Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130352e302f32342d3234203d3e20323637353335.roa
File:                     3139322e3134312e3130352e302f32342d3234203d3e20323637353335.roa (raw, json)
Hash identifier:          P7+ArW4gBbfdnAudSxYBLMuzC7UvRtNIyGG/cnxz5Nw=
Subject key identifier:   8D:DE:CC:07:32:C2:0D:7C:AC:D6:BA:F4:6D:47:DA:BE:49:BD:76:9A
Certificate issuer:       /CN=6C02C0A7B20F757D7F8FBC02D2841706802CF35B
Certificate serial:       48F9B9837ACBB17F0E177764433F9C293182A069
Authority key identifier: 6C:02:C0:A7:B2:0F:75:7D:7F:8F:BC:02:D2:84:17:06:80:2C:F3:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130352e302f32342d3234203d3e20323637353335.roa
Signing time:             Thu 07 Mar 2024 22:44:44 +0000
ROA not before:           Thu 07 Mar 2024 22:39:44 +0000
ROA not after:            Thu 06 Mar 2025 22:44:44 +0000
asID:                     267535
IP address blocks:        192.141.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f9:b9:83:7a:cb:b1:7f:0e:17:77:64:43:3f:9c:29:31:82:a0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C02C0A7B20F757D7F8FBC02D2841706802CF35B
        Validity
            Not Before: Mar  7 22:39:44 2024 GMT
            Not After : Mar  6 22:44:44 2025 GMT
        Subject: CN=8DDECC0732C20D7CACD6BAF46D47DABE49BD769A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:8f:0e:96:29:58:ac:c0:a2:75:9e:63:1c:
                    4e:2d:0f:3f:a2:21:03:70:bd:b7:9a:02:c3:f2:6c:
                    7c:b1:4f:0e:95:53:95:5a:34:7a:8b:f3:12:7e:ae:
                    68:ce:ac:d1:a7:4a:2a:b1:77:06:9e:92:51:d5:4d:
                    50:ff:5e:27:4c:e2:d4:b4:e6:1b:17:ea:29:a2:62:
                    e5:7e:22:89:d8:93:33:9c:92:46:63:e1:a1:7e:f6:
                    7f:cd:65:30:8d:89:7d:7d:a3:6c:3b:ca:df:4f:f8:
                    e8:59:b5:e7:80:82:42:e1:e5:8c:b8:d6:5c:e2:87:
                    52:eb:7c:13:0e:4b:f0:1b:c2:19:83:02:e5:13:d0:
                    ea:91:25:b1:de:47:84:bd:3b:5e:54:db:fd:0f:57:
                    fd:37:7a:fc:6a:2c:5e:49:dd:57:12:d0:b3:72:b2:
                    2c:92:32:a1:e5:51:e6:49:37:7e:ad:51:20:ab:ff:
                    67:f0:bc:fc:3e:08:e2:13:41:7a:bd:b1:45:93:2a:
                    de:fd:65:46:64:7b:ae:8d:e3:3b:32:01:3b:83:a7:
                    f8:31:23:d3:84:b5:b4:ce:d0:5f:ec:89:99:0c:d1:
                    82:65:5e:4f:5a:60:59:05:4f:d6:f6:23:e1:43:92:
                    e2:3e:19:b1:94:d9:00:dc:71:9c:b5:d7:d5:df:68:
                    17:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DE:CC:07:32:C2:0D:7C:AC:D6:BA:F4:6D:47:DA:BE:49:BD:76:9A
            X509v3 Authority Key Identifier:
                keyid:6C:02:C0:A7:B2:0F:75:7D:7F:8F:BC:02:D2:84:17:06:80:2C:F3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C02C0A7B20F757D7F8FBC02D2841706802CF35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfHJA72CBUa7YWcZ1sPGbJgQmtPDRvxFJ5eXDwW7i9K5/0/3139322e3134312e3130352e302f32342d3234203d3e20323637353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:40:4a:0a:1d:e9:c2:8d:63:91:3b:e5:98:63:f1:d4:91:ff:
         c3:b4:48:b2:9d:f7:79:ea:fa:da:69:03:d2:6c:f7:af:4d:4f:
         7a:ec:ef:a9:bf:f8:47:a0:50:60:d0:59:fc:15:7c:82:29:64:
         1b:c9:e1:97:ce:cb:5c:08:31:05:ff:4a:b4:82:b6:41:6f:a0:
         90:ca:f9:8b:44:f3:ab:d5:39:97:e8:bf:5d:d8:be:1d:2c:b5:
         a8:7a:41:25:73:a2:13:69:99:60:23:17:cd:7c:2c:9f:cb:01:
         a8:10:30:71:42:30:b1:d1:9f:3f:db:83:0a:58:88:d7:82:bb:
         8a:6b:fc:12:fb:f8:e8:0c:68:b3:85:3f:b5:d7:45:b9:00:5a:
         43:6b:2a:9d:a7:de:72:da:37:48:ab:7a:88:55:c1:1f:e8:09:
         52:38:f0:6c:12:40:19:59:9f:48:db:30:dd:9a:f7:e4:31:80:
         5c:53:3f:1a:31:f7:8c:6a:42:94:a9:5b:e2:13:96:21:02:40:
         7a:a7:2c:97:00:ed:07:04:ea:93:d7:e6:e9:ac:b0:33:98:da:
         05:bd:29:2d:12:f4:8c:ae:57:bd:01:8c:c7:f9:2e:3f:6d:10:
         88:a0:de:0b:99:3e:ee:76:ee:68:63:c7:cb:71:e6:96:2a:08:
         73:94:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org