Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3139372e3231342e302f32332d3233203d3e20323632383638.roa
File:                     3136382e3139372e3231342e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          65Orqc2upGChB5KW3qAIQmWoF7I6cg+8Jm5x9AoNDdY=
Subject key identifier:   B9:CF:91:70:CD:93:3B:A5:0F:FB:A9:B6:79:0F:E8:D5:56:95:D2:F4
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       69DB577B1458131E44A8A4262A58BD69F86826CA
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3139372e3231342e302f32332d3233203d3e20323632383638.roa
Signing time:             Sat 22 Jul 2023 21:39:21 +0000
ROA not before:           Sat 22 Jul 2023 21:34:21 +0000
ROA not after:            Sat 20 Jul 2024 21:39:21 +0000
asID:                     262868
IP address blocks:        168.197.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:db:57:7b:14:58:13:1e:44:a8:a4:26:2a:58:bd:69:f8:68:26:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Jul 22 21:34:21 2023 GMT
            Not After : Jul 20 21:39:21 2024 GMT
        Subject: CN=B9CF9170CD933BA50FFBA9B6790FE8D55695D2F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:84:a7:8f:90:bd:74:86:1a:37:85:dd:1c:
                    97:31:a4:ce:74:99:84:a0:47:42:39:b3:b8:2a:f7:
                    83:0e:10:b5:0d:01:31:dd:ba:94:d1:ee:e3:a5:fd:
                    d2:f1:5a:cc:5e:4a:01:6e:29:6b:72:8d:1a:3b:b9:
                    e1:09:6d:5c:87:54:d4:bf:24:92:29:91:8a:dc:6c:
                    75:91:1d:82:c9:bc:98:ae:f0:5a:b2:c0:21:1f:18:
                    ea:87:50:9e:f9:d9:d6:27:93:0a:26:b6:9f:53:d1:
                    89:0f:1f:97:aa:a4:c1:42:66:be:73:ce:8d:9d:d9:
                    bc:95:22:d7:a6:00:94:14:55:ff:be:d0:d1:c3:81:
                    07:36:91:a4:42:c5:df:ca:32:13:91:39:a4:99:51:
                    d7:3b:e0:07:7c:d4:00:5e:81:c2:96:b4:3e:68:76:
                    b7:59:e7:94:b9:e2:7e:e6:d2:1b:90:bd:cd:03:e7:
                    8e:b4:47:c1:f4:7c:a5:80:d6:67:cf:f3:d4:a3:d0:
                    b4:18:64:3a:37:8e:d7:3f:06:88:99:e3:37:de:a4:
                    ac:d8:2f:25:5a:c4:a9:1a:d8:12:a0:6b:1d:8b:02:
                    eb:4d:cd:fb:ea:cb:f6:39:35:67:55:ea:11:f3:8f:
                    cc:5e:5a:43:d5:77:a5:ee:9f:2d:c7:41:ca:8d:b5:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CF:91:70:CD:93:3B:A5:0F:FB:A9:B6:79:0F:E8:D5:56:95:D2:F4
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136382e3139372e3231342e302f32332d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:27:c6:05:ce:bf:c4:d8:f9:85:46:64:39:06:d0:31:b4:c2:
         66:6f:36:34:4b:eb:54:78:c9:c2:a2:03:4f:00:13:ae:b9:6e:
         9b:ad:70:f9:a7:f3:de:53:22:56:d6:26:5b:b0:c0:f5:17:4b:
         be:3a:b9:95:77:ed:21:23:17:ff:ca:8a:21:6a:c4:4a:83:5a:
         f2:29:20:d4:43:1c:8d:ee:8f:33:0c:7a:eb:3e:44:3c:02:a0:
         ba:98:6b:84:c6:6b:d4:4d:c9:33:4c:32:35:59:b5:35:17:9e:
         a7:76:53:f0:87:56:c5:a5:99:b0:0b:49:9a:50:f6:96:1b:ef:
         44:f3:61:35:82:70:a2:ae:d8:c3:40:ea:c0:ab:4a:e0:ee:5c:
         b7:95:83:b2:fa:45:21:b2:56:4a:c1:48:c8:b7:75:38:ae:37:
         37:2f:e2:9e:90:60:54:be:a3:46:d8:7b:9c:90:90:e7:c2:62:
         88:df:98:dd:1e:3b:48:10:c3:e6:eb:03:b9:40:41:cb:09:46:
         b5:6e:b6:15:bc:e4:3e:61:de:56:0f:e0:51:8d:f5:44:d6:d6:
         35:96:30:72:12:ba:ab:e8:e7:a5:0c:70:cf:0e:eb:d0:b8:26:
         95:07:f6:3b:c9:4d:1d:bf:a4:86:69:bc:62:88:74:41:b1:e5:
         4c:f9:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org