Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139342e302f32342d3234203d3e20323635393730.roa
File:                     3136342e3136332e3139342e302f32342d3234203d3e20323635393730.roa (raw, json)
Hash identifier:          VVb0EGaXCT7uPhUeQdWqIS51op/K6HwfeETpxvSqsJo=
Subject key identifier:   1B:88:A5:34:32:F9:0D:EA:05:55:7B:7F:EA:93:A0:10:37:84:F5:27
Certificate issuer:       /CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
Certificate serial:       34E9D4BB2BA38DE6A8E0E53F00CF51CC5219A038
Authority key identifier: 6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139342e302f32342d3234203d3e20323635393730.roa
Signing time:             Tue 11 Jan 2022 10:56:02 +0000
ROA not before:           Tue 11 Jan 2022 10:51:02 +0000
ROA not after:            Tue 10 Jan 2023 10:56:02 +0000
asID:                     265970
IP address blocks:        164.163.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e9:d4:bb:2b:a3:8d:e6:a8:e0:e5:3f:00:cf:51:cc:52:19:a0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2F153A9301969DDA7875C6F9110B9C5273576E
        Validity
            Not Before: Jan 11 10:51:02 2022 GMT
            Not After : Jan 10 10:56:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:f2:82:2e:c7:e2:8f:b6:c4:b1:0a:ff:67:
                    0a:1c:40:3c:dd:45:8d:bd:89:80:98:21:86:36:8c:
                    85:25:26:85:b0:b4:b8:01:65:35:10:e7:8c:b6:f0:
                    cc:d8:6b:e5:fd:4d:2f:5d:f3:58:cf:83:42:43:27:
                    60:dc:0a:7e:0d:d4:ba:61:f1:44:0c:81:4b:a5:dc:
                    45:a7:f5:78:2b:2c:ed:a5:af:de:7c:fd:7d:f6:10:
                    25:8b:ab:75:34:00:3d:e1:a0:8b:95:4b:fd:12:25:
                    7a:68:41:31:44:42:0f:65:65:a8:3c:73:c5:9a:73:
                    ef:dc:5e:dd:db:a8:1f:53:d4:a7:5b:e3:1b:3c:1b:
                    e2:c5:2f:c6:39:63:e1:1d:b6:80:30:41:69:0f:1d:
                    98:7c:61:51:ed:2c:cb:7b:de:c1:f3:ec:ac:22:ab:
                    1f:23:9e:2a:bb:f7:e7:44:af:97:d9:64:44:55:d9:
                    f4:83:5a:07:c2:92:6e:6a:31:86:94:27:ec:92:0b:
                    9e:cd:90:55:80:be:f0:2d:10:12:45:5d:80:75:19:
                    66:6f:4f:85:94:02:7b:f4:60:98:e5:5e:cc:ea:e6:
                    5d:16:7d:6e:29:f4:7f:d5:ce:d5:d6:4d:83:af:6e:
                    fd:61:80:ef:3c:22:3c:cc:48:e1:28:e6:f7:21:b4:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:88:A5:34:32:F9:0D:EA:05:55:7B:7F:EA:93:A0:10:37:84:F5:27
            X509v3 Authority Key Identifier:
                keyid:6F:2F:15:3A:93:01:96:9D:DA:78:75:C6:F9:11:0B:9C:52:73:57:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F2F153A9301969DDA7875C6F9110B9C5273576E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcMZxhHCCRJE4XN97PrHdsoPAraZAasVKWamZN9AjFQL/0/3136342e3136332e3139342e302f32342d3234203d3e20323635393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b2:4a:7c:d2:20:db:4c:7c:aa:e1:06:5b:aa:8c:a5:b1:39:
         f0:30:b3:4c:eb:89:4d:7a:8a:5f:d7:b6:3d:5f:7b:d2:85:5e:
         ba:75:46:f1:18:57:ac:e8:5b:27:36:76:91:6a:4b:f7:da:c1:
         1e:3e:45:93:10:24:e3:c5:ec:3a:80:83:ba:31:5a:21:e3:be:
         9e:f0:aa:45:ba:67:b5:70:0e:2b:ed:44:88:87:21:cc:d0:98:
         a6:b2:9d:0e:16:2c:30:52:40:03:c2:e9:de:23:2f:87:43:a7:
         6a:bb:dc:fb:1e:bb:5f:11:15:d2:5f:a6:6f:60:6c:b0:b8:4f:
         bb:77:8f:12:f6:14:3a:b0:cc:76:b1:47:52:1e:ea:c2:4f:11:
         21:12:2d:8e:70:0e:7e:f7:72:70:55:bf:0c:27:f6:6f:57:e3:
         54:c5:ea:e2:36:f9:69:3a:f6:a0:9e:68:2e:03:81:3c:e7:1e:
         bb:0c:d8:61:24:5c:f4:56:b2:1c:bb:e8:54:d8:3a:8c:21:36:
         4a:52:7f:30:3e:a0:04:a2:28:0f:ad:e1:6d:ca:e2:2a:fa:ab:
         7e:2e:39:f9:ae:97:dc:8d:bb:2a:f3:81:3a:98:c1:19:97:53:
         30:9c:87:bc:be:03:e7:15:65:e2:5d:3c:ff:1e:84:65:b1:dd:
         bf:0d:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org