Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3136372e3235302e38302e302f32322d3234203d3e20323632353032.roa
File:                     3136372e3235302e38302e302f32322d3234203d3e20323632353032.roa (raw, json)
Hash identifier:          UgOiAlNrffcAo4MXueGjH/7pWMjYcUiS1n4N3lmY0w0=
Subject key identifier:   6D:E3:DE:0B:75:B8:67:4C:32:94:6D:9C:89:F2:BB:40:14:AE:9E:99
Certificate issuer:       /CN=BF977F78777D6EE714F2CC1F0A8242EB6809E7C0
Certificate serial:       72059FAF340623A79DD4D48DC1344323744878E8
Authority key identifier: BF:97:7F:78:77:7D:6E:E7:14:F2:CC:1F:0A:82:42:EB:68:09:E7:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3136372e3235302e38302e302f32322d3234203d3e20323632353032.roa
Signing time:             Fri 17 Nov 2023 19:15:05 +0000
ROA not before:           Fri 17 Nov 2023 19:10:05 +0000
ROA not after:            Fri 15 Nov 2024 19:15:05 +0000
asID:                     262502
IP address blocks:        167.250.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:05:9f:af:34:06:23:a7:9d:d4:d4:8d:c1:34:43:23:74:48:78:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF977F78777D6EE714F2CC1F0A8242EB6809E7C0
        Validity
            Not Before: Nov 17 19:10:05 2023 GMT
            Not After : Nov 15 19:15:05 2024 GMT
        Subject: CN=6DE3DE0B75B8674C32946D9C89F2BB4014AE9E99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:bb:a1:af:a5:48:71:ed:c0:1e:4d:d9:a4:
                    d2:33:34:c5:d6:dc:10:4a:ca:e9:45:b5:1a:d2:bd:
                    f4:79:b3:38:3d:32:09:b0:96:10:ab:61:71:6e:a2:
                    33:0e:84:c9:54:5c:1e:65:c8:4a:61:96:f4:0e:d7:
                    42:2a:52:41:ed:ab:3e:25:50:be:7f:c0:26:a9:bd:
                    1a:02:fc:c7:2d:3f:ec:52:7b:b5:46:9e:b0:43:e9:
                    0c:0f:09:6d:40:be:6b:d6:b2:54:aa:3a:d5:43:8c:
                    2f:e6:21:16:02:96:b4:e9:4c:6b:45:3a:fc:f2:45:
                    36:db:87:33:f5:37:05:05:cf:02:c4:dc:9f:09:93:
                    7c:e1:11:b7:55:a9:eb:5d:d0:d3:0d:02:0c:7c:a6:
                    e2:3a:07:45:2c:f9:09:cc:56:45:db:02:e1:a2:69:
                    57:ee:cf:57:19:7b:fd:c7:7a:8f:e1:25:43:ad:fb:
                    e9:f9:2a:07:0f:e2:c3:ac:90:f7:83:77:74:7b:52:
                    8c:39:de:06:76:54:b3:24:a2:9f:07:19:48:8b:12:
                    27:f6:58:f0:7d:45:23:71:ca:f0:8b:26:24:29:d4:
                    83:3d:e7:e3:90:e8:cf:0e:d9:68:cb:d5:4f:6f:ab:
                    f3:3e:69:5f:11:58:07:0a:7e:0a:3e:e1:a3:b5:f9:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E3:DE:0B:75:B8:67:4C:32:94:6D:9C:89:F2:BB:40:14:AE:9E:99
            X509v3 Authority Key Identifier:
                keyid:BF:97:7F:78:77:7D:6E:E7:14:F2:CC:1F:0A:82:42:EB:68:09:E7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF977F78777D6EE714F2CC1F0A8242EB6809E7C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3136372e3235302e38302e302f32322d3234203d3e20323632353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:43:3d:f1:8e:23:08:42:80:cf:cf:8b:f9:b8:65:84:d5:c8:
         31:eb:b3:f2:26:1d:cc:a1:23:88:2b:11:6b:25:51:a8:de:d8:
         44:e3:2d:12:d1:ed:e1:b7:ea:54:d6:c9:5a:79:92:f0:00:74:
         a0:d6:bc:1a:8c:0d:6f:78:e0:a9:1a:b6:46:93:a6:90:48:b2:
         1f:da:2b:06:aa:a6:c7:1e:2a:d3:56:fd:db:ad:50:04:6c:85:
         08:f4:d2:b2:4d:00:ac:fc:6b:c6:26:fb:2c:08:90:12:ef:90:
         54:bb:33:fa:9f:d2:14:3d:55:c0:cc:56:fa:e4:d3:5c:58:a3:
         06:02:28:e1:3d:2d:40:99:86:c8:c0:4c:63:53:96:b0:4e:03:
         9d:5c:04:18:5d:04:a1:4d:2d:82:3f:45:16:05:9f:67:5e:89:
         0b:28:3d:8e:6f:ad:99:06:8c:30:8e:7a:4c:91:52:14:4c:04:
         06:54:e8:43:4e:f8:fb:69:e3:bb:3c:b6:22:05:c2:eb:3d:1b:
         28:f8:70:f4:62:f1:b1:20:d5:a0:03:d7:ca:0a:f1:87:3a:3b:
         6d:b5:0d:bc:4e:bc:9b:6b:3a:c4:64:2c:60:89:f1:62:eb:b4:
         35:c5:b4:f4:be:b3:ab:76:e1:d0:9d:95:4a:74:88:a5:73:11:
         6f:88:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org