Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32322d3234203d3e20323635323035.roa
File:                     3136372e3235302e36382e302f32322d3234203d3e20323635323035.roa (raw, json)
Hash identifier:          9aG1TrltqWGEtsbngOC6jtky9n8WCNrh/xOj0FOvosU=
Subject key identifier:   89:5F:E6:67:74:85:70:04:0A:D9:63:6A:DB:EB:2C:5F:D6:F9:8E:7B
Certificate issuer:       /CN=766B3041B29318AB99A3A0468D318CA1E0E24276
Certificate serial:       50AF541E0ED914F757670D302BF2F86DFE0452B7
Authority key identifier: 76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32322d3234203d3e20323635323035.roa
Signing time:             Thu 25 Jan 2024 18:26:06 +0000
ROA not before:           Thu 25 Jan 2024 18:21:06 +0000
ROA not after:            Thu 23 Jan 2025 18:26:06 +0000
asID:                     265205
IP address blocks:        167.250.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:af:54:1e:0e:d9:14:f7:57:67:0d:30:2b:f2:f8:6d:fe:04:52:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766B3041B29318AB99A3A0468D318CA1E0E24276
        Validity
            Not Before: Jan 25 18:21:06 2024 GMT
            Not After : Jan 23 18:26:06 2025 GMT
        Subject: CN=895FE667748570040AD9636ADBEB2C5FD6F98E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:57:16:9b:90:bd:9e:36:79:26:7d:9c:92:24:
                    54:52:a6:bb:1f:1c:5a:dd:42:57:ca:13:1c:43:fd:
                    ee:ce:cb:74:46:14:5e:bd:b8:43:00:09:d3:d8:78:
                    dd:57:0a:81:c6:a9:db:08:0b:4c:0f:92:03:97:bf:
                    62:f9:f1:bc:97:37:77:58:0b:55:73:64:f0:50:15:
                    6f:31:a7:9c:83:0f:01:61:0c:a5:d5:fd:c1:88:73:
                    7b:e1:9b:9a:9b:56:2b:71:da:cd:d9:17:2d:68:81:
                    4f:82:75:77:78:5a:85:de:3a:99:7b:f8:87:01:e1:
                    32:82:6d:ed:52:25:4f:73:c7:14:b3:0e:d7:fa:b9:
                    86:30:17:cb:4a:69:e2:f0:ac:ab:c2:6a:9b:5c:bd:
                    2c:a2:83:e0:03:b5:9b:5f:9a:d6:e9:22:c1:7a:58:
                    45:7b:4b:e5:63:7b:a7:65:01:a4:10:83:57:69:41:
                    dd:10:d3:7c:aa:4e:61:d7:03:5a:15:25:c8:76:4d:
                    6c:49:db:96:23:b7:77:8a:98:34:1b:0a:e2:4d:53:
                    10:6f:39:1b:09:41:e0:69:e0:c6:e7:7c:fa:ba:00:
                    6d:b9:37:c6:b2:05:83:90:44:15:4e:56:3f:f5:e3:
                    0f:a8:d2:fe:38:8d:77:08:fc:2b:24:e0:c7:57:97:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5F:E6:67:74:85:70:04:0A:D9:63:6A:DB:EB:2C:5F:D6:F9:8E:7B
            X509v3 Authority Key Identifier:
                keyid:76:6B:30:41:B2:93:18:AB:99:A3:A0:46:8D:31:8C:A1:E0:E2:42:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/766B3041B29318AB99A3A0468D318CA1E0E24276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/766B3041B29318AB99A3A0468D318CA1E0E24276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/1/3136372e3235302e36382e302f32322d3234203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:d5:c0:04:cc:cc:0b:1a:f1:8a:f0:e2:5e:91:51:a7:a4:
         88:77:94:00:a7:7c:aa:fc:be:60:7e:ea:18:5d:a8:01:dd:a4:
         31:f7:b6:8e:d1:1c:75:62:39:05:19:db:3e:55:a4:5f:db:28:
         3b:24:cd:15:e9:88:d1:e7:1a:62:a0:8a:4b:90:ce:51:a7:af:
         eb:12:61:71:be:e4:c3:94:82:43:05:fa:46:cf:f9:86:0e:9f:
         2c:e9:d8:1c:ac:3a:c6:92:13:7b:ff:21:6b:fd:4c:81:42:c9:
         d9:80:45:d3:a6:b1:0e:bf:f3:c4:72:d9:90:a5:6e:36:36:60:
         59:6b:e2:25:61:40:76:bd:7e:d5:24:95:3e:61:9b:91:5b:ec:
         a7:1e:9f:5e:59:78:cf:93:a5:c6:c4:cd:0f:2f:92:58:0b:4f:
         ef:49:d8:d7:80:70:93:1c:4e:35:36:be:bd:44:72:e9:1d:24:
         6b:3f:3e:a1:59:df:4e:ff:08:5b:5e:b7:2a:ce:3c:ff:aa:1b:
         9c:eb:f9:ce:86:b7:68:af:6a:1f:0d:3a:41:7c:77:bc:ac:6a:
         b0:32:ee:e0:98:fd:20:cc:30:3f:ef:e6:26:c7:03:88:bb:a6:
         36:23:fe:23:93:63:34:0d:a4:4d:dd:62:77:62:fa:fa:ab:53:
         7b:98:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org