Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa
File:                     3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa (raw, json)
Hash identifier:          T1O+xKe/c9u+z0tAUGs4DdOsDPcEoBTEH4XJTOmI6QA=
Subject key identifier:   DB:B0:BD:B2:E7:B3:A5:27:E1:D2:EA:25:4C:28:FA:FD:6E:5D:02:8D
Certificate issuer:       /CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
Certificate serial:       095069F797051E5D449A93F681F7F527EC513F6A
Authority key identifier: C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa
Signing time:             Fri 05 Apr 2024 14:04:08 +0000
ROA not before:           Fri 05 Apr 2024 13:59:08 +0000
ROA not after:            Fri 04 Apr 2025 14:04:08 +0000
asID:                     267455
IP address blocks:        164.163.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:50:69:f7:97:05:1e:5d:44:9a:93:f6:81:f7:f5:27:ec:51:3f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
        Validity
            Not Before: Apr  5 13:59:08 2024 GMT
            Not After : Apr  4 14:04:08 2025 GMT
        Subject: CN=DBB0BDB2E7B3A527E1D2EA254C28FAFD6E5D028D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ed:d4:ca:96:8c:39:f2:ed:7b:a3:06:fb:f0:
                    14:25:62:44:c5:ec:79:89:77:77:b0:b0:19:f8:71:
                    5d:3f:7c:ac:c6:4a:ad:cf:a4:d2:88:fc:d3:40:61:
                    09:83:7c:09:38:27:18:fc:ca:09:d4:27:34:e9:44:
                    de:93:b6:82:37:f6:10:83:93:7f:1a:de:54:b8:29:
                    97:1f:6d:16:66:2f:ca:95:2a:bd:f0:77:99:05:a6:
                    32:ad:56:ef:ea:1a:de:db:ee:4e:8f:a6:d2:1b:09:
                    a1:2c:96:81:1d:d0:8b:a5:eb:cc:a5:dc:da:53:69:
                    62:7f:d3:df:3f:c2:7e:e4:32:a8:0e:d1:3f:92:d9:
                    8b:cb:1b:58:b3:aa:5a:58:b5:a9:dc:aa:d0:95:51:
                    a2:24:d1:80:bc:b6:f7:a2:18:bf:6e:be:46:a9:2f:
                    94:ad:c4:a6:a1:fa:e7:ac:6e:47:2b:91:f3:2b:d5:
                    0b:53:72:eb:e2:8c:0f:fe:7b:85:d2:81:c4:fd:5f:
                    40:1c:80:29:4c:4e:b6:54:31:9c:bb:c1:3c:48:97:
                    bd:95:f9:ec:52:e9:cc:8e:66:cb:8c:c0:26:08:5d:
                    66:39:8e:3b:28:2a:05:e4:bc:3b:86:e9:c2:12:50:
                    9f:e7:de:bb:ce:3a:d2:97:1c:eb:3a:90:84:a8:1c:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B0:BD:B2:E7:B3:A5:27:E1:D2:EA:25:4C:28:FA:FD:6E:5D:02:8D
            X509v3 Authority Key Identifier:
                keyid:C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:6b:42:af:0e:bd:4e:e9:bb:f2:b9:59:fd:06:ae:69:fb:54:
         a2:5f:29:f6:36:f2:30:96:75:b5:03:38:ae:5b:d8:23:1f:b4:
         52:32:4e:1e:a1:05:97:71:b2:55:99:7e:02:2c:a2:28:a7:01:
         e1:b9:50:40:20:dd:a9:66:3e:8f:a3:8e:24:f9:5b:ea:ca:a9:
         19:63:35:86:76:d8:b8:2c:a9:9a:e1:d8:ab:f8:17:81:41:8f:
         39:2f:97:31:7a:bd:12:c8:b2:25:c0:f3:60:94:56:0c:9a:5c:
         7d:a8:2d:4e:29:bf:b1:e4:3b:d4:41:4b:4b:e5:87:9f:51:56:
         bd:b0:52:04:fe:b7:61:6f:81:25:c6:72:03:dd:55:54:b9:b4:
         15:c7:ec:c4:65:2e:0f:4b:9b:ff:7e:24:2a:6b:7b:a2:6c:2f:
         82:5f:0d:7e:c5:e5:a1:bc:4f:3a:5a:fa:47:ab:2e:b9:1a:35:
         9b:9a:b6:f7:13:67:de:8a:ef:fc:34:38:77:27:d0:25:e0:bd:
         ea:a4:77:0b:65:c7:a0:50:af:ad:6b:2d:60:5b:36:dd:0f:77:
         c9:f2:91:77:34:d1:cd:09:0c:09:c0:0e:d7:ae:10:85:82:18:
         00:9b:a2:56:8e:7c:6e:a9:44:22:19:0e:5d:74:87:c3:93:26:
         3a:fb:16:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org