Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35342e302f32342d3234203d3e20323632353039.roa
File:                     3136382e3132312e35342e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          /fW1BdoBiHVtXK1Ld/59UP+FR/lHdVHCZDR9/MvjKGI=
Subject key identifier:   BF:3E:87:B0:18:27:BD:D3:09:C2:F2:72:50:23:52:64:A3:79:BF:E0
Certificate issuer:       /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial:       5ACA016EC5906DA7CD5221DF5B8A4711C420753A
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35342e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 23 Jan 2023 22:16:18 +0000
ROA not before:           Mon 23 Jan 2023 22:11:18 +0000
ROA not after:            Mon 22 Jan 2024 22:16:18 +0000
asID:                     262509
IP address blocks:        168.121.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ca:01:6e:c5:90:6d:a7:cd:52:21:df:5b:8a:47:11:c4:20:75:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
        Validity
            Not Before: Jan 23 22:11:18 2023 GMT
            Not After : Jan 22 22:16:18 2024 GMT
        Subject: CN=BF3E87B01827BDD309C2F27250235264A379BFE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:16:1d:6c:5b:be:35:ae:83:5e:12:db:5b:
                    e3:a1:6b:cd:64:7e:1d:19:e2:88:69:8e:fa:00:cb:
                    4b:20:a6:27:8e:1b:8d:3e:b5:c5:63:21:df:59:88:
                    8f:9e:e6:c5:b3:2b:ff:7e:96:b7:7d:af:fe:9b:8a:
                    af:02:c0:d9:23:cd:a8:f6:a7:0d:ec:47:98:04:c5:
                    aa:e0:aa:da:07:c0:d3:3e:39:26:88:b3:9c:a0:86:
                    3c:00:40:cc:e4:5b:99:52:9d:a4:8a:38:99:d5:17:
                    7d:72:f6:ea:9f:1a:c8:73:da:e4:0f:f4:5c:fd:34:
                    71:36:cd:ca:5d:d9:01:82:74:21:ab:4a:31:80:fd:
                    b5:e2:a6:c8:b3:56:47:76:72:9f:10:3e:ef:5c:da:
                    55:d8:f9:ab:bc:a6:f8:05:ee:46:6d:1b:21:22:13:
                    47:f6:ca:63:30:ce:39:1f:fe:11:ba:be:62:f4:b0:
                    58:86:e3:34:a4:03:8b:43:e1:c8:2d:0c:80:71:fe:
                    d4:ee:be:cf:b8:dd:2f:d1:d2:5e:ab:42:7d:dc:f5:
                    4d:75:af:e1:ec:42:c0:75:ec:cb:32:6c:30:a5:29:
                    69:14:d3:ff:23:e2:a6:cb:88:8c:88:40:de:47:51:
                    b8:6b:d5:e1:c0:c4:ec:f0:f3:85:c5:a8:da:a9:d7:
                    c3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3E:87:B0:18:27:BD:D3:09:C2:F2:72:50:23:52:64:A3:79:BF:E0
            X509v3 Authority Key Identifier:
                keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35342e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:50:ae:c6:cb:30:86:c3:0e:18:d9:77:b8:3c:3d:fa:93:09:
         00:a5:79:8e:9b:35:5d:68:89:e4:1a:cd:69:39:51:06:40:1f:
         24:3b:93:6d:12:ef:6b:b7:8e:ec:35:fd:03:e7:12:f1:e9:09:
         a3:42:b3:58:c1:33:d1:1d:7e:b9:df:29:7d:70:6e:79:52:9a:
         fe:30:38:41:e6:c6:4a:7a:12:14:42:00:94:04:ab:2a:3e:2f:
         f5:83:57:c8:fc:16:7b:65:8b:db:4b:0c:bd:ae:be:e2:31:de:
         b9:81:77:43:94:a1:d4:ab:b3:61:a4:f9:aa:8e:8e:bc:2f:87:
         da:30:2c:88:27:b6:c0:bc:ba:50:b8:d5:a4:f9:30:f9:17:06:
         b5:83:ef:5d:1c:5a:fa:09:d9:3c:c6:4e:72:85:cc:f3:5b:5f:
         e0:41:db:d7:9e:42:9d:2b:25:6f:78:b6:fd:1d:98:ca:1b:39:
         ce:eb:a9:e3:5b:9b:a9:a4:56:e9:4d:fa:cf:38:4c:93:ed:80:
         62:80:99:05:1d:d5:66:04:56:30:41:55:02:32:00:a9:72:d9:
         b0:39:95:44:64:44:4b:ce:5c:f9:bf:66:00:b0:b8:47:16:cd:
         01:64:2a:a1:e2:06:ed:1d:ce:14:44:43:97:38:b1:5a:fe:51:
         47:83:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org