Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32302e302f32342d3234203d3e20323632373630.roa
File:                     3138362e3232352e32302e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          tRZBvABUBiqixn2nxLQzUfK6ybgB3bfscm0RRFs58sc=
Subject key identifier:   B1:C9:F9:EE:60:6A:1A:E1:DD:A0:18:D5:DD:3A:89:4C:75:81:1E:06
Certificate issuer:       /CN=765BDBE864ED90385A6B09951B2404484428A7B2
Certificate serial:       15C62EA3E80EC2C454B0C3BDAAC974EA64F3D3AB
Authority key identifier: 76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32302e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 23 Jun 2021 18:00:49 +0000
ROA not before:           Wed 23 Jun 2021 17:55:49 +0000
ROA not after:            Wed 22 Jun 2022 18:00:49 +0000
asID:                     262760
IP address blocks:        186.225.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c6:2e:a3:e8:0e:c2:c4:54:b0:c3:bd:aa:c9:74:ea:64:f3:d3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765BDBE864ED90385A6B09951B2404484428A7B2
        Validity
            Not Before: Jun 23 17:55:49 2021 GMT
            Not After : Jun 22 18:00:49 2022 GMT
        Subject: CN=3082010A0282010100C6DCCE22F699F983F1E302F238C2EB1C600B92D84D02484C85CECEF2820A4FD1F6B332A0DBE8E691797F0CF33F3E4A141CE45262F87C002BCB161AA4D20330A31F2C6483812A7617EC08731A349EBD80F0F4BB69CD4EF18FB84613DA726126502706B6B2381598041BD1DFA5513C3D4A532DF953E35A228FF93507222478DAAE35A9D36B9E8694E44924256F35F989628323F43B39A85E58D66D8E34B95C9E7CE0B001F5AF8264CC57AF3D2AD21A322B9EF9C9F731CF44875DD7FD4C5F6C7AA81DE013F4531261422A042ED32629844F57BB7C09035D6FBFE8D8A43D0927FE8E689A743A413D3113A028A7D04B6D9F75150B332F32D29E1E2BF89FB107135F7B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:ce:22:f6:99:f9:83:f1:e3:02:f2:38:c2:
                    eb:1c:60:0b:92:d8:4d:02:48:4c:85:ce:ce:f2:82:
                    0a:4f:d1:f6:b3:32:a0:db:e8:e6:91:79:7f:0c:f3:
                    3f:3e:4a:14:1c:e4:52:62:f8:7c:00:2b:cb:16:1a:
                    a4:d2:03:30:a3:1f:2c:64:83:81:2a:76:17:ec:08:
                    73:1a:34:9e:bd:80:f0:f4:bb:69:cd:4e:f1:8f:b8:
                    46:13:da:72:61:26:50:27:06:b6:b2:38:15:98:04:
                    1b:d1:df:a5:51:3c:3d:4a:53:2d:f9:53:e3:5a:22:
                    8f:f9:35:07:22:24:78:da:ae:35:a9:d3:6b:9e:86:
                    94:e4:49:24:25:6f:35:f9:89:62:83:23:f4:3b:39:
                    a8:5e:58:d6:6d:8e:34:b9:5c:9e:7c:e0:b0:01:f5:
                    af:82:64:cc:57:af:3d:2a:d2:1a:32:2b:9e:f9:c9:
                    f7:31:cf:44:87:5d:d7:fd:4c:5f:6c:7a:a8:1d:e0:
                    13:f4:53:12:61:42:2a:04:2e:d3:26:29:84:4f:57:
                    bb:7c:09:03:5d:6f:bf:e8:d8:a4:3d:09:27:fe:8e:
                    68:9a:74:3a:41:3d:31:13:a0:28:a7:d0:4b:6d:9f:
                    75:15:0b:33:2f:32:d2:9e:1e:2b:f8:9f:b1:07:13:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C9:F9:EE:60:6A:1A:E1:DD:A0:18:D5:DD:3A:89:4C:75:81:1E:06
            X509v3 Authority Key Identifier:
                keyid:76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/765BDBE864ED90385A6B09951B2404484428A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32302e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:de:6b:ce:c8:f4:58:df:62:82:6f:e6:ae:ad:d8:65:97:8f:
         cb:21:9e:18:8f:b4:2f:e5:91:65:07:60:8a:ab:f7:e8:bc:3b:
         ad:38:62:ea:8c:b1:78:de:d8:45:0b:b5:d2:c0:a3:c0:6b:6f:
         7e:33:3c:15:9c:47:ff:f2:92:fb:57:fc:0c:45:9a:e0:c4:fa:
         72:2b:ef:5a:b7:64:f3:0c:59:f8:fe:bc:29:96:80:ce:ae:3f:
         ab:73:9e:9f:56:be:91:52:22:09:9d:32:f7:32:e3:6d:cb:f4:
         5c:88:ad:31:99:57:c2:d7:2f:85:63:8c:2c:bb:58:36:4d:af:
         29:0f:d4:d3:3e:60:db:ea:9f:ef:ab:cb:43:a0:31:9f:7f:03:
         09:0e:fb:58:28:c5:43:53:5f:c6:21:07:9e:a8:40:fc:41:6a:
         72:87:ca:f3:16:76:26:58:11:62:27:64:3d:4a:e4:af:a2:6d:
         62:97:a5:e5:75:58:fa:6d:a2:c6:27:7d:d2:c7:49:1d:41:a7:
         65:ea:fd:a6:ae:10:8a:25:e3:9c:26:b7:e8:3f:a8:60:73:8d:
         82:a4:05:69:5e:d7:65:89:4e:b8:a6:25:e1:7b:07:aa:b7:e4:
         64:ac:17:0e:b0:76:3b:98:73:63:3b:b5:c0:8f:2a:82:6f:4d:
         69:b3:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org