Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32322d3232203d3e20323635323035.roa
File:                     3136372e3235302e36382e302f32322d3232203d3e20323635323035.roa (raw, json)
Hash identifier:          L4g9j3M2/sJi7xe63OFefnuLIO5ScvcdspVkD8e6CPw=
Subject key identifier:   4F:68:7E:C7:5C:D2:3E:4C:60:44:1C:6F:A3:72:6B:CB:B7:59:4D:B8
Certificate issuer:       /CN=766B3041B29318AB99A3A0468D318CA1E0E24276
Certificate serial:       7BFB54BAB52E866CF239AE99FB7D9FA6A7428329
Authority key identifier: 76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32322d3232203d3e20323635323035.roa
Signing time:             Mon 22 Jan 2024 19:31:07 +0000
ROA not before:           Mon 22 Jan 2024 19:26:07 +0000
ROA not after:            Mon 20 Jan 2025 19:31:07 +0000
asID:                     265205
IP address blocks:        167.250.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fb:54:ba:b5:2e:86:6c:f2:39:ae:99:fb:7d:9f:a6:a7:42:83:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766B3041B29318AB99A3A0468D318CA1E0E24276
        Validity
            Not Before: Jan 22 19:26:07 2024 GMT
            Not After : Jan 20 19:31:07 2025 GMT
        Subject: CN=4F687EC75CD23E4C60441C6FA3726BCBB7594DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:54:c6:25:f8:c7:db:88:db:3e:99:93:ba:54:
                    97:d4:e5:18:18:86:b7:f2:f7:a4:41:c1:5c:67:d3:
                    a1:53:22:e6:56:78:3c:da:bf:85:f4:c9:1e:92:f3:
                    5b:15:fe:ec:c5:a9:d7:88:2e:01:41:73:58:e0:2a:
                    03:27:78:ce:22:53:21:f9:ba:6e:64:35:6d:89:83:
                    70:b3:f0:92:9a:74:d1:7c:1a:a2:a3:ba:17:34:1c:
                    50:c5:08:75:d7:86:1e:f1:76:ac:e6:4f:3a:68:ee:
                    dc:77:fe:eb:e7:ee:81:ec:ca:08:bf:5a:da:af:d8:
                    0b:43:83:45:0b:8a:57:99:2c:18:a7:f7:27:d2:36:
                    bb:11:b8:20:fa:46:60:11:16:e0:7f:26:bf:18:cd:
                    a2:01:67:ea:2a:0a:fd:e4:09:aa:80:a8:34:10:64:
                    e7:37:ae:33:86:36:82:58:24:78:66:b3:9f:fc:08:
                    c8:89:e2:29:9b:bb:61:fa:c9:c7:67:b2:21:50:41:
                    09:14:4b:76:7e:26:73:9b:19:5c:16:39:23:7f:dc:
                    88:c7:65:0f:82:8d:c9:df:51:f2:8a:bb:47:d0:f5:
                    ab:71:a8:72:a7:3f:09:36:0b:54:47:e7:ab:9c:d7:
                    6f:fd:d0:15:14:53:de:e1:c4:66:8a:ac:1b:3d:77:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:68:7E:C7:5C:D2:3E:4C:60:44:1C:6F:A3:72:6B:CB:B7:59:4D:B8
            X509v3 Authority Key Identifier:
                keyid:76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32322d3232203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:dd:bc:01:eb:db:8f:24:33:b6:db:52:bd:eb:0c:9b:ed:77:
         7c:da:31:8f:aa:08:f8:1b:e3:d8:98:be:6d:dd:fa:58:8c:64:
         43:80:2c:98:a6:9c:74:c7:61:ad:3d:fc:2c:fa:de:ac:5a:0a:
         96:e3:1f:d2:87:e9:ca:45:59:e8:e3:51:06:e6:46:f7:81:49:
         13:6a:f5:0e:00:c0:93:b5:a2:11:6b:b6:5f:fb:04:5c:a6:5a:
         74:f0:0b:04:b9:a5:bf:d8:ec:6f:79:6c:a3:ef:12:cf:69:9d:
         7b:fd:48:6c:2c:5e:ad:f0:98:bb:15:78:82:a3:90:76:3b:47:
         2d:7c:e3:9a:58:8b:e1:13:b9:61:7a:00:24:12:dd:af:47:d5:
         e4:88:86:f0:1d:55:c0:1f:76:48:ee:52:04:d6:f3:17:ee:a1:
         87:ab:18:4a:c2:23:28:6c:ab:44:bd:6e:7a:93:49:34:9a:56:
         51:d8:ec:71:ff:dd:71:d4:b7:e8:0a:d0:0f:13:a9:14:e4:a2:
         a7:e9:b0:1d:6d:1c:e7:b3:f8:3a:5e:c7:33:49:1f:9b:97:e1:
         10:41:af:aa:db:61:88:4a:62:7c:6e:86:ff:65:5e:c7:a2:36:
         b6:b5:49:97:52:e7:99:d4:0b:88:5e:63:bf:d8:02:12:57:8f:
         43:64:1b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org