Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134362e302f32332d3233203d3e20323635393832.roa
File:                     3136342e3136332e3134362e302f32332d3233203d3e20323635393832.roa (raw, json)
Hash identifier:          v6SVnf2Fz0qJupc7tyRF8Mi/MvXQo+qOzyuMiMevzTg=
Subject key identifier:   E6:63:5C:70:48:21:0B:14:05:F8:74:FB:EE:73:CF:25:7F:B0:7F:7C
Certificate issuer:       /CN=BBAA988D47E837300BB1551B443A99CB6B4A8DDE
Certificate serial:       0A2D2577B4FC90F44ED38316A145337516AA4487
Authority key identifier: BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134362e302f32332d3233203d3e20323635393832.roa
Signing time:             Thu 25 Aug 2022 17:00:00 +0000
ROA not before:           Thu 25 Aug 2022 16:55:00 +0000
ROA not after:            Thu 24 Aug 2023 17:00:00 +0000
asID:                     265982
IP address blocks:        164.163.146.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2d:25:77:b4:fc:90:f4:4e:d3:83:16:a1:45:33:75:16:aa:44:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBAA988D47E837300BB1551B443A99CB6B4A8DDE
        Validity
            Not Before: Aug 25 16:55:00 2022 GMT
            Not After : Aug 24 17:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:38:6b:31:37:a7:6e:fa:8f:94:49:da:ef:
                    7f:1f:1d:93:5f:fd:b4:57:46:5f:bd:0b:88:b5:f9:
                    c5:1c:38:1d:df:f2:d7:cf:2c:b8:b0:58:12:cd:e3:
                    29:89:6d:22:db:07:55:5b:06:89:a7:32:e1:85:1a:
                    b0:4e:1b:7d:93:87:52:8e:af:fd:83:95:79:76:7e:
                    be:fd:a3:f7:39:4c:1b:0b:23:43:7e:a7:96:b1:97:
                    47:72:02:b3:36:86:07:19:8c:38:d2:21:e1:89:a2:
                    8f:d4:93:0c:94:f4:ce:ef:78:b4:e7:c8:90:d7:1c:
                    6a:d4:50:e8:81:ac:eb:ed:40:de:3e:8e:2b:9d:ab:
                    0d:5f:a5:73:1c:f5:ca:b4:ce:fc:a1:2a:0a:6a:49:
                    c9:4a:77:34:5e:ae:21:7f:7c:97:92:cf:5d:66:07:
                    ce:be:51:0f:c7:4d:8e:c2:6a:a2:f6:2e:3f:10:ee:
                    69:80:28:71:c0:22:2a:f8:96:e8:83:90:9f:07:f8:
                    0c:2d:50:4d:c5:2f:09:ea:21:fa:04:b6:cf:20:b8:
                    4e:e4:4f:54:7a:c4:ab:68:ac:fd:42:3e:4f:4b:19:
                    b5:1a:5a:f2:c2:b5:d8:9d:d8:e9:31:1f:24:2f:fa:
                    56:45:ed:47:70:5b:2c:00:11:e1:f0:c9:91:c0:fb:
                    65:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:63:5C:70:48:21:0B:14:05:F8:74:FB:EE:73:CF:25:7F:B0:7F:7C
            X509v3 Authority Key Identifier:
                keyid:BB:AA:98:8D:47:E8:37:30:0B:B1:55:1B:44:3A:99:CB:6B:4A:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBAA988D47E837300BB1551B443A99CB6B4A8DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4V6sT6cbjFnqfTNmh1at6dDonzH8u1KEXie5XJM9LTos/0/3136342e3136332e3134362e302f32332d3233203d3e20323635393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:41:24:b8:9b:52:46:64:cf:40:b0:12:51:a0:a4:3a:d9:02:
         7b:3b:4e:2e:74:e0:8b:e2:32:ec:3d:87:d6:62:53:9e:ca:62:
         6a:d7:44:9e:a0:94:77:b1:63:be:46:74:7c:a7:72:8d:0b:04:
         2b:b6:90:f3:7c:77:e6:f8:65:7e:35:c9:8b:45:0d:6d:d2:24:
         24:02:64:29:72:14:1b:61:91:d5:86:c7:cb:bf:10:6f:8b:d3:
         06:ab:b6:a7:e4:90:b8:4c:3d:a1:73:a4:f3:a3:5f:91:3e:ce:
         86:da:d6:a7:ec:5f:1f:4a:b4:a6:5f:9c:6a:b8:a6:58:13:ff:
         2d:4b:38:21:7e:0f:27:91:44:11:c9:37:13:d9:56:d3:97:63:
         aa:4e:e1:ae:83:bb:72:32:da:d5:3f:fc:18:10:24:ad:70:00:
         8b:2c:56:de:b2:72:06:0c:f4:6d:ba:d5:d2:41:98:fc:83:3f:
         2e:8d:0e:dd:78:c1:12:de:eb:e5:66:58:63:68:f7:f2:b6:cb:
         07:b1:04:25:f0:18:fe:8d:d1:87:79:2e:59:df:4d:a6:74:aa:
         60:ca:33:f7:db:ec:f9:69:31:63:d0:62:c4:b0:48:8c:c7:34:
         a3:fe:45:35:62:6c:4a:f0:78:80:37:c6:2d:21:af:17:ba:5d:
         43:b2:78:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org