:fc:eb:18:f4:0b:b1:d3:ee:e1:d8:22:fa:52:
         4e:b4:fb:ed:24:70:36:c6:46:58:96:67:9c:15:9e:08:75:fa:
         69:d2:7a:88:68:76:72:a2:b5:39:b7:d0:57:be:c2:6b:27:a3:
         bd:fc:09:45:ba:29:82:5b:00:f1:ad:b1:bf:37:f4:a3:90:c3:
         dc:5a:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org