Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31392e302f32342d3234203d3e20323632373630.roa
File:                     3138362e3232352e31392e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          Z0l9z2vkxr/SPzPpF0aw4CCf2haIReQXjk2vtoEHl0Y=
Subject key identifier:   23:C0:43:AE:DA:3C:24:17:CB:2D:4A:08:75:CD:A0:C0:E6:C5:71:8B
Certificate issuer:       /CN=765BDBE864ED90385A6B09951B2404484428A7B2
Certificate serial:       3CA12D499A6D43ADDF39C0B3C670800907DB201E
Authority key identifier: 76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31392e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 23 Jun 2021 18:00:47 +0000
ROA not before:           Wed 23 Jun 2021 17:55:47 +0000
ROA not after:            Wed 22 Jun 2022 18:00:47 +0000
asID:                     262760
IP address blocks:        186.225.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a1:2d:49:9a:6d:43:ad:df:39:c0:b3:c6:70:80:09:07:db:20:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765BDBE864ED90385A6B09951B2404484428A7B2
        Validity
            Not Before: Jun 23 17:55:47 2021 GMT
            Not After : Jun 22 18:00:47 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:02:2b:bc:2f:a4:45:42:ca:87:ce:95:fb:03:
                    91:00:44:8f:59:a8:66:00:dd:b4:16:29:2f:85:be:
                    07:29:4f:12:dc:27:52:03:b8:20:e6:93:06:06:02:
                    24:52:73:ad:6f:ff:66:ec:2f:a2:e1:48:c7:ea:2a:
                    15:ca:5f:84:8c:0e:26:9b:49:43:74:f9:ac:d4:50:
                    6a:78:db:c5:f7:ee:dd:96:b5:d0:02:07:b0:c5:d4:
                    af:ca:19:dc:39:de:6a:0f:2d:55:d8:49:af:35:f9:
                    98:1b:12:db:26:c3:1e:18:20:a9:b4:6f:5b:33:98:
                    a9:ab:64:af:76:75:c9:f3:37:c4:78:15:69:9a:87:
                    d2:de:fe:a4:6d:72:31:92:d1:f2:b4:1b:1c:30:a4:
                    b4:df:19:51:28:88:59:c7:53:99:68:1e:38:a8:99:
                    47:b7:a8:3a:d3:74:bb:2d:a2:17:70:8b:8d:e8:75:
                    f4:c0:d5:40:9c:af:1c:5a:66:77:ed:64:b3:aa:32:
                    8c:ca:db:91:2a:a5:71:4e:68:fd:46:3a:df:a2:72:
                    a9:7d:fd:31:42:6c:5c:69:e0:72:d8:5b:0f:06:2d:
                    e5:ae:9a:d6:13:6b:bf:ac:2c:d5:4c:b9:14:6b:f3:
                    ef:51:ee:89:e8:88:36:b5:12:26:f5:2d:00:4f:c0:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C0:43:AE:DA:3C:24:17:CB:2D:4A:08:75:CD:A0:C0:E6:C5:71:8B
            X509v3 Authority Key Identifier:
                keyid:76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/765BDBE864ED90385A6B09951B2404484428A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e31392e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:67:a8:08:90:ff:05:38:22:54:89:9c:58:8b:f6:e7:76:df:
         41:0b:a6:0a:6d:d0:bd:49:59:78:35:a6:85:d4:c8:78:d4:04:
         04:b4:f1:0c:b1:e2:4a:d8:e3:1c:c7:1a:f2:c8:99:ed:17:48:
         08:9c:eb:32:0e:7d:20:66:1f:84:4c:99:a3:3d:5b:8a:45:0d:
         f5:e9:fe:4f:5d:60:98:9b:3e:7a:87:34:15:ab:48:e8:e9:5a:
         ed:99:8d:8c:7f:36:27:ca:1a:01:71:d9:4a:3a:eb:50:47:d9:
         36:30:e7:19:65:75:09:ce:9c:de:16:af:d3:fe:57:f7:49:09:
         73:15:0c:36:b7:8d:75:b7:f5:59:ef:c6:73:73:b1:53:3d:dd:
         65:a6:22:c7:cf:b6:40:56:11:b6:74:9c:9b:46:17:a2:34:6c:
         7c:e2:18:53:ce:b4:60:1a:b6:56:d2:41:ed:69:30:91:0b:65:
         fd:63:8e:c5:88:3e:8a:ed:1d:e3:4d:6c:65:32:3b:f3:66:d2:
         6e:0e:2b:3c:29:38:fe:d7:25:10:3b:cf:3b:ce:74:af:5e:b7:
         d1:f6:d4:e0:f5:64:e0:b3:61:23:8b:eb:1f:ea:48:56:3e:04:
         91:f9:f0:e8:a7:80:1f:47:41:e8:71:e9:96:4d:99:92:38:48:
         b1:9e:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org