Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32322d3234203d3e20323639303733.roa
File:                     3138372e3131302e3134342e302f32322d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          M9aKQaZKamNhi918mWu6YIizR9TaPT+EDzuWZ5i0MyI=
Subject key identifier:   DD:0A:17:C4:51:02:CF:37:B4:B9:18:58:76:7D:9B:6C:BC:E5:2D:79
Certificate issuer:       /CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
Certificate serial:       5314337AE2D4F34519F1BB700B871A589CFAB6DC
Authority key identifier: 53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32322d3234203d3e20323639303733.roa
Signing time:             Thu 25 Aug 2022 19:00:00 +0000
ROA not before:           Thu 25 Aug 2022 18:55:00 +0000
ROA not after:            Thu 24 Aug 2023 19:00:00 +0000
asID:                     269073
IP address blocks:        187.110.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:14:33:7a:e2:d4:f3:45:19:f1:bb:70:0b:87:1a:58:9c:fa:b6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
        Validity
            Not Before: Aug 25 18:55:00 2022 GMT
            Not After : Aug 24 19:00:00 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:44:54:9b:6a:b5:76:af:46:91:91:30:52:
                    1d:55:c8:99:6c:00:bc:b3:02:65:da:5e:52:b9:bc:
                    2a:03:f4:26:5b:7f:a1:5d:9d:5b:7f:91:51:ab:2a:
                    3c:3a:b3:b7:08:56:7d:e5:ee:34:04:c5:ab:54:87:
                    5a:a8:a4:db:77:f4:83:1e:2d:17:b3:5c:45:cc:04:
                    a5:8c:05:77:df:9f:e3:2d:87:10:ba:8d:4e:12:44:
                    f5:e4:99:2e:14:98:c2:5c:26:8f:0c:10:1e:69:f8:
                    b6:39:ba:98:40:d6:8d:65:6b:4b:e4:9b:3a:85:0c:
                    34:b5:1c:4a:04:c2:fd:4c:70:ca:19:e8:43:00:90:
                    ce:02:97:7d:81:82:d8:6a:07:33:e4:36:bc:98:65:
                    f6:21:cd:86:db:d6:c5:37:fa:70:69:b6:75:d7:5c:
                    63:60:0b:ed:08:33:6d:57:4b:4b:ed:40:89:e1:20:
                    b4:7d:fa:b7:b8:85:55:eb:23:89:b0:94:99:e2:9f:
                    a5:40:d6:66:69:59:82:0a:00:b8:ab:dd:b7:84:71:
                    d0:09:30:a3:81:4e:1b:b4:fd:7c:16:2c:5b:b2:31:
                    fa:6c:b4:58:11:91:19:28:75:5d:e0:c4:98:89:52:
                    97:92:3f:ef:2f:85:d4:32:5f:63:d7:3f:fc:86:2d:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0A:17:C4:51:02:CF:37:B4:B9:18:58:76:7D:9B:6C:BC:E5:2D:79
            X509v3 Authority Key Identifier:
                keyid:53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32322d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:a8:21:30:bd:06:ff:0a:d1:ce:23:16:1d:d1:02:81:19:69:
         98:dd:fa:6b:c3:69:67:a1:6c:e7:14:66:2b:ab:b5:60:7a:1f:
         32:fd:53:6c:07:e7:da:e2:5a:55:7b:b2:ef:a0:4c:eb:d3:fc:
         24:ce:9b:18:b5:cc:88:93:6e:da:28:cc:20:d7:42:d0:2c:37:
         f7:55:f9:b4:c6:ad:14:72:5c:99:24:7d:78:4e:22:27:60:e8:
         52:ac:96:6d:05:4c:44:09:cb:2f:3d:85:a2:ed:25:4f:9a:3a:
         60:3d:15:35:94:f6:51:89:ce:fd:37:63:57:69:62:30:98:e6:
         e6:aa:12:55:37:5a:fe:ec:35:34:0d:1b:c6:85:f1:e1:62:7c:
         71:d9:c2:6d:4a:6e:2f:03:17:5f:18:63:7a:82:0b:40:a4:53:
         49:bf:a1:ef:ed:b0:8a:c3:da:cc:ea:cb:51:f1:30:e9:d8:e5:
         3e:f5:c5:fc:2f:76:72:aa:3c:42:e3:2a:7e:2b:5f:9b:c5:0d:
         a9:3f:f7:94:a7:43:e0:53:0d:47:23:0e:2d:d7:fb:81:9b:a4:
         c3:16:04:ee:7e:18:15:f4:a2:df:c3:74:87:7f:a6:c3:70:a6:
         01:18:86:7f:f9:2c:52:47:1e:8d:3f:13:21:5e:b6:eb:cf:41:
         50:6e:c4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org