Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32362e302f32342d3234203d3e20323632373630.roa
File:                     3138362e3232352e32362e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          fD7LcvW1tB/GzVQQOXYeBv+m8uDYrZuby7961MmBPfk=
Subject key identifier:   E1:AA:A5:C5:41:E3:6F:A7:EF:B6:4C:9C:38:16:B8:AD:54:BD:77:7B
Certificate issuer:       /CN=765BDBE864ED90385A6B09951B2404484428A7B2
Certificate serial:       34C0A1E9B1B8E2C4E51505531939792E7C80A663
Authority key identifier: 76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32362e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 23 Jun 2021 18:00:47 +0000
ROA not before:           Wed 23 Jun 2021 17:55:47 +0000
ROA not after:            Wed 22 Jun 2022 18:00:47 +0000
asID:                     262760
IP address blocks:        186.225.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c0:a1:e9:b1:b8:e2:c4:e5:15:05:53:19:39:79:2e:7c:80:a6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765BDBE864ED90385A6B09951B2404484428A7B2
        Validity
            Not Before: Jun 23 17:55:47 2021 GMT
            Not After : Jun 22 18:00:47 2022 GMT
        Subject: CN=3082010A0282010100BAD5364066D121D25FCC842123B834D2244D250C1B429572A1FFEE53CCF176DAF1DAD5842ABE0502D0637108BE856D4F3F9DA42E8ED1AB18E85BD351D8A65D2F7EC934C1970AEE9A8653892228776D63B0F67EAA411291F03343A5979A0EEAF552027AD856E749BFE4C0B0418AF2D0E1A442BE762EA21C4EF6BA954E4AA673398526724A0DCE4B807468BA889B5608253D8902F326AB719DE9C3E76EBD116A0A23B36517E9D8BE541BE7039D684B0ECA96673758D9746BAAEFF578C53DEA8E0468074A54E99C395798424FE0A38AD83D34CC5536D285054A34A7090912215C27BB73107AF36C0DE4D2BAE6041007D253929A057A11A68D183C69585D7D5130E50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:36:40:66:d1:21:d2:5f:cc:84:21:23:b8:
                    34:d2:24:4d:25:0c:1b:42:95:72:a1:ff:ee:53:cc:
                    f1:76:da:f1:da:d5:84:2a:be:05:02:d0:63:71:08:
                    be:85:6d:4f:3f:9d:a4:2e:8e:d1:ab:18:e8:5b:d3:
                    51:d8:a6:5d:2f:7e:c9:34:c1:97:0a:ee:9a:86:53:
                    89:22:28:77:6d:63:b0:f6:7e:aa:41:12:91:f0:33:
                    43:a5:97:9a:0e:ea:f5:52:02:7a:d8:56:e7:49:bf:
                    e4:c0:b0:41:8a:f2:d0:e1:a4:42:be:76:2e:a2:1c:
                    4e:f6:ba:95:4e:4a:a6:73:39:85:26:72:4a:0d:ce:
                    4b:80:74:68:ba:88:9b:56:08:25:3d:89:02:f3:26:
                    ab:71:9d:e9:c3:e7:6e:bd:11:6a:0a:23:b3:65:17:
                    e9:d8:be:54:1b:e7:03:9d:68:4b:0e:ca:96:67:37:
                    58:d9:74:6b:aa:ef:f5:78:c5:3d:ea:8e:04:68:07:
                    4a:54:e9:9c:39:57:98:42:4f:e0:a3:8a:d8:3d:34:
                    cc:55:36:d2:85:05:4a:34:a7:09:09:12:21:5c:27:
                    bb:73:10:7a:f3:6c:0d:e4:d2:ba:e6:04:10:07:d2:
                    53:92:9a:05:7a:11:a6:8d:18:3c:69:58:5d:7d:51:
                    30:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AA:A5:C5:41:E3:6F:A7:EF:B6:4C:9C:38:16:B8:AD:54:BD:77:7B
            X509v3 Authority Key Identifier:
                keyid:76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/765BDBE864ED90385A6B09951B2404484428A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32362e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:a5:8e:99:f5:b0:05:f0:5d:40:dc:c0:62:04:3d:c5:a9:bc:
         f4:8f:3d:b7:9b:cb:34:a1:8a:46:bf:06:c1:7c:25:0b:0e:b1:
         c7:01:be:3a:c5:be:ef:b7:fb:5f:5d:31:9c:4c:5a:07:75:98:
         9c:36:c2:56:2c:fd:b1:9f:79:4a:95:92:92:c8:d8:6f:ef:75:
         92:c8:94:55:a3:f9:8c:87:27:60:96:a6:fd:27:ca:3f:87:c0:
         f5:5a:57:c9:df:61:a3:9a:eb:f1:6e:2e:f3:0e:a6:78:03:6e:
         e8:1d:04:bd:57:2d:8d:9a:65:b4:08:6b:75:7f:39:a4:38:9b:
         36:c8:bf:9f:32:8a:59:52:95:68:18:e3:89:9d:67:d8:79:a7:
         37:9a:ce:2e:2c:03:ab:f6:91:24:e3:01:02:84:c8:71:76:f4:
         da:3d:f6:89:86:06:d6:b6:86:31:d5:1f:23:03:77:b3:4a:ec:
         48:70:99:7d:64:52:4c:07:b5:3b:e9:cf:f9:ad:e7:ab:78:1d:
         0b:1a:e5:bf:e8:b9:b7:a9:fc:89:d9:0e:0e:8f:68:8c:a6:20:
         e0:c5:8a:72:67:6e:3d:68:97:6a:86:7f:4b:c0:ca:7d:17:dc:
         0f:89:37:c8:42:0c:79:6c:ba:24:50:e4:f3:fc:87:5f:49:0c:
         5a:91:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org