Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31372e302f32342d3234203d3e20323632373630.roa
File:                     3138362e3232352e31372e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          fIJx5imQ2MdCHAoyAkmYI6KIPUKduWfSSmX1HIT4NWY=
Subject key identifier:   C6:67:0B:98:68:E2:60:CD:81:5D:E3:1C:D6:AC:C4:BE:54:29:AC:7B
Certificate issuer:       /CN=765BDBE864ED90385A6B09951B2404484428A7B2
Certificate serial:       23DEE5CC1C1197CE2EFBB11C955414D8F47E7F63
Authority key identifier: 76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31372e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 23 Jun 2021 18:00:48 +0000
ROA not before:           Wed 23 Jun 2021 17:55:48 +0000
ROA not after:            Wed 22 Jun 2022 18:00:48 +0000
asID:                     262760
IP address blocks:        186.225.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:de:e5:cc:1c:11:97:ce:2e:fb:b1:1c:95:54:14:d8:f4:7e:7f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765BDBE864ED90385A6B09951B2404484428A7B2
        Validity
            Not Before: Jun 23 17:55:48 2021 GMT
            Not After : Jun 22 18:00:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:22:87:a6:71:92:5c:f9:61:48:4a:fc:81:
                    10:50:e7:31:04:2a:15:75:71:56:18:c7:1a:57:ba:
                    2e:4f:8a:d1:15:2a:80:e7:4f:37:0c:ba:09:4d:22:
                    18:c8:e3:70:f9:de:14:67:19:60:97:9c:2f:34:b2:
                    68:da:a1:a4:c1:07:6f:4f:b1:23:fd:a2:94:f2:56:
                    f9:56:a4:3f:02:51:92:23:05:7d:ff:1e:de:73:47:
                    6e:c1:5f:c8:c9:4c:da:08:9a:e4:b7:93:5d:65:e4:
                    45:a0:a9:06:ad:cd:4c:e4:fd:0b:9b:63:53:0a:60:
                    3d:44:a7:2f:3c:c7:16:0c:f6:1f:af:49:6f:10:27:
                    8b:31:58:3a:31:d9:9c:f4:46:83:92:91:7d:2b:a7:
                    37:d7:14:df:c0:4e:68:5e:08:0b:ac:c8:90:fb:4a:
                    2e:ac:d8:d6:e1:c1:63:5d:10:e8:5d:fc:ba:80:7f:
                    f9:a3:70:02:c3:15:3d:73:82:91:a0:2a:e6:48:f7:
                    e4:da:c1:d6:e3:e3:ba:15:d5:a1:cc:07:4c:79:08:
                    6f:9d:8e:f4:3a:e5:7d:22:df:bd:f6:fb:2b:c5:29:
                    0a:16:4b:2d:69:ea:4b:2d:12:ef:76:aa:a2:6a:f8:
                    52:51:51:94:04:46:6a:77:3e:2f:e9:40:1c:6f:93:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:67:0B:98:68:E2:60:CD:81:5D:E3:1C:D6:AC:C4:BE:54:29:AC:7B
            X509v3 Authority Key Identifier:
                keyid:76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/765BDBE864ED90385A6B09951B2404484428A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31372e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:a3:fd:cb:ed:59:16:6c:76:7f:30:8a:ac:69:f3:b3:24:bc:
         b5:7c:36:e8:3d:59:5c:8f:2e:26:13:36:11:03:51:d0:ee:8c:
         40:a8:cd:68:bd:ef:ad:71:0a:08:e4:2a:5b:b4:ad:63:65:71:
         af:f3:24:24:19:27:d0:c8:46:e7:16:e0:d2:a3:3b:80:46:80:
         55:f2:71:fb:4a:34:77:b0:9b:30:34:fe:2d:5d:df:0b:6a:6e:
         99:1a:5e:fe:00:3f:2a:3c:ad:aa:3b:1d:4a:c1:3f:56:33:9c:
         03:c9:67:7c:81:d8:db:35:2b:cf:1a:5a:6a:d1:5e:8e:1c:a3:
         b2:48:57:52:00:36:f9:a1:16:62:ac:6d:fb:9e:e0:c6:91:0c:
         02:15:a1:74:e7:f5:c0:b8:ed:7b:a0:39:c3:21:b1:86:83:36:
         f5:03:78:f6:84:e5:02:d5:0c:a9:85:84:2d:6d:ce:50:b2:07:
         49:a5:3f:4f:dd:43:4e:3c:f1:72:c0:fa:83:71:5e:56:88:2d:
         b7:e2:79:74:a9:7a:79:df:13:7a:44:c3:f6:f7:3b:67:23:8d:
         b8:b4:6b:bd:4c:e4:94:11:86:74:2b:6d:c6:7c:66:6b:73:f1:
         a0:ac:bd:10:98:3f:11:bf:99:43:82:70:63:3a:d6:34:70:e4:
         13:b8:9a:d5
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUI97lzBwRl84u+7EclVQU2PR+f2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QkRCRTg2NEVEOTAzODVBNkIwOTk1MUIyNDA0NDg0
NDI4QTdCMjAeFw0yMTA2MjMxNzU1NDhaFw0yMjA2MjIxODAwNDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDA0RTIyODdBNjcxOTI1Q0Y5
NjE0ODRBRkM4MTEwNTBFNzMxMDQyQTE1NzU3MTU2MThDNzFBNTdCQTJFNEY4QUQx
MTUyQTgwRTc0RjM3MENCQTA5NEQyMjE4QzhFMzcwRjlERTE0NjcxOTYwOTc5QzJG
MzRCMjY4REFBMUE0QzEwNzZGNEZCMTIzRkRBMjk0RjI1NkY5NTZBNDNGMDI1MTky
MjMwNTdERkYxRURFNzM0NzZFQzE1RkM4Qzk0Q0RBMDg5QUU0Qjc5MzVENjVFNDQ1
QTBBOTA2QURDRDRDRTRGRDBCOUI2MzUzMEE2MDNENDRBNzJGM0NDNzE2MENGNjFG
QUY0OTZGMTAyNzhCMzE1ODNBMzFEOTlDRjQ0NjgzOTI5MTdEMkJBNzM3RDcxNERG
QzA0RTY4NUUwODBCQUNDODkwRkI0QTJFQUNEOEQ2RTFDMTYzNUQxMEU4NURGQ0JB
ODA3RkY5QTM3MDAyQzMxNTNENzM4MjkxQTAyQUU2NDhGN0U0REFDMUQ2RTNFM0JB
MTVENUExQ0MwNzRDNzkwODZGOUQ4RUY0M0FFNTdEMjJERkJERjZGQjJCQzUyOTBB
MTY0QjJENjlFQTRCMkQxMkVGNzZBQUEyNkFGODUyNTE1MTk0MDQ0NjZBNzczRTJG
RTk0MDFDNkY5MzI4NzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0E4ih6Zxklz5YUhK/IEQUOcxBCoVdXFWGMcaV7ouT4rRFSqA5083
DLoJTSIYyONw+d4UZxlgl5wvNLJo2qGkwQdvT7Ej/aKU8lb5VqQ/AlGSIwV9/x7e
c0duwV/IyUzaCJrkt5NdZeRFoKkGrc1M5P0Lm2NTCmA9RKcvPMcWDPYfr0lvECeL
MVg6Mdmc9EaDkpF9K6c31xTfwE5oXggLrMiQ+0ourNjW4cFjXRDoXfy6gH/5o3AC
wxU9c4KRoCrmSPfk2sHW4+O6FdWhzAdMeQhvnY70OuV9It+99vsrxSkKFkstaepL
LRLvdqqiavhSUVGUBEZqdz4v6UAcb5MoeQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMZnC5ho4mDNgV3jHNasxL5UKax7MB8GA1UdIwQYMBaAFHZb2+hk7ZA4WmsJlRsk
BEhEKKeyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6WE40M3VGNkhRdUZI
YnFITWluRFNuaVZGaDlQSHg5QXduNURBbVV4UzI5LzAvNzY1QkRCRTg2NEVEOTAz
ODVBNkIwOTk1MUIyNDA0NDg0NDI4QTdCMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NjVCREJFODY0RUQ5MDM4NUE2QjA5OTUxQjI0MDQ0ODQ0MjhB
N0IyLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CelhONDN1RjZIUXVGSGJxSE1p
bkRTbmlWRmg5UEh4OUF3bjVEQW1VeFMyOS8wLzMxMzgzNjJlMzIzMjM1MmUzMTM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uuERMA0GCSqGSIb3DQEBCwUAA4IBAQC1o/3L7VkWbHZ/MIqsafOzJLy1fDboPVlc
jy4mEzYRA1HQ7oxAqM1ove+tcQoI5CpbtK1jZXGv8yQkGSfQyEbnFuDSozuARoBV
8nH7SjR3sJswNP4tXd8Lam6ZGl7+AD8qPK2qOx1KwT9WM5wDyWd8gdjbNSvPGlpq
0V6OHKOySFdSADb5oRZirG37nuDGkQwCFaF05/XAuO17oDnDIbGGgzb1A3j2hOUC
1QyphYQtbc5QsgdJpT9P3UNOPPFywPqDcV5WiC234nl0qXp53xN6RMP29ztnI424
tGu9TOSUEYZ0K23GfGZrc/GgrL0QmD8Rv5lDgnBjOtY0cOQTuJrV
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org