Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32392e302f32342d3234203d3e20323632373630.roa
File:                     3138362e3232352e32392e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          u9eVgSTYm3J4V8IgUljCdSvpdhWSj9mP92cpsEhAbXQ=
Subject key identifier:   6F:95:E2:E0:DD:B4:F4:B2:11:0D:D4:CA:B7:21:CB:70:95:D1:2D:D9
Certificate issuer:       /CN=765BDBE864ED90385A6B09951B2404484428A7B2
Certificate serial:       784057F847C61AF1790601743BDE2713F6277134
Authority key identifier: 76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32392e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 23 Jun 2021 18:00:48 +0000
ROA not before:           Wed 23 Jun 2021 17:55:48 +0000
ROA not after:            Wed 22 Jun 2022 18:00:48 +0000
asID:                     262760
IP address blocks:        186.225.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:40:57:f8:47:c6:1a:f1:79:06:01:74:3b:de:27:13:f6:27:71:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765BDBE864ED90385A6B09951B2404484428A7B2
        Validity
            Not Before: Jun 23 17:55:48 2021 GMT
            Not After : Jun 22 18:00:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d2:c8:e1:ab:8b:58:c5:c2:56:07:e1:bc:7f:
                    8d:ee:da:82:83:6b:d7:b3:f5:d8:a6:28:2e:b3:19:
                    41:8f:28:4e:a6:d5:29:78:c9:f0:93:57:47:81:ac:
                    be:9b:f3:0d:cc:f4:e0:0e:39:36:4a:6a:78:3e:51:
                    97:26:88:01:63:03:06:77:c4:f8:57:5e:f4:cc:29:
                    25:fa:c6:6c:7a:98:9a:1f:8b:e4:1a:ce:78:b1:c4:
                    fc:4d:d6:24:a9:23:4b:e6:f7:6c:39:45:51:61:79:
                    80:d8:d6:ea:18:ea:eb:05:9a:95:21:fe:7c:54:0b:
                    90:8b:99:a2:18:ea:d7:30:83:20:d1:3d:96:41:3c:
                    5a:30:0c:35:66:90:ab:83:50:9d:5f:79:6a:19:af:
                    a9:66:c1:0c:2a:c0:50:12:80:cc:aa:0c:71:ea:8a:
                    88:56:a1:a3:ac:a7:06:40:cd:b2:e9:22:9d:f6:b7:
                    82:74:64:2f:0b:74:0c:5b:ce:eb:39:8d:df:8c:55:
                    80:00:01:d3:01:28:e2:82:15:b2:25:16:85:ec:50:
                    91:03:4d:38:e6:45:7f:52:b9:69:41:09:d0:21:9a:
                    b6:04:d2:e0:73:dc:61:12:de:b4:c8:6d:b5:37:87:
                    c5:cb:57:a0:1b:a4:e2:27:37:ca:39:33:42:99:38:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:95:E2:E0:DD:B4:F4:B2:11:0D:D4:CA:B7:21:CB:70:95:D1:2D:D9
            X509v3 Authority Key Identifier:
                keyid:76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/765BDBE864ED90385A6B09951B2404484428A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32392e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:29:07:69:cc:21:99:b1:07:c9:0e:e8:d0:ee:ac:f3:72:e2:
         ec:f2:79:74:ab:7d:a2:97:99:f0:fe:cb:9e:f9:00:92:72:c4:
         2c:92:9b:5a:6c:1a:58:76:ae:02:5a:54:eb:31:04:6e:05:15:
         21:9a:64:23:ce:d1:ec:29:fa:cc:21:31:d0:de:b6:3b:2d:f5:
         36:4f:f4:01:73:91:48:1e:19:1f:d0:1d:5f:55:21:20:02:82:
         dd:ed:c9:d6:71:96:73:1a:54:1b:3a:3a:d9:c0:90:c4:76:28:
         2f:17:87:2c:35:4b:8c:5a:2a:b2:e7:cf:26:96:7e:1f:5f:9c:
         43:c4:40:11:e0:71:7d:f4:f8:71:c5:a9:0a:46:a7:f6:57:0c:
         ef:20:36:c1:27:e8:6f:51:1a:0b:1e:e4:e2:a1:22:67:b2:20:
         b7:7b:1a:83:55:93:6e:5d:f8:01:31:17:5c:37:e8:8b:93:01:
         05:ae:a3:15:9b:b2:2a:4d:35:da:13:13:46:7f:0d:23:0f:0c:
         c4:f3:bd:9f:fa:65:1c:01:8e:65:6c:38:fb:34:d4:76:9d:80:
         c3:f3:5e:2c:97:ce:ea:48:1c:3f:00:a8:92:5b:81:fd:cf:c9:
         4d:bd:ba:e3:5e:34:e9:ab:b2:ea:d3:c6:bc:f2:4f:e6:d8:6c:
         32:61:ee:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org