Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/1/3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa
File:                     3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa (raw, json)
Hash identifier:          xeCxUWxkOuEUry77husNOukTCe0huiid4CLPDZFBmho=
Subject key identifier:   6A:22:18:2F:76:EB:32:1C:76:17:B2:8A:19:D6:B2:86:0B:7C:68:C6
Certificate issuer:       /CN=69A5CC07E6F60E0375FFEDE1AECD8C1A68CE5608
Certificate serial:       A7158F10AD817E98B7770D2BAAE8F16F7B1C49
Authority key identifier: 69:A5:CC:07:E6:F6:0E:03:75:FF:ED:E1:AE:CD:8C:1A:68:CE:56:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A5CC07E6F60E0375FFEDE1AECD8C1A68CE5608.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/1/3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa
Signing time:             Thu 04 Apr 2024 19:37:41 +0000
ROA not before:           Thu 04 Apr 2024 19:32:41 +0000
ROA not after:            Thu 03 Apr 2025 19:37:41 +0000
asID:                     267430
IP address blocks:        164.163.224.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a7:15:8f:10:ad:81:7e:98:b7:77:0d:2b:aa:e8:f1:6f:7b:1c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69A5CC07E6F60E0375FFEDE1AECD8C1A68CE5608
        Validity
            Not Before: Apr  4 19:32:41 2024 GMT
            Not After : Apr  3 19:37:41 2025 GMT
        Subject: CN=6A22182F76EB321C7617B28A19D6B2860B7C68C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:31:96:b0:33:a9:a6:82:8e:09:81:a5:8d:
                    dc:6d:68:ff:79:3d:d4:61:97:d6:43:57:4d:73:d4:
                    9d:2e:ce:d5:f3:09:9b:91:bf:2a:6a:97:0f:99:90:
                    e8:b2:1b:2d:cb:7e:51:94:1f:bc:02:6e:52:3b:4b:
                    ef:24:56:7d:54:49:ce:0d:4a:1c:fe:b4:13:44:f3:
                    cb:68:bb:03:f5:14:43:71:44:9c:f5:77:09:1c:3e:
                    83:3c:36:89:27:08:b5:96:58:45:2d:52:4f:34:46:
                    aa:c8:8f:08:e9:05:a3:11:94:10:c0:d9:11:75:c3:
                    f6:e9:4d:88:bd:c2:50:f2:b9:90:73:34:35:e5:64:
                    30:ed:ed:d7:76:7a:dc:24:b8:c8:58:a0:1f:d8:c6:
                    c5:62:70:8c:a6:c0:d1:08:da:79:0f:25:e3:fc:1c:
                    88:06:62:2e:cb:98:71:ff:21:1e:79:f2:04:da:c6:
                    f4:8d:34:53:3e:f6:fe:ca:c7:2b:d6:53:d1:d0:e8:
                    6e:33:54:92:6a:8d:c3:5f:53:2e:44:41:e9:f1:b6:
                    86:15:24:9b:0f:9f:40:90:19:87:cf:77:67:92:f7:
                    b0:3c:17:61:2c:7b:4e:3b:3b:42:8c:dc:65:8e:ba:
                    14:bc:1b:67:e6:8a:8a:00:85:f0:cd:55:41:01:89:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:22:18:2F:76:EB:32:1C:76:17:B2:8A:19:D6:B2:86:0B:7C:68:C6
            X509v3 Authority Key Identifier:
                keyid:69:A5:CC:07:E6:F6:0E:03:75:FF:ED:E1:AE:CD:8C:1A:68:CE:56:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/1/69A5CC07E6F60E0375FFEDE1AECD8C1A68CE5608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A5CC07E6F60E0375FFEDE1AECD8C1A68CE5608.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPMLQBaerhjg1q5JujubsXXAYFy9kXGRL5MUi4CqkTcf/1/3136342e3136332e3232342e302f32322d3332203d3e20323637343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:bd:31:89:f6:e6:c9:39:1d:90:f1:8e:4c:13:de:fe:d6:86:
         86:7f:6a:8e:30:a8:23:ca:26:c3:16:ea:2b:75:4a:3a:e4:21:
         2e:43:bd:7c:63:ce:28:3f:0b:7c:18:32:1a:73:b4:11:d0:90:
         9b:92:0f:6c:ec:8d:2b:30:35:e1:62:ff:cd:c8:94:b6:e5:1c:
         50:b3:95:e2:f3:4a:b0:c7:34:de:1d:09:92:40:8e:0f:67:0e:
         03:24:4a:a1:72:24:a9:b8:40:7c:d0:30:cd:92:c1:75:15:e8:
         33:09:51:1a:59:3d:0a:9e:17:12:34:e7:4a:13:3b:04:01:4f:
         82:4c:12:17:9f:49:ad:1b:ce:e0:d5:67:39:ef:d9:9c:22:f6:
         6c:f7:9c:b7:04:af:32:db:3c:ca:b2:54:8a:86:2f:e3:44:c2:
         fc:f0:e8:47:c2:12:29:03:17:81:59:d7:08:bb:9a:2a:3b:de:
         6a:c4:0f:4d:a9:f1:21:da:21:4e:14:8a:7e:c5:63:ff:d0:de:
         2a:c6:cc:fa:80:9c:e6:75:66:74:f6:f3:1a:09:e6:7d:ea:3f:
         5e:ea:4b:9b:fc:f0:ae:9f:a6:56:40:ac:bf:14:c2:56:38:a9:
         a2:1f:41:67:25:29:2a:2a:5c:66:84:f2:bf:18:ec:dc:6a:17:
         e3:5a:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:53 2024 by rpki-client on console-ams.rpki-client.org