Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa
File:                     3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          6OzqKun7v2+4HGAL+Ozbz1G1LgkHOIPsjMAFhwJY4hI=
Subject key identifier:   BD:60:50:76:1C:FB:12:C7:66:72:C2:4C:6E:22:D0:39:61:C9:4B:99
Certificate issuer:       /CN=6B7F9AA02EB21C2A9C3090165A06361CBE0662CC
Certificate serial:       0FECE2D3B72B21E55DB178C3B3B630D9883DDE78
Authority key identifier: 6B:7F:9A:A0:2E:B2:1C:2A:9C:30:90:16:5A:06:36:1C:BE:06:62:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa
Signing time:             Fri 11 Aug 2023 20:08:25 +0000
ROA not before:           Fri 11 Aug 2023 20:03:25 +0000
ROA not after:            Fri 09 Aug 2024 20:08:25 +0000
asID:                     265066
IP address blocks:        168.121.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ec:e2:d3:b7:2b:21:e5:5d:b1:78:c3:b3:b6:30:d9:88:3d:de:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B7F9AA02EB21C2A9C3090165A06361CBE0662CC
        Validity
            Not Before: Aug 11 20:03:25 2023 GMT
            Not After : Aug  9 20:08:25 2024 GMT
        Subject: CN=BD6050761CFB12C76672C24C6E22D03961C94B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:14:eb:e8:d3:f6:e6:97:a9:d9:63:05:96:7c:
                    ed:4a:5c:ee:59:15:f4:a8:c9:58:0e:d0:03:01:47:
                    6c:6b:33:76:c4:af:ef:6a:98:e8:52:a4:3f:10:e8:
                    ba:bf:ab:6d:04:0b:dc:42:23:82:16:63:67:3b:7c:
                    4c:8b:3d:39:d4:14:59:5b:d4:45:a2:6d:17:a2:cc:
                    ec:cc:46:6c:e3:0e:cd:ec:5b:a3:a3:02:c0:22:f8:
                    54:06:00:4c:5d:02:d5:13:1e:6e:9d:6a:87:53:46:
                    fb:19:82:e5:42:c4:af:01:bf:6e:d2:1b:41:ee:35:
                    eb:fa:2d:69:05:c6:55:2e:30:43:25:c6:78:4b:d1:
                    2d:df:8d:ab:d5:06:85:8a:26:4e:59:c8:9d:f3:f5:
                    a4:71:7d:aa:80:7a:25:e2:7b:b4:c5:95:d3:69:58:
                    11:64:47:f8:58:6a:70:17:46:35:8d:ca:96:0e:1a:
                    c7:a1:47:5b:a7:39:45:16:20:01:1d:95:db:a6:87:
                    5f:b2:46:51:b9:8a:ca:38:96:52:19:29:38:09:82:
                    83:68:8d:30:15:36:4d:4d:10:af:fc:30:e5:78:25:
                    ce:80:7a:b1:de:de:ae:22:52:7a:9d:95:28:29:ba:
                    62:06:42:f1:4d:3e:dc:ec:b8:50:f6:54:72:18:6e:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:60:50:76:1C:FB:12:C7:66:72:C2:4C:6E:22:D0:39:61:C9:4B:99
            X509v3 Authority Key Identifier:
                keyid:6B:7F:9A:A0:2E:B2:1C:2A:9C:30:90:16:5A:06:36:1C:BE:06:62:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:37:b8:ff:0b:a2:d3:c0:50:15:1f:60:0a:3c:cd:6b:6c:54:
         8f:b7:5b:53:cf:17:d5:97:4b:5f:da:a9:a4:b3:f8:40:11:25:
         5d:8a:b5:32:39:cc:e3:e0:5b:f5:b3:3a:ff:78:26:9d:8f:6c:
         43:9c:10:99:ef:d3:62:a1:c4:43:2d:6e:96:39:43:b0:77:5e:
         a8:38:c3:26:53:19:0b:16:d2:71:30:c5:c4:02:8a:35:32:7b:
         c1:6a:df:8f:15:cb:5d:c9:88:95:f4:52:be:f2:6a:44:1f:5f:
         59:5f:a9:25:e0:be:44:e9:d2:d0:5d:6a:da:bd:db:ba:37:00:
         48:3c:c0:b1:12:52:35:fd:9e:6a:8a:c2:09:22:9a:d2:58:03:
         6a:3b:43:bd:4e:15:96:ef:9e:fc:8c:19:da:71:1f:72:cb:91:
         83:36:11:a4:0a:bc:f9:85:a6:b4:bb:b3:27:fa:50:e8:88:97:
         e6:d0:56:1a:c1:b8:30:b3:1e:8d:37:7c:9c:5c:f0:da:ad:76:
         75:f9:4d:9e:26:6d:c3:85:24:a1:c3:2c:c1:6e:08:a6:43:95:
         d4:8c:f8:01:f5:8b:27:70:50:1e:b4:d4:62:56:e2:de:49:5d:
         19:93:e1:2b:1c:5d:52:bb:9a:f3:33:b2:aa:52:d2:76:e0:07:
         8b:6c:35:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org