Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134342e302f32342d3234203d3e20323635393832.roa
File:                     3136342e3136332e3134342e302f32342d3234203d3e20323635393832.roa (raw, json)
Hash identifier:          EyhzxfOjFrmrhkZ3KB4QzKDEQxeeNbxePPKbWvFhc3c=
Subject key identifier:   E4:0A:6B:3C:D4:04:1B:8E:12:85:66:76:31:88:73:EC:C4:48:7D:C7
Certificate issuer:       /CN=BBAA988D47E837300BB1551B443A99CB6B4A8DDE
Certificate serial:       2F6310FC5A00C6FAC6941E86ADE1A80E4521F102
Authority key identifier: BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134342e302f32342d3234203d3e20323635393832.roa
Signing time:             Thu 25 Aug 2022 17:00:00 +0000
ROA not before:           Thu 25 Aug 2022 16:55:00 +0000
ROA not after:            Thu 24 Aug 2023 17:00:00 +0000
asID:                     265982
IP address blocks:        164.163.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:63:10:fc:5a:00:c6:fa:c6:94:1e:86:ad:e1:a8:0e:45:21:f1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBAA988D47E837300BB1551B443A99CB6B4A8DDE
        Validity
            Not Before: Aug 25 16:55:00 2022 GMT
            Not After : Aug 24 17:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:02:d5:b8:c3:07:6f:36:20:ae:86:8b:3d:6e:
                    2a:2a:dc:71:8c:5a:e6:84:e5:52:1f:e9:ff:9e:1a:
                    79:e3:7f:ab:fc:ec:70:4d:d1:07:bf:22:c2:3f:69:
                    e9:a4:9d:f2:98:c8:68:ee:87:bc:48:8e:d3:c1:1f:
                    08:dc:87:fd:51:41:cb:f0:08:6e:04:4c:1c:44:e8:
                    79:c4:ad:37:3f:4d:15:6f:af:11:7a:07:a5:3c:f7:
                    4d:84:91:a8:88:a2:87:b4:77:31:e6:b9:0e:64:a8:
                    e0:77:b7:2b:50:1c:33:f8:84:65:63:3d:65:a1:82:
                    ff:cc:a7:fe:e6:d6:2d:00:a7:e9:8b:c4:c7:2d:00:
                    56:ce:bb:4c:bf:2a:2c:2a:e8:b8:fb:13:18:ec:62:
                    83:b3:d3:5d:b6:6d:53:fa:aa:a9:d7:22:f1:07:b3:
                    e8:36:ab:24:51:3d:48:a8:7f:b5:2f:47:9b:5c:48:
                    d4:09:72:c7:f6:4b:9a:0d:a5:73:5b:76:f5:44:d3:
                    2a:46:fd:68:04:20:f5:3e:2a:7a:6c:49:aa:02:b3:
                    df:27:40:10:5e:a2:77:5b:39:48:91:be:e8:03:ec:
                    bf:3e:e8:fa:ca:e5:c1:f7:91:7c:03:9a:b1:fc:2e:
                    f0:5b:0d:83:26:4f:77:70:85:d7:b0:75:8e:e6:ee:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0A:6B:3C:D4:04:1B:8E:12:85:66:76:31:88:73:EC:C4:48:7D:C7
            X509v3 Authority Key Identifier:
                keyid:BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134342e302f32342d3234203d3e20323635393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:4f:d8:85:2d:f1:fa:ed:fc:6f:fc:df:b6:1b:fc:14:b4:f2:
         82:02:86:3e:c4:fa:f0:1e:85:50:89:ef:32:0f:8f:27:f7:0e:
         b5:43:c1:91:00:bb:c3:38:3e:c4:cf:bf:04:51:2a:7a:ff:19:
         53:6e:ad:b1:27:7a:bb:4d:f3:0c:ed:14:1f:0d:9d:d9:d3:db:
         67:9d:14:f6:ae:74:13:fa:95:bb:9b:08:9f:97:ea:81:2b:13:
         65:e5:57:34:66:78:62:07:1b:0a:3e:e5:d8:03:f5:92:fa:84:
         5b:72:f7:f8:2a:28:2f:a8:9d:51:7f:ff:f2:10:8e:31:b9:cc:
         fd:7f:a3:c9:5f:d1:d2:7d:2b:08:1c:38:4d:d8:11:2d:96:d0:
         60:8d:36:3a:16:35:77:66:7d:e3:bc:8e:b3:cc:c8:14:91:1e:
         a4:ae:32:12:9d:42:36:17:22:6b:52:97:42:bc:31:77:e4:2f:
         01:91:ea:9e:ea:8e:a6:34:17:60:4a:31:93:52:f8:f2:33:58:
         85:e4:03:57:d5:da:d2:a6:da:24:b9:1c:38:7c:43:26:ef:b5:
         fe:5b:84:65:6e:8e:2b:9a:8e:a2:f1:a9:6f:e2:64:df:b9:65:
         fd:8f:98:7e:78:83:fd:d0:ad:c1:34:5d:dd:9f:ad:9f:bb:28:
         e4:ae:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org