Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32382e302f32342d3234203d3e20323632373630.roa
File:                     3138362e3232352e32382e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          Wo9qOYSJ1PBmQVA2b5FtBjh2C5QgKmUKbQfFuWEA6U4=
Subject key identifier:   C2:74:9A:06:B3:08:29:63:73:6F:31:D2:B3:D3:DC:D5:9A:E4:C5:C4
Certificate issuer:       /CN=765BDBE864ED90385A6B09951B2404484428A7B2
Certificate serial:       1A6EE92F33897F21869AFF01CE353C5D8C2468D0
Authority key identifier: 76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32382e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 23 Jun 2021 18:00:48 +0000
ROA not before:           Wed 23 Jun 2021 17:55:48 +0000
ROA not after:            Wed 22 Jun 2022 18:00:48 +0000
asID:                     262760
IP address blocks:        186.225.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6e:e9:2f:33:89:7f:21:86:9a:ff:01:ce:35:3c:5d:8c:24:68:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765BDBE864ED90385A6B09951B2404484428A7B2
        Validity
            Not Before: Jun 23 17:55:48 2021 GMT
            Not After : Jun 22 18:00:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:31:0c:39:98:ad:78:13:63:f3:91:a9:73:
                    d8:d7:6f:d9:21:e5:0b:6d:ac:03:e2:b6:a2:6d:d0:
                    e8:19:d7:ed:6a:bc:5d:52:f0:ca:c9:0d:c0:fd:15:
                    d4:d4:33:dc:8c:00:d3:7c:cc:7e:11:bc:55:bb:8e:
                    3b:da:49:62:a0:cd:f6:7b:b1:57:7c:b8:0d:f5:4a:
                    81:01:fc:55:b5:71:54:e9:e9:0d:a1:d2:20:fc:df:
                    2f:c8:a7:ce:dd:e0:58:02:96:43:07:4d:91:a0:23:
                    bc:07:a4:c4:c2:45:bf:69:17:5b:b6:0f:1c:d1:b5:
                    7c:d9:7f:e6:57:7c:f7:59:07:1b:13:4a:81:19:8a:
                    e4:cf:22:7f:89:ca:b9:a0:e8:69:78:f6:39:01:96:
                    ab:37:a9:bd:ee:2e:37:a0:ba:40:16:06:60:e2:9e:
                    1c:9c:ca:f8:ba:43:3c:3c:8e:84:8e:89:4b:8e:14:
                    cd:06:8b:00:fa:91:2c:62:6a:92:dc:8f:f9:cf:91:
                    c0:35:6c:8c:d4:ed:d1:b4:d0:e3:a7:d2:56:ba:22:
                    84:18:b2:36:41:c7:6c:25:6f:95:b5:ee:24:e0:92:
                    35:d4:c5:91:49:07:3f:a0:fd:25:34:ce:5d:9a:a7:
                    e2:b8:f4:ec:bb:88:28:79:7f:2d:7d:95:57:3c:9f:
                    73:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:74:9A:06:B3:08:29:63:73:6F:31:D2:B3:D3:DC:D5:9A:E4:C5:C4
            X509v3 Authority Key Identifier:
                keyid:76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/765BDBE864ED90385A6B09951B2404484428A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32382e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:b4:74:9a:a9:17:73:24:2a:bd:a6:e4:b5:ae:2f:e8:89:
         a5:1d:bf:5a:6e:d7:ab:26:cb:9b:32:a7:74:8c:62:30:22:79:
         1f:a9:3c:32:de:18:a7:56:23:e1:65:c9:45:74:8a:d8:15:30:
         e6:df:40:1e:41:96:6d:5d:e0:fe:75:31:82:00:9d:1c:11:01:
         dc:86:59:8e:86:79:6b:a4:b3:16:c6:b1:4f:8e:77:a5:3e:65:
         4d:7f:75:8b:e4:dc:aa:97:f8:b3:e9:b1:64:cb:b0:d3:82:77:
         5d:a3:13:88:a6:be:d4:1b:03:7e:41:37:b6:33:5a:b2:d6:e6:
         ee:4a:62:bf:62:a6:3f:f5:d9:eb:c2:3f:20:c5:96:43:38:c2:
         b9:fe:62:8e:0a:96:c0:9a:9d:ac:76:67:c4:db:6a:22:0c:f6:
         33:3b:1b:59:c4:76:70:e0:8e:4d:e3:f7:9b:92:90:33:2e:d6:
         c1:7b:cb:a9:28:10:b9:33:28:4b:23:6f:d4:e9:d1:dd:64:16:
         88:ab:76:86:67:04:e8:d4:8c:e8:c6:f8:48:86:0c:2b:3b:0b:
         14:c7:72:fc:05:cc:58:7f:7c:22:08:dc:ad:4e:ed:28:6b:57:
         2a:be:e3:18:17:e3:3b:a7:63:d4:0f:2e:5b:ac:e2:5a:cb:61:
         0e:83:12:2e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUGm7pLzOJfyGGmv8BzjU8XYwkaNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QkRCRTg2NEVEOTAzODVBNkIwOTk1MUIyNDA0NDg0
NDI4QTdCMjAeFw0yMTA2MjMxNzU1NDhaFw0yMjA2MjIxODAwNDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjVCODMxMEMzOTk4QUQ3ODEz
NjNGMzkxQTk3M0Q4RDc2RkQ5MjFFNTBCNkRBQzAzRTJCNkEyNkREMEU4MTlEN0VE
NkFCQzVENTJGMENBQzkwREMwRkQxNUQ0RDQzM0RDOEMwMEQzN0NDQzdFMTFCQzU1
QkI4RTNCREE0OTYyQTBDREY2N0JCMTU3N0NCODBERjU0QTgxMDFGQzU1QjU3MTU0
RTlFOTBEQTFEMjIwRkNERjJGQzhBN0NFRERFMDU4MDI5NjQzMDc0RDkxQTAyM0JD
MDdBNEM0QzI0NUJGNjkxNzVCQjYwRjFDRDFCNTdDRDk3RkU2NTc3Q0Y3NTkwNzFC
MTM0QTgxMTk4QUU0Q0YyMjdGODlDQUI5QTBFODY5NzhGNjM5MDE5NkFCMzdBOUJE
RUUyRTM3QTBCQTQwMTYwNjYwRTI5RTFDOUNDQUY4QkE0MzNDM0M4RTg0OEU4OTRC
OEUxNENEMDY4QjAwRkE5MTJDNjI2QTkyREM4RkY5Q0Y5MUMwMzU2QzhDRDRFREQx
QjREMEUzQTdEMjU2QkEyMjg0MThCMjM2NDFDNzZDMjU2Rjk1QjVFRTI0RTA5MjM1
RDRDNTkxNDkwNzNGQTBGRDI1MzRDRTVEOUFBN0UyQjhGNEVDQkI4ODI4Nzk3RjJE
N0Q5NTU3M0M5RjczQzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtbgxDDmYrXgTY/ORqXPY12/ZIeULbawD4raibdDoGdftarxdUvDK
yQ3A/RXU1DPcjADTfMx+EbxVu4472klioM32e7FXfLgN9UqBAfxVtXFU6ekNodIg
/N8vyKfO3eBYApZDB02RoCO8B6TEwkW/aRdbtg8c0bV82X/mV3z3WQcbE0qBGYrk
zyJ/icq5oOhpePY5AZarN6m97i43oLpAFgZg4p4cnMr4ukM8PI6EjolLjhTNBosA
+pEsYmqS3I/5z5HANWyM1O3RtNDjp9JWuiKEGLI2QcdsJW+Vte4k4JI11MWRSQc/
oP0lNM5dmqfiuPTsu4goeX8tfZVXPJ9zxQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMJ0mgazCCljc28x0rPT3NWa5MXEMB8GA1UdIwQYMBaAFHZb2+hk7ZA4WmsJlRsk
BEhEKKeyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6WE40M3VGNkhRdUZI
YnFITWluRFNuaVZGaDlQSHg5QXduNURBbVV4UzI5LzAvNzY1QkRCRTg2NEVEOTAz
ODVBNkIwOTk1MUIyNDA0NDg0NDI4QTdCMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NjVCREJFODY0RUQ5MDM4NUE2QjA5OTUxQjI0MDQ0ODQ0MjhB
N0IyLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CelhONDN1RjZIUXVGSGJxSE1p
bkRTbmlWRmg5UEh4OUF3bjVEQW1VeFMyOS8wLzMxMzgzNjJlMzIzMjM1MmUzMjM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uuEcMA0GCSqGSIb3DQEBCwUAA4IBAQAoH7R0mqkXcyQqvabkta4v6ImlHb9abter
JsubMqd0jGIwInkfqTwy3hinViPhZclFdIrYFTDm30AeQZZtXeD+dTGCAJ0cEQHc
hlmOhnlrpLMWxrFPjnelPmVNf3WL5Nyql/iz6bFky7DTgnddoxOIpr7UGwN+QTe2
M1qy1ubuSmK/YqY/9dnrwj8gxZZDOMK5/mKOCpbAmp2sdmfE22oiDPYzOxtZxHZw
4I5N4/ebkpAzLtbBe8upKBC5MyhLI2/U6dHdZBaIq3aGZwTo1IzoxvhIhgwrOwsU
x3L8BcxYf3wiCNytTu0oa1cqvuMYF+M7p2PUDy5brOJay2EOgxIu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org