Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32312e302f32342d3234203d3e20323632373630.roa
File:                     3138362e3232352e32312e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          RQR2nlMhXFIcWKJ3os22LMUMMoRS1dURL//wV+QXl0A=
Subject key identifier:   7D:3B:3A:CB:0F:89:22:9E:D0:D4:71:E3:53:EF:91:48:AB:90:F2:BD
Certificate issuer:       /CN=765BDBE864ED90385A6B09951B2404484428A7B2
Certificate serial:       1D0398CFE400D401FF50F48A893F9CB0D3C944E9
Authority key identifier: 76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32312e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 23 Jun 2021 18:00:50 +0000
ROA not before:           Wed 23 Jun 2021 17:55:50 +0000
ROA not after:            Wed 22 Jun 2022 18:00:50 +0000
asID:                     262760
IP address blocks:        186.225.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:03:98:cf:e4:00:d4:01:ff:50:f4:8a:89:3f:9c:b0:d3:c9:44:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765BDBE864ED90385A6B09951B2404484428A7B2
        Validity
            Not Before: Jun 23 17:55:50 2021 GMT
            Not After : Jun 22 18:00:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:cc:72:96:b1:6d:a7:5c:10:4b:a7:88:63:
                    57:44:55:46:e1:44:21:6e:34:bb:8f:2e:30:f1:f0:
                    de:6c:24:db:b2:ba:d8:f1:a1:36:e4:8c:9f:cd:3a:
                    6c:40:4c:10:4a:c2:40:7e:e7:0c:98:07:8d:9c:52:
                    91:6a:ac:a5:ce:88:ca:19:97:3c:0a:c4:c2:ef:5b:
                    32:dc:ef:bc:63:36:4f:33:9b:83:36:11:69:2f:86:
                    ae:cd:2e:2b:24:0c:46:98:03:91:0e:15:25:5f:57:
                    6c:e0:30:8f:09:13:d1:35:eb:db:f0:97:de:50:31:
                    b7:97:42:2a:74:54:ac:47:70:d8:87:81:36:e7:d3:
                    1c:92:bc:cd:d5:a4:7d:38:25:6f:9c:bc:ac:eb:a4:
                    3e:77:9a:a0:bc:d4:1e:8d:35:c8:84:1c:aa:5c:01:
                    34:54:64:82:b7:fb:14:37:89:cb:87:0f:87:f7:64:
                    aa:6d:47:e6:f7:cd:6d:26:5a:01:01:14:d1:d3:09:
                    89:e6:5d:5a:60:b2:1c:da:1b:89:d1:96:d3:00:94:
                    18:3f:c3:dc:c4:f3:01:b6:4e:bd:38:5c:9d:f3:6e:
                    bd:a5:9d:e4:70:a1:63:b0:11:66:c5:e9:d4:d7:9b:
                    ac:a0:33:61:76:1b:72:b7:e8:4a:17:76:40:0b:e0:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3B:3A:CB:0F:89:22:9E:D0:D4:71:E3:53:EF:91:48:AB:90:F2:BD
            X509v3 Authority Key Identifier:
                keyid:76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/765BDBE864ED90385A6B09951B2404484428A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32312e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:69:c3:e3:68:32:93:51:8a:d2:51:ba:18:1a:12:c0:85:
         44:c5:d2:d0:8f:f9:7f:ba:4e:c5:27:fe:b8:3c:05:d9:6f:b6:
         c6:91:d3:82:4e:3c:16:c2:23:82:51:06:c4:6b:91:f9:e1:8f:
         39:ed:50:c0:6e:fb:6b:7e:ff:3e:9c:b0:ae:15:ab:0d:55:66:
         53:36:e8:fc:95:89:61:e6:9a:92:81:2e:ca:99:f4:6f:73:dc:
         d3:b8:0a:60:2a:33:e2:39:d1:bc:17:64:eb:bf:12:57:4e:22:
         db:4b:65:b8:71:6a:17:55:8a:98:4e:d9:8e:35:8c:f8:82:79:
         2b:73:fa:e6:7a:b4:ba:e3:9b:a7:f9:c8:04:14:1b:91:5a:85:
         25:38:37:f3:e2:8c:a7:64:bd:70:f6:91:6a:84:ce:ba:41:35:
         bd:49:9e:59:ad:2e:98:ed:f9:b1:d1:55:99:1e:fc:c8:f8:65:
         24:3d:9c:7d:f8:60:f2:70:e0:29:3e:cc:e6:a7:b5:a0:49:5e:
         be:45:e4:7b:56:f0:71:22:fc:4b:41:eb:da:ca:3d:a0:a9:12:
         3f:df:84:68:e9:39:69:9e:c1:d4:dd:40:43:74:fc:ed:0b:3e:
         38:3d:61:ee:e0:7e:d4:65:1c:9b:05:96:ef:29:7e:64:7c:67:
         b4:e9:2d:d6
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUHQOYz+QA1AH/UPSKiT+csNPJROkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QkRCRTg2NEVEOTAzODVBNkIwOTk1MUIyNDA0NDg0
NDI4QTdCMjAeFw0yMTA2MjMxNzU1NTBaFw0yMjA2MjIxODAwNTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkY3QUNDNzI5NkIxNkRBNzVD
MTA0QkE3ODg2MzU3NDQ1NTQ2RTE0NDIxNkUzNEJCOEYyRTMwRjFGMERFNkMyNERC
QjJCQUQ4RjFBMTM2RTQ4QzlGQ0QzQTZDNDA0QzEwNEFDMjQwN0VFNzBDOTgwNzhE
OUM1MjkxNkFBQ0E1Q0U4OENBMTk5NzNDMEFDNEMyRUY1QjMyRENFRkJDNjMzNjRG
MzM5QjgzMzYxMTY5MkY4NkFFQ0QyRTJCMjQwQzQ2OTgwMzkxMEUxNTI1NUY1NzZD
RTAzMDhGMDkxM0QxMzVFQkRCRjA5N0RFNTAzMUI3OTc0MjJBNzQ1NEFDNDc3MEQ4
ODc4MTM2RTdEMzFDOTJCQ0NERDVBNDdEMzgyNTZGOUNCQ0FDRUJBNDNFNzc5QUEw
QkNENDFFOEQzNUM4ODQxQ0FBNUMwMTM0NTQ2NDgyQjdGQjE0Mzc4OUNCODcwRjg3
Rjc2NEFBNkQ0N0U2RjdDRDZEMjY1QTAxMDExNEQxRDMwOTg5RTY1RDVBNjBCMjFD
REExQjg5RDE5NkQzMDA5NDE4M0ZDM0RDQzRGMzAxQjY0RUJEMzg1QzlERjM2RUJE
QTU5REU0NzBBMTYzQjAxMTY2QzVFOUQ0RDc5QkFDQTAzMzYxNzYxQjcyQjdFODRB
MTc3NjQwMEJFMDU0NDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv3rMcpaxbadcEEuniGNXRFVG4UQhbjS7jy4w8fDebCTbsrrY8aE2
5IyfzTpsQEwQSsJAfucMmAeNnFKRaqylzojKGZc8CsTC71sy3O+8YzZPM5uDNhFp
L4auzS4rJAxGmAORDhUlX1ds4DCPCRPRNevb8JfeUDG3l0IqdFSsR3DYh4E259Mc
krzN1aR9OCVvnLys66Q+d5qgvNQejTXIhByqXAE0VGSCt/sUN4nLhw+H92SqbUfm
981tJloBARTR0wmJ5l1aYLIc2huJ0ZbTAJQYP8PcxPMBtk69OFyd8269pZ3kcKFj
sBFmxenU15usoDNhdhtyt+hKF3ZAC+BUQwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FH07OssPiSKe0NRx41PvkUirkPK9MB8GA1UdIwQYMBaAFHZb2+hk7ZA4WmsJlRsk
BEhEKKeyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6WE40M3VGNkhRdUZI
YnFITWluRFNuaVZGaDlQSHg5QXduNURBbVV4UzI5LzAvNzY1QkRCRTg2NEVEOTAz
ODVBNkIwOTk1MUIyNDA0NDg0NDI4QTdCMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NjVCREJFODY0RUQ5MDM4NUE2QjA5OTUxQjI0MDQ0ODQ0MjhB
N0IyLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CelhONDN1RjZIUXVGSGJxSE1p
bkRTbmlWRmg5UEh4OUF3bjVEQW1VeFMyOS8wLzMxMzgzNjJlMzIzMjM1MmUzMjMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uuEVMA0GCSqGSIb3DQEBCwUAA4IBAQAtsmnD42gyk1GK0lG6GBoSwIVExdLQj/l/
uk7FJ/64PAXZb7bGkdOCTjwWwiOCUQbEa5H54Y857VDAbvtrfv8+nLCuFasNVWZT
Nuj8lYlh5pqSgS7KmfRvc9zTuApgKjPiOdG8F2TrvxJXTiLbS2W4cWoXVYqYTtmO
NYz4gnkrc/rmerS645un+cgEFBuRWoUlODfz4oynZL1w9pFqhM66QTW9SZ5ZrS6Y
7fmx0VWZHvzI+GUkPZx9+GDycOApPszmp7WgSV6+ReR7VvBxIvxLQevayj2gqRI/
34Ro6TlpnsHU3UBDdPztCz44PWHu4H7UZRybBZbvKX5kfGe06S3W
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org