Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135382e302f32342d3234203d3e20323633343231.roa
File:                     3136382e3132312e3135382e302f32342d3234203d3e20323633343231.roa (raw, json)
Hash identifier:          PHcEaekJrFadTGVEYECVtE28Oo03jl/a5t8xCiaMehY=
Subject key identifier:   A3:DF:31:0C:2B:CE:F1:89:4E:C1:4C:FC:D6:77:01:C2:D3:C2:CC:FF
Certificate issuer:       /CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
Certificate serial:       22BAF2864AEECC90F055A916926E43220E2D6FB0
Authority key identifier: B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135382e302f32342d3234203d3e20323633343231.roa
Signing time:             Thu 07 Mar 2024 14:25:21 +0000
ROA not before:           Thu 07 Mar 2024 14:20:21 +0000
ROA not after:            Thu 06 Mar 2025 14:25:21 +0000
asID:                     263421
IP address blocks:        168.121.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ba:f2:86:4a:ee:cc:90:f0:55:a9:16:92:6e:43:22:0e:2d:6f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
        Validity
            Not Before: Mar  7 14:20:21 2024 GMT
            Not After : Mar  6 14:25:21 2025 GMT
        Subject: CN=A3DF310C2BCEF1894EC14CFCD67701C2D3C2CCFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:03:5a:76:b3:80:bc:ee:a9:95:52:76:39:
                    b6:a4:32:2b:eb:d7:4a:04:3c:81:43:cd:bd:f0:24:
                    58:a7:8c:fd:5d:73:a2:41:79:fa:01:60:6d:1e:db:
                    82:fb:b1:50:17:34:a3:0f:db:05:f0:e0:d4:ce:bc:
                    b2:1b:c9:1f:4b:56:16:43:57:a8:9d:0c:04:90:22:
                    2f:a8:b6:8d:88:5f:26:40:ed:f1:42:a1:a8:b2:42:
                    67:a3:e1:f5:2f:e0:d4:cf:1c:aa:ea:17:32:49:8c:
                    e5:9a:d7:17:a7:ef:8f:99:cb:ec:7f:62:8d:9f:4a:
                    86:e0:24:44:f6:d4:95:e0:31:b1:4a:08:d7:32:76:
                    84:17:ea:07:93:d7:c1:92:6f:54:67:e6:5c:a1:43:
                    82:75:57:db:18:15:ce:f5:48:18:b7:d8:08:60:f8:
                    f5:e4:20:ed:c6:11:de:1f:75:05:fa:ca:ea:8d:0c:
                    3e:23:a0:b5:ea:51:62:03:d6:e6:95:2f:b4:89:81:
                    31:3b:b9:84:4d:e1:2a:20:27:8b:1c:5d:90:49:ce:
                    db:f4:94:f2:70:18:28:c7:66:d8:10:f3:af:e9:76:
                    fa:c7:9b:05:55:92:f1:15:ca:be:ab:a1:77:29:92:
                    d0:9b:f8:7f:91:40:c8:cd:4f:c6:32:ff:03:df:41:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:31:0C:2B:CE:F1:89:4E:C1:4C:FC:D6:77:01:C2:D3:C2:CC:FF
            X509v3 Authority Key Identifier:
                keyid:B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3132312e3135382e302f32342d3234203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:37:65:06:38:2a:3c:82:77:36:df:fb:c9:61:32:41:42:1b:
         74:3c:d0:f0:b8:d7:fa:60:0f:68:9d:b7:c2:43:6f:fa:51:53:
         20:ef:de:7e:68:25:92:d1:05:84:d0:2c:35:f4:89:8e:79:ab:
         24:99:be:42:0b:54:2f:20:2a:02:7f:ea:36:fc:9e:db:7c:fd:
         15:b8:c5:5b:e7:88:11:b1:2b:80:4a:bc:42:81:fd:63:0b:6b:
         54:d6:bc:3b:4f:fd:d1:75:93:03:39:99:c6:a7:35:fa:5f:9a:
         69:0d:ea:4f:4c:32:a9:4d:6e:97:6d:ec:67:26:5f:f4:ce:74:
         2c:ed:5b:8a:d1:55:9a:8a:ff:63:8f:4e:b5:e2:6b:f3:05:85:
         8f:c5:44:e4:4b:26:25:e7:fe:fa:4e:5f:0c:d3:45:c6:f2:9f:
         49:5f:f5:d1:bd:8e:aa:cf:26:72:dc:df:13:b3:bb:57:9d:6f:
         b9:ca:1f:7b:ad:30:1f:70:ad:e8:6e:96:9f:e6:65:fd:a7:e3:
         ea:e5:04:03:ed:3d:c5:70:3d:7a:99:5f:bb:66:98:b9:2c:8c:
         a2:20:9d:09:f8:a6:b7:e0:3f:42:20:2e:88:35:a4:ae:28:27:
         b1:8f:00:09:45:80:aa:ec:37:73:c1:aa:1d:c5:2c:e4:e6:06:
         d9:a2:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org