Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa
File:                     3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa (raw, json)
Hash identifier:          SwNfwgH/oSRFuwHfGFaE6jS5Xgl7BCj8pw+plkuCRpQ=
Subject key identifier:   01:AF:6D:4B:CA:CA:F0:DA:4A:87:0A:2E:78:B4:01:66:E4:B2:F1:56
Certificate issuer:       /CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
Certificate serial:       4BCF0964EF4733650D8BCD9609311543D809A45B
Authority key identifier: C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa
Signing time:             Thu 28 Mar 2024 23:18:44 +0000
ROA not before:           Thu 28 Mar 2024 23:13:44 +0000
ROA not after:            Thu 27 Mar 2025 23:18:44 +0000
asID:                     267455
IP address blocks:        164.163.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cf:09:64:ef:47:33:65:0d:8b:cd:96:09:31:15:43:d8:09:a4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
        Validity
            Not Before: Mar 28 23:13:44 2024 GMT
            Not After : Mar 27 23:18:44 2025 GMT
        Subject: CN=01AF6D4BCACAF0DA4A870A2E78B40166E4B2F156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:d6:66:43:25:17:9a:74:55:aa:b7:7d:40:
                    1f:47:0d:64:59:60:30:20:30:fd:cf:0a:39:cf:a6:
                    9c:00:a3:06:09:89:b1:e2:bd:eb:5c:6f:47:43:ae:
                    ec:12:86:06:3c:81:88:ba:54:84:81:2f:bf:ad:6c:
                    2e:09:9a:e9:87:a0:e4:39:e8:96:aa:87:09:6d:60:
                    24:ee:e8:a5:b6:f9:2d:05:5d:be:32:1d:3b:39:2b:
                    09:ff:49:b2:0a:29:cf:46:cf:88:2f:b9:c2:3b:de:
                    86:97:1a:65:64:14:e6:a0:0a:46:87:76:c4:05:8d:
                    a8:07:7e:d5:5f:a3:89:a6:38:3a:74:ce:ab:62:ab:
                    2e:e6:91:f8:48:0d:a1:32:7b:29:60:00:34:35:0f:
                    f9:09:73:9e:d3:58:90:17:2a:40:32:b1:da:e8:ca:
                    02:24:3c:5c:e3:27:f0:a9:03:94:b3:6a:af:0e:81:
                    f0:98:db:c0:c2:9a:25:31:b2:a0:84:b5:8d:50:27:
                    2b:d2:1e:de:d5:57:a0:3c:fc:24:08:bb:7b:c8:cd:
                    ed:bf:95:82:00:37:a4:63:99:60:a8:a9:cc:8b:02:
                    e0:50:36:ca:b0:a6:32:92:34:ec:fd:90:df:6d:1c:
                    e0:31:50:ec:3b:60:75:3d:2c:a9:8e:3a:fc:45:28:
                    c4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AF:6D:4B:CA:CA:F0:DA:4A:87:0A:2E:78:B4:01:66:E4:B2:F1:56
            X509v3 Authority Key Identifier:
                keyid:C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:40:0e:94:4b:c7:0e:3e:fe:89:52:09:1e:47:d3:10:ce:43:
         d6:a1:ec:eb:0f:cd:3b:5b:81:be:d4:66:2e:eb:63:cf:4e:72:
         be:af:95:5f:67:de:f6:78:0e:52:7a:fb:9e:c5:98:c3:cf:78:
         9b:a9:b8:e0:06:f1:ad:30:51:79:21:45:bd:0b:6d:96:05:ef:
         27:a3:69:6e:e2:20:97:92:51:a1:36:7d:56:5e:db:96:52:17:
         a1:3c:a7:f3:54:2c:88:fc:f1:f1:26:f7:de:d1:81:e6:50:0e:
         f5:84:d7:f4:d1:5f:23:90:7c:70:01:7a:3c:cf:ec:4b:d6:27:
         9f:b5:13:58:b3:93:55:ce:f9:a7:eb:4d:27:01:fc:e7:dc:46:
         ac:2f:25:60:2e:d1:57:45:f8:23:8e:d5:1c:8b:7a:98:78:1c:
         5b:94:d9:d0:e2:9b:6d:d0:b6:85:06:13:36:74:22:ff:7f:3b:
         23:82:8e:23:03:2a:e3:b9:69:4c:a2:d3:96:01:76:01:a9:8c:
         57:19:0e:69:d3:f6:bb:04:a1:9c:75:9b:d9:02:1e:5b:aa:cc:
         c7:b4:f2:ba:55:f9:18:2b:13:7d:29:5b:15:d5:a4:2b:6b:b1:
         de:1a:48:1d:ca:7a:a8:49:1a:d3:e9:2e:6e:fe:f4:cc:59:3c:
         82:9e:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org