Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231322e302f32322d3234203d3e20323635343732.roa
File:                     3136382e3139362e3231322e302f32322d3234203d3e20323635343732.roa (raw, json)
Hash identifier:          sdXNCmu3eYLC2JSpnkKaIlnTbyFcc/bIbzjDXTV2cIs=
Subject key identifier:   23:17:BE:76:B4:28:47:B6:E6:01:9E:11:D0:87:53:26:8B:10:0B:4A
Certificate issuer:       /CN=B09F555E338DACE2F046F7B3C94528216109B8C5
Certificate serial:       1B2C6F2C9658A79F407FDECB5E71791A0DA3382B
Authority key identifier: B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231322e302f32322d3234203d3e20323635343732.roa
Signing time:             Wed 13 Sep 2023 17:31:16 +0000
ROA not before:           Wed 13 Sep 2023 17:26:16 +0000
ROA not after:            Wed 11 Sep 2024 17:31:16 +0000
asID:                     265472
IP address blocks:        168.196.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2c:6f:2c:96:58:a7:9f:40:7f:de:cb:5e:71:79:1a:0d:a3:38:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09F555E338DACE2F046F7B3C94528216109B8C5
        Validity
            Not Before: Sep 13 17:26:16 2023 GMT
            Not After : Sep 11 17:31:16 2024 GMT
        Subject: CN=2317BE76B42847B6E6019E11D08753268B100B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:00:42:5e:86:fe:44:7f:a0:d4:46:4a:70:
                    26:3a:51:0e:11:ce:37:06:d7:7d:a1:af:2a:f1:b4:
                    6f:23:08:59:4b:e1:4f:95:fb:54:91:89:5b:a0:ce:
                    eb:c8:bc:c4:ec:5b:74:f7:dc:46:54:c5:cc:80:5a:
                    51:1b:c0:be:42:61:0e:b5:64:8b:80:9c:a3:8a:f0:
                    6f:d8:e0:a2:38:7e:b2:b5:0c:79:83:ef:13:2b:e2:
                    a8:c6:99:17:ce:84:0b:54:5b:b3:a5:b6:d7:03:ca:
                    31:ad:47:8d:e3:8d:8a:cf:d1:91:4d:50:1a:f7:53:
                    a6:39:73:37:c3:88:1f:34:89:47:39:d2:99:c0:e8:
                    e5:c2:c3:9c:bc:4d:00:0d:8e:78:40:bd:8f:f1:da:
                    08:af:50:6f:db:e8:8a:a6:da:7d:76:1d:2e:3b:a0:
                    a7:36:45:54:2a:1a:73:b1:da:54:ee:73:a3:08:ee:
                    cd:95:e3:12:a8:d6:c2:4c:3d:b7:f4:2d:85:2f:16:
                    cf:77:f0:89:64:ca:3d:d6:88:90:fe:c2:a8:b8:d8:
                    54:c8:6d:60:79:65:66:9c:9b:cf:f3:cd:a6:3e:3c:
                    eb:ae:f6:ee:5e:1c:4a:f5:2e:6e:75:c0:f8:a0:a8:
                    03:40:ee:67:d6:70:4b:57:43:a3:ac:e5:9d:a4:90:
                    e5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:17:BE:76:B4:28:47:B6:E6:01:9E:11:D0:87:53:26:8B:10:0B:4A
            X509v3 Authority Key Identifier:
                keyid:B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/B09F555E338DACE2F046F7B3C94528216109B8C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231322e302f32322d3234203d3e20323635343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:d5:b0:2d:f3:e9:b1:a2:6f:ab:ab:a9:3b:53:97:5d:9f:b4:
         0c:27:4f:b5:12:96:62:0f:a3:fd:1a:5f:ec:be:6b:af:ab:94:
         a0:8a:03:ec:dd:f2:3c:e7:69:4a:e3:50:c5:e1:04:e6:c5:5a:
         58:04:cc:b3:77:d0:be:02:82:6d:60:f5:40:31:a1:75:5f:29:
         13:6b:da:c6:37:bd:8e:87:69:86:54:15:4e:2f:64:01:e3:ee:
         05:7a:2e:dd:03:af:ae:7e:3d:25:dc:6a:f2:ff:3b:a4:72:7f:
         1e:39:f5:c8:ee:f2:e8:cf:d2:ce:91:0f:e0:2f:96:c9:51:ef:
         8c:88:cc:a2:92:8f:c7:d4:fb:c6:74:cb:c3:c2:cc:5c:35:37:
         34:86:fe:bd:e3:66:29:cd:ee:2d:b2:42:df:80:35:6f:af:09:
         59:f1:11:90:34:9f:d7:92:19:d9:8c:fc:cf:95:a1:75:c4:bd:
         df:ef:75:6e:95:b0:2a:9e:5e:8f:38:f2:92:dc:f2:56:03:fc:
         ac:6c:51:c4:31:ff:cb:bc:31:bf:c8:27:44:d0:87:d0:98:57:
         bb:32:da:06:d8:c8:b8:d8:f0:e2:5a:65:36:d0:28:e2:50:d7:
         84:da:23:07:ca:21:2b:1c:52:81:ba:80:1f:cc:09:0d:4d:3e:
         2f:7f:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org