Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231332e312f33322d3332203d3e20323635343732.roa
File:                     3136382e3139362e3231332e312f33322d3332203d3e20323635343732.roa (raw, json)
Hash identifier:          1uJ1JnOFGsLkA6zXvsJpcxSs1GyaNZDqNipj3z5qpi8=
Subject key identifier:   78:02:AF:FD:5E:4C:26:F9:99:F6:9D:02:2D:C2:E9:00:8C:71:EB:78
Certificate issuer:       /CN=B09F555E338DACE2F046F7B3C94528216109B8C5
Certificate serial:       291057C1D13DA94175286C02DD629466604DC40E
Authority key identifier: B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231332e312f33322d3332203d3e20323635343732.roa
Signing time:             Thu 24 Nov 2022 16:17:46 +0000
ROA not before:           Thu 24 Nov 2022 16:12:46 +0000
ROA not after:            Thu 23 Nov 2023 16:17:46 +0000
asID:                     265472
IP address blocks:        168.196.213.1/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:10:57:c1:d1:3d:a9:41:75:28:6c:02:dd:62:94:66:60:4d:c4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09F555E338DACE2F046F7B3C94528216109B8C5
        Validity
            Not Before: Nov 24 16:12:46 2022 GMT
            Not After : Nov 23 16:17:46 2023 GMT
        Subject: CN=7802AFFD5E4C26F999F69D022DC2E9008C71EB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:31:ec:d9:a1:b0:5b:de:95:6f:2c:e5:76:
                    58:42:bb:23:c6:e8:41:93:57:89:77:fb:f6:f3:82:
                    57:ae:e9:be:c9:48:ce:a5:dd:3c:fa:8c:89:67:c0:
                    fc:24:6f:99:0f:40:f9:fc:72:af:58:52:27:8b:74:
                    bd:27:3f:9b:d7:2c:8b:ab:a5:64:8f:6b:54:f2:d6:
                    10:0f:90:05:c9:d4:a5:9f:fd:2e:fb:a1:2c:a4:a8:
                    93:93:f3:74:ac:ea:2c:3c:fc:37:c7:87:fa:c7:d2:
                    ac:9c:cc:f8:a8:89:4e:3f:39:cc:eb:69:3c:db:10:
                    bf:d6:9d:6e:c8:df:10:1b:6d:41:da:44:52:4c:24:
                    6e:5f:a4:25:31:28:07:94:bf:98:9e:63:af:f2:fd:
                    08:04:72:7b:7b:d3:9b:59:5b:fb:6c:6d:18:dc:49:
                    0d:ab:77:0c:ed:06:86:8a:89:3e:fc:b6:81:6d:b3:
                    a8:53:32:78:f8:55:ac:31:b6:a3:03:39:35:35:8d:
                    d4:00:13:f8:77:7f:05:d1:2c:b8:f8:6a:85:00:27:
                    bb:69:cc:e9:41:c1:37:28:19:f9:99:7b:37:0a:8a:
                    6a:ba:cc:c4:43:22:e5:1c:49:50:b3:5c:64:c7:8a:
                    d8:2d:4f:a4:f2:a2:b9:00:36:20:1e:e7:91:1f:19:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:AF:FD:5E:4C:26:F9:99:F6:9D:02:2D:C2:E9:00:8C:71:EB:78
            X509v3 Authority Key Identifier:
                keyid:B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/B09F555E338DACE2F046F7B3C94528216109B8C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231332e312f33322d3332203d3e20323635343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.213.1/32

    Signature Algorithm: sha256WithRSAEncryption
         68:b6:8f:ec:1d:e2:d2:b6:9f:a1:2c:5d:2f:f6:73:53:55:2a:
         72:d2:a1:c0:0c:bd:2f:4c:23:48:1a:0f:3c:3e:0b:25:cd:ef:
         8e:5b:d5:3a:8e:ef:44:ef:ee:b1:7e:9a:37:09:ed:59:68:d6:
         1a:84:6a:6b:93:1d:c1:fc:1e:38:cf:6a:65:9f:24:a4:ad:db:
         cc:00:fe:39:07:b4:f7:fa:9d:46:c9:da:23:48:62:8f:2f:be:
         5f:b0:49:84:b3:46:c5:c9:18:ce:6f:cc:eb:73:1f:3c:c9:e6:
         7d:2a:32:8a:93:30:53:76:2f:af:59:8e:b5:60:1b:f1:4d:ff:
         08:2b:03:79:6b:18:2e:51:45:2c:c1:e8:60:0d:6c:c4:8f:4e:
         3e:30:a3:65:f7:9d:14:20:65:d4:36:e1:9d:f9:a0:5e:98:20:
         69:43:93:e2:a9:fb:ee:c0:44:ab:61:e7:d3:f6:2c:b4:89:62:
         7b:ae:85:f8:fe:4d:51:dd:74:02:a6:e5:9a:40:48:bf:ab:30:
         52:d3:4f:54:ff:e1:27:2c:87:0d:7e:a2:aa:2a:bb:11:0e:7c:
         5a:68:93:8b:d8:72:0d:25:e8:a1:07:35:29:2a:a8:ea:42:98:
         3c:28:69:34:83:12:26:bc:34:43:25:09:22:7e:16:da:38:68:
         cd:4d:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org