Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139322e302f32322d3232203d3e20323635393730.roa
File:                     3136342e3136332e3139322e302f32322d3232203d3e20323635393730.roa (raw, json)
Hash identifier:          /bfY+TSj3a/n1dXZh4J4k93fy8enbBZ8BRZfCweqiV4=
Subject key identifier:   4C:C5:BB:D3:13:40:39:0A:71:38:9C:62:D8:4D:C7:7C:EC:6A:0D:32
Certificate issuer:       /CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
Certificate serial:       511C617039D342444FB1EEA6A635EC4B62C7CFD2
Authority key identifier: 6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139322e302f32322d3232203d3e20323635393730.roa
Signing time:             Tue 11 Jan 2022 10:54:01 +0000
ROA not before:           Tue 11 Jan 2022 10:49:01 +0000
ROA not after:            Tue 10 Jan 2023 10:54:01 +0000
asID:                     265970
IP address blocks:        164.163.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1c:61:70:39:d3:42:44:4f:b1:ee:a6:a6:35:ec:4b:62:c7:cf:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
        Validity
            Not Before: Jan 11 10:49:01 2022 GMT
            Not After : Jan 10 10:54:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:d6:d3:0c:5a:5f:a7:3c:af:9d:5e:39:e4:
                    68:80:f3:a5:c7:7b:a9:d2:e8:02:9a:9d:05:c5:3b:
                    46:3e:6e:57:98:2f:e7:ba:55:72:09:ab:69:8d:b3:
                    3e:80:b5:c1:1d:49:02:89:f9:5b:0a:24:cc:2a:7a:
                    3b:26:2d:34:37:20:f3:03:32:7e:b2:63:bf:0f:9e:
                    5c:95:20:19:8c:f3:d6:cb:3e:90:9b:53:94:83:0d:
                    89:ca:07:17:57:4e:8e:d1:c1:ff:31:8e:c7:cf:fc:
                    55:3d:ef:33:66:49:c9:08:6a:d0:1b:d7:54:f6:8c:
                    a9:35:ff:a3:40:a3:6b:9d:43:14:f6:13:22:7f:d0:
                    f7:aa:a8:a0:5d:09:b4:71:57:de:5b:50:0a:48:e9:
                    9f:9b:9d:64:62:d4:dd:4e:e0:8b:35:53:5e:0a:3c:
                    8c:56:c1:6a:7f:f4:d1:b6:06:c9:25:20:fb:95:1d:
                    fa:31:c4:9e:50:dc:8f:50:20:7d:dd:97:04:34:1a:
                    36:8e:94:cf:c8:23:dc:9e:13:dd:d6:a3:7c:06:6d:
                    3e:3d:e2:69:98:c7:7a:b4:96:1c:f3:7c:7e:b4:50:
                    2a:46:4e:e9:d9:c2:af:26:51:9e:a3:3d:b3:f9:4e:
                    3e:b9:cb:17:6b:23:f2:81:c1:7d:84:92:a8:d4:0d:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C5:BB:D3:13:40:39:0A:71:38:9C:62:D8:4D:C7:7C:EC:6A:0D:32
            X509v3 Authority Key Identifier:
                keyid:6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139322e302f32322d3232203d3e20323635393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:27:dd:d8:42:dc:18:d6:58:ce:b5:98:06:f7:cb:33:b5:
         93:f9:b0:18:fb:3c:33:68:14:be:fd:28:68:59:77:d3:54:ea:
         61:ca:18:83:a5:83:7f:88:4e:e5:fb:3c:8e:af:a2:e6:53:65:
         33:50:7f:b5:60:ae:50:f7:ff:a3:a4:3b:4c:1f:7d:07:eb:f8:
         b8:4e:8d:25:6e:d4:56:4d:6c:14:75:7f:ef:8d:b4:38:fd:6c:
         3e:3e:54:60:f2:34:62:74:79:58:c4:67:bc:af:4f:11:22:7e:
         c2:56:c2:ed:97:56:16:22:da:f7:27:aa:f6:7a:ab:a3:97:6f:
         93:31:6f:a9:81:16:b8:67:78:be:03:50:bd:54:ef:95:71:ad:
         1d:08:b5:c9:fd:a0:1b:e9:e6:bb:b5:f5:80:26:72:1c:ba:8c:
         02:e4:12:0c:cc:ee:3d:6c:b1:3e:7c:98:83:44:e4:76:c8:fc:
         b7:a6:4b:c8:9c:6c:71:c0:d3:f6:c5:62:1f:3b:c8:a9:93:39:
         38:79:13:af:e6:90:cd:1a:c7:3f:f0:c6:37:42:9d:0f:46:fe:
         58:69:6d:f3:15:c8:7f:63:96:b0:c4:a8:ed:ed:99:2f:d1:45:
         08:7d:d9:3c:07:61:f8:5e:df:c8:a1:86:00:af:81:da:73:14:
         f8:e3:e1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org