Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135372e302f32342d3234203d3e20323633343231.roa
File:                     3136382e3132312e3135372e302f32342d3234203d3e20323633343231.roa (raw, json)
Hash identifier:          Je3VgNTWQLRcT4kFY4JpnSTR3XnJQhsZKZP6Upu5G8g=
Subject key identifier:   2A:B6:C5:A4:2D:E9:99:12:1F:79:B9:05:8B:5D:3B:4B:43:1D:62:C3
Certificate issuer:       /CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
Certificate serial:       4C654325710EB1182F09A79563E75105703971E8
Authority key identifier: B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135372e302f32342d3234203d3e20323633343231.roa
Signing time:             Tue 16 Jan 2024 22:31:51 +0000
ROA not before:           Tue 16 Jan 2024 22:26:51 +0000
ROA not after:            Tue 14 Jan 2025 22:31:51 +0000
asID:                     263421
IP address blocks:        168.121.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:65:43:25:71:0e:b1:18:2f:09:a7:95:63:e7:51:05:70:39:71:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
        Validity
            Not Before: Jan 16 22:26:51 2024 GMT
            Not After : Jan 14 22:31:51 2025 GMT
        Subject: CN=2AB6C5A42DE999121F79B9058B5D3B4B431D62C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3a:e0:fb:ab:cf:f4:84:19:c2:11:e7:80:56:
                    bf:d9:a8:60:78:78:34:99:ed:a2:75:f1:79:a6:79:
                    f0:7e:aa:5f:95:6b:8f:f6:82:8b:ba:76:ab:e8:08:
                    37:93:6e:8d:0a:d6:0e:26:46:85:d7:20:e7:c9:12:
                    66:de:57:1d:9a:3a:e2:a2:f8:53:59:84:3f:c6:df:
                    9a:ca:ee:5f:94:09:1e:a4:ad:c5:c3:e0:d6:ec:67:
                    2b:6b:8c:73:7a:c7:75:30:a9:d3:74:31:eb:25:04:
                    b2:a0:a7:88:04:e8:15:54:ff:32:2c:23:02:42:a3:
                    08:1b:72:63:bc:0e:b4:04:88:73:d2:ad:5f:40:e6:
                    13:3a:6b:8b:1f:1e:24:c5:0c:aa:f5:8b:19:70:cb:
                    59:a3:69:a5:60:ab:0a:cd:49:a8:84:f4:19:0f:34:
                    3b:d9:9b:85:7e:b5:cd:41:ed:28:8d:39:a7:ae:50:
                    16:6d:6d:90:94:78:cf:ff:49:6a:d3:65:26:7e:ec:
                    6b:97:59:7f:08:e8:a6:1f:38:dd:61:e1:c0:d5:73:
                    3f:9c:6f:9a:a0:7b:fd:ee:f0:45:df:0c:a2:e6:42:
                    1d:e4:91:9e:7a:3d:fb:f6:17:cb:a8:bc:41:c0:52:
                    ea:67:db:c9:04:1b:6e:fd:53:e6:46:b5:d3:99:ec:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B6:C5:A4:2D:E9:99:12:1F:79:B9:05:8B:5D:3B:4B:43:1D:62:C3
            X509v3 Authority Key Identifier:
                keyid:B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135372e302f32342d3234203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:0a:12:3a:0e:8d:60:24:7c:45:20:90:3b:37:91:37:5f:c3:
         37:5d:8b:f4:27:f0:58:a0:40:c7:97:d9:5c:d0:7b:ef:5d:87:
         80:03:ab:b4:14:e7:f3:08:e9:d3:c5:5b:a9:8a:c2:69:72:36:
         00:3b:f9:01:74:96:9c:f5:16:ad:d4:bc:68:8f:8a:21:29:75:
         bf:01:76:5a:69:c2:c8:eb:4b:76:1e:54:b3:c9:d1:3c:22:0f:
         18:63:48:cf:64:41:0f:63:67:e8:ca:7b:87:65:2c:55:29:04:
         63:54:42:aa:27:31:c1:f3:a4:8b:cb:74:3d:ea:cb:d2:5e:15:
         10:b4:dd:ff:e4:10:fa:c6:38:31:60:95:f7:bb:c1:75:01:35:
         00:9f:2e:f6:fc:89:88:18:16:a5:3a:d8:30:71:ac:63:dd:d5:
         1f:5a:52:2c:af:3a:b8:0a:1c:f8:aa:5b:a3:2d:50:34:c1:61:
         95:a5:32:ee:3c:8c:95:ed:6e:0b:ad:93:af:8c:5c:5e:98:2c:
         3a:87:30:e6:45:8b:78:0c:3e:c2:b8:25:d4:82:b6:5c:43:30:
         89:dc:79:b6:8c:23:a1:fc:7c:41:91:1b:f5:97:79:37:ec:19:
         28:c7:f3:22:c8:0f:2c:89:3b:e9:94:ad:b7:14:98:38:30:1a:
         d8:1a:55:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org