Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31362e302f32302d3230203d3e20323632373630.roa
File:                     3138362e3232352e31362e302f32302d3230203d3e20323632373630.roa (raw, json)
Hash identifier:          498v/ycA9DkdPvLjmxukt7f0zl+KEgV8xU5SAJJHDYA=
Subject key identifier:   CE:02:5B:5F:A1:06:5D:6F:1C:97:7E:43:ED:34:F3:0D:3C:3F:4E:F5
Certificate issuer:       /CN=765BDBE864ED90385A6B09951B2404484428A7B2
Certificate serial:       3994D3C8D0B2C176067D3E19CA4D55EE99F58045
Authority key identifier: 76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31362e302f32302d3230203d3e20323632373630.roa
Signing time:             Wed 23 Jun 2021 18:00:50 +0000
ROA not before:           Wed 23 Jun 2021 17:55:50 +0000
ROA not after:            Wed 22 Jun 2022 18:00:50 +0000
asID:                     262760
IP address blocks:        186.225.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:94:d3:c8:d0:b2:c1:76:06:7d:3e:19:ca:4d:55:ee:99:f5:80:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765BDBE864ED90385A6B09951B2404484428A7B2
        Validity
            Not Before: Jun 23 17:55:50 2021 GMT
            Not After : Jun 22 18:00:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:2f:7c:6c:73:b3:d2:4e:9e:4e:5b:b3:ad:
                    2c:48:b9:d3:80:1f:4c:97:4c:52:69:ba:7c:5e:20:
                    07:75:09:8c:51:8a:e4:e3:94:41:7c:b2:ee:7d:e6:
                    48:c8:b7:5b:cf:1e:9a:d5:b9:cf:08:96:6e:34:45:
                    4e:9d:c7:e1:70:e7:92:36:3e:d7:7b:f2:27:ff:4d:
                    bf:d1:85:f5:5e:b3:27:2f:35:17:19:96:8c:39:8c:
                    b8:3b:70:90:b4:f4:cc:5d:7a:9f:9d:f4:3b:18:4a:
                    7d:7e:77:4c:c5:b7:9d:28:00:4c:9a:69:01:c9:99:
                    d4:e0:d5:7a:ae:00:2c:e2:a6:25:db:ac:39:0c:f5:
                    bc:1c:23:a3:f0:6d:00:d0:43:77:29:65:4f:5f:20:
                    9c:6f:a3:7c:94:9e:45:ae:2b:17:8b:da:04:50:39:
                    1f:79:65:8c:20:fd:31:ea:4c:5b:3e:b5:4b:a0:dc:
                    5c:39:e4:be:dd:24:20:14:a1:1f:bd:37:49:7e:e1:
                    55:72:4d:7b:65:6f:d8:f9:74:6b:47:a6:ee:bd:76:
                    d3:00:75:db:80:73:5c:ba:5b:85:63:60:e2:3c:3c:
                    3b:58:51:4e:5f:a6:33:16:1c:17:cc:47:d6:1e:d7:
                    59:6c:38:bf:64:6a:b5:97:94:cb:7d:af:76:cd:28:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:02:5B:5F:A1:06:5D:6F:1C:97:7E:43:ED:34:F3:0D:3C:3F:4E:F5
            X509v3 Authority Key Identifier:
                keyid:76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/765BDBE864ED90385A6B09951B2404484428A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31362e302f32302d3230203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c4:55:b3:a8:f3:1f:bd:7c:74:a9:8b:42:7c:6f:3d:cc:8b:19:
         7d:1f:a8:c4:d9:f3:c7:70:0f:04:19:96:03:c2:cf:e0:92:4a:
         d5:54:58:ee:04:8d:b5:7c:ed:d6:58:0e:74:88:05:c5:93:1a:
         7b:ee:a4:09:5f:f8:3f:0b:73:c9:29:35:7a:56:5a:42:27:e2:
         58:a7:d1:18:70:eb:44:b9:3a:fb:34:f3:e9:ef:64:bb:94:df:
         9d:31:c2:83:3b:92:05:c9:3e:e1:3f:18:94:f4:1f:03:8c:1a:
         df:82:94:e6:21:bf:b4:d1:5f:57:37:97:49:2a:ab:6b:fa:f8:
         f9:c1:b8:8d:e6:5c:b1:c2:09:7c:fe:88:e8:d7:d6:cb:95:c4:
         98:bc:61:1b:a3:a3:87:1c:93:38:03:1f:3d:6e:1f:f1:7c:e2:
         d0:1b:1e:99:0e:22:69:34:81:d0:9c:9d:c5:a7:2d:9b:7f:b3:
         4f:e8:9c:da:b0:e9:6d:42:80:71:e4:00:b6:73:f4:fa:84:32:
         48:f7:07:17:6e:3e:de:4e:55:e0:1f:6d:1b:19:87:0d:97:da:
         8a:cf:b4:c4:fa:17:b5:0a:f3:6a:c9:be:9b:dd:5c:56:b1:7d:
         20:22:d7:14:67:d4:af:99:57:41:c5:a1:cf:cf:71:f5:86:a9:
         69:b0:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org