Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa
File:                     3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (raw, json)
Hash identifier:          ZV0xTWZc3PFSf8CBkO62rRxMVbS/VerEKN9GeIQaIEk=
Subject key identifier:   B7:AE:87:C6:3A:3A:8D:09:0D:AA:36:C1:91:2C:AF:57:DF:CE:34:A7
Certificate issuer:       /CN=A54C688946518EDDF4A5ECCFBCF9D720E13EC64E
Certificate serial:       690DE5ECA874BECD3E202794195DF89BA8A811EB
Authority key identifier: A5:4C:68:89:46:51:8E:DD:F4:A5:EC:CF:BC:F9:D7:20:E1:3E:C6:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa
Signing time:             Tue 12 Dec 2023 21:01:27 +0000
ROA not before:           Tue 12 Dec 2023 20:56:27 +0000
ROA not after:            Tue 10 Dec 2024 21:01:27 +0000
asID:                     265953
IP address blocks:        164.163.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0d:e5:ec:a8:74:be:cd:3e:20:27:94:19:5d:f8:9b:a8:a8:11:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A54C688946518EDDF4A5ECCFBCF9D720E13EC64E
        Validity
            Not Before: Dec 12 20:56:27 2023 GMT
            Not After : Dec 10 21:01:27 2024 GMT
        Subject: CN=B7AE87C63A3A8D090DAA36C1912CAF57DFCE34A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:92:b5:7e:2f:bd:6b:03:ab:a6:b9:c7:6c:3e:
                    f6:b7:3f:b4:3d:0b:cd:ed:0f:ac:9b:20:a2:5f:6d:
                    ee:fa:ce:6a:df:42:d3:75:f7:2c:d7:d7:4b:c8:44:
                    e0:86:32:c9:33:7d:92:a2:4e:fa:7e:d9:66:27:1d:
                    3a:db:88:ea:9e:d2:09:a8:9c:a2:78:d3:62:ef:37:
                    f4:12:a4:29:c2:0a:b1:51:a9:29:e0:a8:e2:42:bc:
                    7e:79:84:ff:83:27:bf:31:4f:91:a8:08:e8:2c:44:
                    bb:4c:f0:b7:7b:ff:91:c1:57:47:ac:a0:bf:ba:d2:
                    63:23:df:dc:0c:d2:ff:9e:f9:f7:6b:33:22:b0:d9:
                    14:63:8d:4c:6b:07:b4:81:03:4c:39:e3:b9:47:ad:
                    68:db:3a:5a:91:68:9e:d1:c6:b3:42:b9:dd:cd:73:
                    8a:96:dd:6c:35:2d:c3:60:75:aa:73:f8:1c:2e:8b:
                    af:59:b4:7c:d5:78:43:65:67:a6:af:09:01:67:f0:
                    6b:cd:dc:1b:eb:ae:35:b2:54:68:fd:f6:95:65:f2:
                    76:b3:8f:a0:6a:65:dc:6d:d4:02:82:d1:d3:4a:67:
                    7f:7f:2f:d9:14:33:c1:54:50:59:5d:a8:eb:c6:5b:
                    1a:1d:06:f3:16:de:19:3c:bb:5e:95:45:26:9f:92:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AE:87:C6:3A:3A:8D:09:0D:AA:36:C1:91:2C:AF:57:DF:CE:34:A7
            X509v3 Authority Key Identifier:
                keyid:A5:4C:68:89:46:51:8E:DD:F4:A5:EC:CF:BC:F9:D7:20:E1:3E:C6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:40:4d:a8:06:10:9f:93:4d:2a:f4:79:4c:81:b7:49:83:65:
         98:15:f1:c4:c7:02:c5:0f:01:aa:87:d3:12:10:69:6f:65:09:
         9a:c0:e0:04:a7:89:09:97:70:29:2e:15:82:94:92:06:2b:1f:
         84:cf:01:24:28:d5:22:36:20:c8:7a:22:7c:20:67:89:bf:cf:
         c2:e0:16:57:27:18:80:e4:f4:49:88:20:eb:9c:67:3d:e6:a8:
         5e:69:3b:2f:90:c0:29:92:6e:8d:61:dc:95:5e:45:52:5e:48:
         fe:91:28:73:d4:be:8c:0d:6a:87:14:1b:c1:5b:4b:81:62:14:
         74:e7:2a:6e:14:16:c0:a3:87:cd:77:2d:ac:65:1b:c2:19:5e:
         a0:a3:d2:f3:74:2f:dc:01:95:e1:5b:60:95:25:fc:45:31:98:
         82:34:9c:45:4e:f6:f7:32:d7:d4:fe:c5:5b:18:69:26:b5:18:
         0c:e3:b9:5d:83:9f:a3:4f:a1:05:44:35:40:fe:cb:13:2b:1e:
         aa:45:8b:89:79:7b:d3:74:b2:ca:93:56:35:36:1e:6c:7b:e8:
         a8:b4:08:ad:ed:f3:31:55:29:a2:7d:0a:58:79:52:ac:28:40:
         bd:e6:03:a3:21:4b:7d:03:7b:ed:8a:a7:88:16:a5:f9:12:cf:
         9a:24:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org