Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa
File:                     3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa (raw, json)
Hash identifier:          2+xA9+e1zzje1ZSRj7zZ4JpVtda1loMQ7GnCJwGkgjU=
Subject key identifier:   BB:2E:1D:20:FC:AD:26:97:BF:D0:C4:04:2A:16:F1:67:3D:DB:C8:9C
Certificate issuer:       /CN=4EC47B56D700BEB7D60AC0588B15D16725707AB1
Certificate serial:       7FE3AE1854F96D06ED8D86C7B15C265B7F6A2E49
Authority key identifier: 4E:C4:7B:56:D7:00:BE:B7:D6:0A:C0:58:8B:15:D1:67:25:70:7A:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EC47B56D700BEB7D60AC0588B15D16725707AB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa
Signing time:             Sat 01 Jul 2023 12:03:48 +0000
ROA not before:           Sat 01 Jul 2023 11:58:48 +0000
ROA not after:            Sat 29 Jun 2024 12:03:48 +0000
asID:                     267430
IP address blocks:        164.163.224.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e3:ae:18:54:f9:6d:06:ed:8d:86:c7:b1:5c:26:5b:7f:6a:2e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EC47B56D700BEB7D60AC0588B15D16725707AB1
        Validity
            Not Before: Jul  1 11:58:48 2023 GMT
            Not After : Jun 29 12:03:48 2024 GMT
        Subject: CN=BB2E1D20FCAD2697BFD0C4042A16F1673DDBC89C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:5d:21:c2:e6:28:f2:86:ed:44:8d:91:da:
                    41:ab:d2:16:11:9b:b9:63:bc:56:82:9b:0d:a0:4b:
                    06:c3:23:46:f2:5f:e5:0b:bb:79:33:c2:dc:69:a1:
                    2f:a0:12:e4:d0:7c:e6:f2:06:21:93:ef:57:ff:a8:
                    55:7a:51:e8:1c:0f:f8:ed:18:ee:b0:85:dc:89:ad:
                    b9:69:39:30:65:6d:c6:cf:1c:82:7c:9d:0d:6b:1f:
                    7c:4f:e6:82:a9:9d:ff:61:42:d0:70:4e:4f:e2:d3:
                    ec:cb:2a:8d:9f:d1:95:eb:b1:73:fc:65:27:93:d4:
                    79:92:35:70:e4:9a:4f:61:8a:33:34:e1:c0:15:bf:
                    94:1a:b7:5b:57:8d:f3:a6:ef:ad:88:12:2d:f7:36:
                    d5:29:7c:39:e2:da:86:4f:d5:69:82:88:64:75:de:
                    f9:44:60:db:42:06:9d:aa:d8:eb:2a:6d:64:e3:36:
                    84:6d:37:92:7e:23:74:24:8d:ba:8f:33:33:2f:43:
                    d8:1a:c2:41:05:ef:94:22:38:6d:e0:e4:30:e3:9c:
                    84:fc:a4:ce:3f:d9:25:99:10:eb:e1:a1:ab:96:ca:
                    53:e2:4d:b3:18:ef:6b:59:63:ad:58:b9:ec:67:51:
                    ef:96:89:8c:f3:7f:03:01:2b:04:30:a8:ed:e9:70:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2E:1D:20:FC:AD:26:97:BF:D0:C4:04:2A:16:F1:67:3D:DB:C8:9C
            X509v3 Authority Key Identifier:
                keyid:4E:C4:7B:56:D7:00:BE:B7:D6:0A:C0:58:8B:15:D1:67:25:70:7A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/4EC47B56D700BEB7D60AC0588B15D16725707AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EC47B56D700BEB7D60AC0588B15D16725707AB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/0/3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:79:40:de:e9:33:00:d9:94:0c:99:ba:ef:43:a4:32:79:64:
         97:e2:8e:91:24:f3:cc:a6:e5:3d:80:7c:4f:ad:9e:40:a8:77:
         2a:3c:1d:97:95:f4:0c:62:c0:67:67:20:f8:a8:90:7e:10:21:
         76:b6:d1:70:b7:5d:81:91:47:40:d7:de:ba:fa:e2:4b:fe:54:
         25:04:36:a9:82:fd:24:f7:81:08:d6:e9:32:3d:4e:12:fc:f9:
         31:b6:02:cc:59:b7:0c:e5:d5:36:09:f3:21:4b:ac:e6:dd:db:
         19:d8:70:ae:b0:17:53:f6:9f:d2:c8:40:7e:87:ac:e9:1d:84:
         b3:90:1a:19:c3:3d:cb:28:e5:6f:5c:09:79:2c:10:64:7b:95:
         04:18:af:ec:81:cd:1d:b6:47:2a:1a:6e:48:88:58:44:62:0c:
         53:3c:ec:b0:9b:a2:c2:85:4f:bc:9b:c5:b7:6f:81:ce:1f:b3:
         9f:50:c6:fc:87:b0:da:0e:bc:8d:93:6d:c7:54:3a:47:71:46:
         b7:f1:b4:3f:60:46:29:9f:66:3f:42:39:54:59:c3:95:d2:8d:
         bd:f6:ef:ad:cb:b6:da:52:d6:87:7d:04:4b:5c:a8:b0:94:86:
         15:83:62:8f:f2:c6:c8:1e:fd:7b:08:1c:97:61:73:fc:95:9c:
         ce:1d:37:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org