Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/3136342e3136332e3232342e302f32322d3234203d3e20323637343330.roa
File:                     3136342e3136332e3232342e302f32322d3234203d3e20323637343330.roa (raw, json)
Hash identifier:          reEEYq4xGpbqJWEslUdcYfqc89/6FVhaB4JRAJlJjmg=
Subject key identifier:   6A:DD:83:7E:CA:8E:75:BC:BB:EE:A1:A6:57:65:D4:BB:F4:95:F7:27
Certificate issuer:       /CN=8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5
Certificate serial:       2FAC7BF7DF51C0C53BDEDBD655A3120876CB327D
Authority key identifier: 8C:24:7F:FD:F1:3A:92:33:B3:CB:03:E7:F0:68:98:5E:0A:A4:F4:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/3136342e3136332e3232342e302f32322d3234203d3e20323637343330.roa
Signing time:             Wed 28 Jun 2023 15:00:00 +0000
ROA not before:           Wed 28 Jun 2023 14:55:00 +0000
ROA not after:            Fri 28 Jun 2024 15:00:00 +0000
asID:                     267430
IP address blocks:        164.163.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ac:7b:f7:df:51:c0:c5:3b:de:db:d6:55:a3:12:08:76:cb:32:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5
        Validity
            Not Before: Jun 28 14:55:00 2023 GMT
            Not After : Jun 28 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:87:99:44:47:ed:77:d8:45:7c:50:82:f1:
                    a5:e4:8c:0f:c1:0b:69:a1:57:3a:1a:53:e9:df:c4:
                    07:40:d8:75:2e:13:0c:b4:8f:a4:6e:15:fd:cf:b8:
                    08:87:68:82:d7:44:1d:e6:33:53:a9:b7:a1:4d:71:
                    bf:50:77:55:b2:1e:57:0e:35:ff:c8:9b:49:2c:2f:
                    77:c2:4e:fc:ac:14:2f:64:3b:bc:02:52:3e:86:75:
                    ea:f5:d6:e6:88:9e:6a:19:c3:bc:3e:03:36:0b:79:
                    15:3c:97:af:e9:f4:fb:ee:c9:8d:49:76:33:3f:3b:
                    bb:2b:3b:59:8a:4d:df:f8:e2:c5:fb:d1:81:29:d9:
                    cf:e5:7d:b7:56:83:bd:9f:8f:e7:41:9b:7f:8d:a0:
                    47:82:87:2f:01:92:de:8a:f5:ce:21:92:1b:3b:e3:
                    16:53:c6:94:ff:76:7c:35:cd:6a:5c:68:05:74:32:
                    7d:11:8c:2c:c1:43:b7:5f:0d:34:3f:b3:c7:f3:34:
                    87:6c:10:94:86:1d:b0:2a:24:42:7b:16:d5:e0:50:
                    ee:c1:95:66:12:77:9b:6f:69:be:66:64:5a:55:ee:
                    b2:62:b2:28:ec:11:fb:4c:3c:77:8f:02:b6:f9:14:
                    90:60:80:6c:f0:e1:50:80:80:5f:d2:0a:93:cb:2c:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DD:83:7E:CA:8E:75:BC:BB:EE:A1:A6:57:65:D4:BB:F4:95:F7:27
            X509v3 Authority Key Identifier:
                keyid:8C:24:7F:FD:F1:3A:92:33:B3:CB:03:E7:F0:68:98:5E:0A:A4:F4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C247FFDF13A9233B3CB03E7F068985E0AA4F4E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/3136342e3136332e3232342e302f32322d3234203d3e20323637343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:b0:78:fe:1d:fd:22:d7:66:42:11:38:1a:be:32:5e:20:fb:
         39:6a:00:73:27:40:0d:1f:c9:ce:fe:62:50:b6:02:a2:90:2b:
         99:81:ed:07:3a:72:c8:4c:76:8d:5c:e9:1c:4f:1a:3d:c4:77:
         92:86:2e:54:f3:52:d4:66:93:75:ba:c1:66:68:89:07:88:99:
         1b:2a:de:61:f6:a4:50:b4:f5:98:9e:e9:3d:82:bb:3e:7f:ef:
         46:29:4c:d1:40:d3:59:65:09:a0:ae:26:49:24:45:d6:52:99:
         c4:d1:b6:5d:6d:89:cd:b3:22:46:99:22:e2:d1:0c:08:be:6b:
         9f:8f:11:49:69:fc:63:b1:93:21:8b:d4:5f:0d:f1:e8:be:dc:
         12:38:d1:03:42:7c:31:a9:bf:90:51:78:6f:4a:c8:8a:3a:94:
         e0:f0:4b:2c:53:49:af:7c:f6:d3:28:48:53:5e:50:e0:75:db:
         27:71:34:a9:78:07:51:82:66:81:af:41:ec:5f:cd:fc:9a:5e:
         00:a9:96:6f:ab:bc:97:9d:3c:c1:70:db:51:dd:a8:47:0b:53:
         e5:a5:21:19:21:94:2d:78:4c:39:21:86:a3:2b:8f:48:96:d3:
         68:c1:45:ed:3e:ed:75:42:f6:2e:85:f9:24:9b:ea:1f:cc:c0:
         6a:3a:f1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:53 2024 by rpki-client on console-ams.rpki-client.org