Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136342e3136332e3231322e302f32322d3232203d3e20323635393734.roa
File:                     3136342e3136332e3231322e302f32322d3232203d3e20323635393734.roa (raw, json)
Hash identifier:          FC+oAEwcdhcf9cWEkLm+EuMZihsHEEn/EGc3EtVPYiI=
Subject key identifier:   CB:EC:BC:C0:C4:78:14:BE:3C:B5:F6:03:47:CE:7A:7D:EC:CE:E5:F8
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       10BA9BE078D5C20B9C15EF4204C30EE202F5B19E
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136342e3136332e3231322e302f32322d3232203d3e20323635393734.roa
Signing time:             Tue 22 Aug 2023 18:33:52 +0000
ROA not before:           Tue 22 Aug 2023 18:28:52 +0000
ROA not after:            Tue 20 Aug 2024 18:33:52 +0000
asID:                     265974
IP address blocks:        164.163.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ba:9b:e0:78:d5:c2:0b:9c:15:ef:42:04:c3:0e:e2:02:f5:b1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Aug 22 18:28:52 2023 GMT
            Not After : Aug 20 18:33:52 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:ea:21:5c:d9:13:c8:b7:e8:86:7c:00:0d:
                    bd:fd:ee:1b:7f:4a:e0:b3:d9:ef:27:85:89:a4:5e:
                    d5:e7:4a:e8:17:41:26:a4:0a:cc:88:ed:9d:ee:05:
                    84:74:c2:b6:2f:3a:16:13:87:df:67:48:72:ad:8f:
                    ef:2b:26:51:f9:db:18:36:a4:87:bf:63:b3:4b:5e:
                    72:d2:c6:84:db:5c:c0:e9:fe:be:ec:a4:62:52:ba:
                    c2:e6:bf:45:7e:c5:8b:75:b5:66:04:df:dd:2c:85:
                    81:27:38:c0:a0:6e:49:4b:15:c9:cb:e1:87:5c:3b:
                    6a:b3:94:d6:66:02:35:3f:c5:98:33:9e:03:be:2a:
                    2b:72:61:3e:25:5d:0b:1f:c6:ab:df:c1:e6:24:24:
                    fc:b5:60:df:62:29:77:82:cf:ae:e0:9f:c9:26:66:
                    32:22:28:f5:68:6b:0d:b3:a7:d6:e9:3b:d8:48:db:
                    60:de:02:3b:ec:25:6d:31:d0:d9:32:7b:db:95:02:
                    78:5f:5b:f0:49:f2:90:07:1f:a7:41:35:72:aa:71:
                    5d:74:46:55:5d:52:e4:0e:2c:d2:31:f2:bc:8d:0f:
                    64:5c:4b:15:7f:9d:5e:30:84:a7:7b:38:de:5d:f5:
                    31:72:62:9e:7b:b9:5c:e2:58:8a:20:96:ec:2f:73:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EC:BC:C0:C4:78:14:BE:3C:B5:F6:03:47:CE:7A:7D:EC:CE:E5:F8
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3136342e3136332e3231322e302f32322d3232203d3e20323635393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:95:16:b9:66:39:e5:6e:00:ff:a1:8e:1e:a4:a6:89:a2:9f:
         ad:74:b4:e5:1b:0a:e8:eb:2a:b5:1f:4b:9f:f7:e8:b5:fa:8d:
         a5:e0:6f:4d:6e:a5:0f:62:e9:6e:8d:49:a0:f6:a4:da:bf:3c:
         c5:a2:4f:6d:bc:20:16:b3:47:da:df:a3:29:39:76:d4:f3:42:
         7a:b3:21:fe:c3:2b:8a:4d:e0:87:2d:9d:f0:ee:df:c0:7a:cf:
         37:12:db:4b:cb:da:4e:a8:76:d9:f8:f7:f4:91:81:8b:9c:fb:
         f8:e8:a5:d2:cb:31:e6:c8:18:da:db:17:68:9e:19:16:7d:b6:
         32:4e:f1:cc:8f:46:d4:14:6d:7f:c2:6c:c1:8e:30:24:10:32:
         e4:09:57:78:51:16:18:63:8c:e7:6d:5a:90:f3:b1:b6:85:42:
         ec:10:a0:cb:7d:65:c7:16:d7:9e:62:b0:c3:a6:46:43:58:62:
         7c:2a:db:b4:c3:8c:36:e2:97:2c:08:ce:6d:29:a4:27:49:41:
         27:12:4f:31:c3:c0:d5:0a:6e:ea:fb:32:51:83:55:e9:b0:f6:
         b8:ba:13:a4:d4:51:f3:b8:49:99:69:f2:ce:c0:8a:5b:35:b4:
         08:80:97:03:96:f5:12:e1:b5:ed:5f:ff:fa:bf:30:34:f1:1a:
         0b:27:b2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org