Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/3136382e3139352e3139322e302f32322d3234203d3e20323635343237.roa
File:                     3136382e3139352e3139322e302f32322d3234203d3e20323635343237.roa (raw, json)
Hash identifier:          BsjSOGulNF0C7YB7irPseYdxuk/VOCMQAzivaLRwFM4=
Subject key identifier:   19:30:E0:FD:70:89:73:05:CF:E5:CA:63:D8:F8:80:BA:BF:99:5C:0E
Certificate issuer:       /CN=D704ED5A93D1B57340DF21829918581BDF630FA9
Certificate serial:       2D438F4F735A14313F5FC2E4EF67AD87E2A8066E
Authority key identifier: D7:04:ED:5A:93:D1:B5:73:40:DF:21:82:99:18:58:1B:DF:63:0F:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D704ED5A93D1B57340DF21829918581BDF630FA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/3136382e3139352e3139322e302f32322d3234203d3e20323635343237.roa
Signing time:             Thu 26 Oct 2023 14:18:21 +0000
ROA not before:           Thu 26 Oct 2023 14:13:21 +0000
ROA not after:            Thu 24 Oct 2024 14:18:21 +0000
asID:                     265427
IP address blocks:        168.195.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:43:8f:4f:73:5a:14:31:3f:5f:c2:e4:ef:67:ad:87:e2:a8:06:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D704ED5A93D1B57340DF21829918581BDF630FA9
        Validity
            Not Before: Oct 26 14:13:21 2023 GMT
            Not After : Oct 24 14:18:21 2024 GMT
        Subject: CN=1930E0FD70897305CFE5CA63D8F880BABF995C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:a8:27:96:4a:a2:57:5f:18:e1:cb:79:f0:
                    02:d0:4a:1e:e2:b5:4c:07:5d:bf:6a:36:26:be:fa:
                    04:12:07:f3:07:63:11:ce:ad:c9:b5:51:48:cd:d5:
                    04:d3:4b:b5:a8:fe:87:07:76:8d:69:03:7f:48:34:
                    f5:11:b3:13:56:b4:9d:cb:43:44:ac:30:f5:25:64:
                    90:cb:51:c3:31:28:1b:33:66:2b:1b:4a:fe:66:34:
                    ff:a3:72:d9:ea:e2:1d:49:68:f7:e5:4e:13:e2:8f:
                    d2:86:bf:10:1c:ab:c5:05:10:53:bd:10:34:5c:53:
                    0b:5e:00:5d:5d:de:c7:ff:72:99:84:b4:80:37:92:
                    8e:81:44:8b:c7:1d:06:cd:8c:5a:94:14:fc:f1:41:
                    e2:54:7e:ee:0b:10:b0:b6:a3:6b:ce:13:e7:93:8d:
                    0b:5b:f8:25:3c:92:7b:97:f0:ce:11:7b:50:b8:c1:
                    42:0d:87:56:55:c2:89:0b:4f:06:39:3c:3d:9f:1c:
                    79:68:82:53:c3:ff:da:e5:97:69:4e:42:6a:22:cd:
                    b8:35:e9:02:f4:2f:20:66:f7:59:d6:7c:d1:b8:4e:
                    9b:97:f3:1a:a5:e7:5b:92:2b:c3:fe:96:71:48:82:
                    50:4b:77:3a:3d:49:b1:f1:91:0e:72:92:68:d9:c3:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:30:E0:FD:70:89:73:05:CF:E5:CA:63:D8:F8:80:BA:BF:99:5C:0E
            X509v3 Authority Key Identifier:
                keyid:D7:04:ED:5A:93:D1:B5:73:40:DF:21:82:99:18:58:1B:DF:63:0F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/D704ED5A93D1B57340DF21829918581BDF630FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D704ED5A93D1B57340DF21829918581BDF630FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/3136382e3139352e3139322e302f32322d3234203d3e20323635343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:71:0b:35:75:88:d3:06:8e:89:5f:7d:82:3b:6e:d6:75:
         b9:85:7e:8f:8d:cb:44:dc:a4:f5:63:96:b7:b2:ec:ae:ff:94:
         02:d1:e4:f2:c8:0f:2b:a1:fc:77:96:0d:26:0e:cc:aa:67:41:
         3f:5f:eb:df:01:91:74:d8:cb:e8:4f:bb:63:5b:af:52:f4:d8:
         c9:c5:7e:4f:19:46:d5:98:fa:cb:95:b4:58:7c:0c:3c:2f:11:
         b3:88:71:f0:3c:8b:fa:e9:1e:4a:5d:9e:21:72:c1:8e:09:d4:
         f7:bf:0a:d0:04:3d:96:c8:fc:32:b1:73:f3:05:bd:5e:64:c5:
         ea:02:f6:8f:aa:49:b7:be:9f:6a:c0:3d:6f:c9:16:de:4b:49:
         72:c5:03:50:78:83:84:27:cb:6e:b8:66:ef:fd:7b:29:c7:42:
         f3:4d:68:d0:70:09:cb:8b:b2:74:2f:5b:66:6a:a3:02:29:79:
         33:29:25:a8:b5:f3:e5:e0:be:49:d3:26:8f:79:c8:80:e5:c2:
         ad:5f:ba:88:76:f5:10:29:59:b0:c4:6c:60:a2:9e:5f:20:2c:
         81:af:08:de:a5:0b:14:2c:28:d7:86:89:4c:66:4b:00:61:34:
         82:89:6d:d2:25:42:aa:ee:4c:f3:d3:0e:99:ee:c5:a7:9d:9b:
         3c:5c:38:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org