Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32342e302f32342d3234203d3e20323632373630.roa
File:                     3138362e3232352e32342e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          lo5q7+gPOpujQURHwSja70xx+l5N2hdCJHuRgSKAyoM=
Subject key identifier:   26:87:52:52:2C:A4:25:40:76:57:86:F2:C2:4D:54:97:DF:EF:2C:12
Certificate issuer:       /CN=765BDBE864ED90385A6B09951B2404484428A7B2
Certificate serial:       6992D161B507B262FA9B4227D81005AF63FF20D7
Authority key identifier: 76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32342e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 23 Jun 2021 18:00:49 +0000
ROA not before:           Wed 23 Jun 2021 17:55:49 +0000
ROA not after:            Wed 22 Jun 2022 18:00:49 +0000
asID:                     262760
IP address blocks:        186.225.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:92:d1:61:b5:07:b2:62:fa:9b:42:27:d8:10:05:af:63:ff:20:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765BDBE864ED90385A6B09951B2404484428A7B2
        Validity
            Not Before: Jun 23 17:55:49 2021 GMT
            Not After : Jun 22 18:00:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:d9:44:88:30:c7:84:0a:af:26:02:a5:3d:
                    06:eb:f4:e0:6d:c9:d5:6f:93:bf:64:7f:7e:4c:cf:
                    72:76:a6:fe:7d:fa:05:42:18:f0:1d:0d:e9:7d:25:
                    52:9c:af:41:34:c0:9f:7c:83:c5:c7:cc:b9:ad:70:
                    f1:97:42:5e:20:e2:14:c0:71:79:f3:da:03:fe:39:
                    ca:b7:fb:96:5c:b4:90:56:15:4c:28:0a:11:25:ea:
                    cd:07:1b:50:29:e1:6b:1f:53:fa:76:e6:17:01:52:
                    6e:50:3d:c4:76:1e:1f:a9:7f:25:c5:a4:dd:a2:50:
                    82:ea:9f:d6:38:a4:81:66:ef:93:fd:9f:ed:97:89:
                    8b:95:d5:73:68:42:88:74:a4:4a:6e:06:92:8c:ee:
                    21:0a:19:2a:6a:93:66:24:1c:c6:5e:44:8c:73:93:
                    e9:5e:ef:d4:71:aa:5f:88:21:99:dc:29:7a:6e:7b:
                    c5:ac:01:39:3d:43:ff:88:50:a4:22:e2:0e:ba:c0:
                    7f:c0:a3:66:ce:9d:b5:81:ba:d6:55:10:5c:28:78:
                    6f:0e:cc:11:4d:bd:5e:82:b4:ac:c9:14:83:5f:17:
                    71:fd:dd:04:73:bc:d1:88:38:eb:33:ca:5f:bf:93:
                    bc:26:0d:d6:2e:aa:2a:42:47:f1:1e:3e:ed:14:35:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:87:52:52:2C:A4:25:40:76:57:86:F2:C2:4D:54:97:DF:EF:2C:12
            X509v3 Authority Key Identifier:
                keyid:76:5B:DB:E8:64:ED:90:38:5A:6B:09:95:1B:24:04:48:44:28:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/765BDBE864ED90385A6B09951B2404484428A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765BDBE864ED90385A6B09951B2404484428A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3138362e3232352e32342e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:22:cd:6d:91:db:58:1b:bd:cc:ca:7a:b2:3a:08:59:7b:06:
         6c:50:c0:90:36:9f:88:95:5a:cb:54:0d:4c:d4:dc:62:4f:27:
         0a:43:71:4e:04:3f:29:2b:9a:e9:4b:16:a5:f8:fc:fe:00:17:
         5e:22:08:cf:6c:48:97:f4:59:e1:ba:28:c3:84:a6:a3:11:3c:
         b0:c5:d4:4e:8b:b2:e7:90:a6:e3:53:8a:a3:1e:cd:a5:cf:f4:
         80:d7:14:0c:29:5d:f2:a8:81:91:7f:98:31:2e:66:cf:00:6b:
         83:82:3d:c2:e8:19:0e:ae:85:fc:f7:a3:d1:9a:5f:a1:bd:e1:
         70:04:9b:4b:1c:fd:8a:26:b0:74:86:c9:36:04:81:d9:c3:90:
         3f:b5:02:36:8b:fc:20:09:7a:be:77:f3:82:72:13:be:2b:3d:
         23:8d:7c:91:0b:0a:26:de:7e:af:c3:3c:56:c6:41:c7:b7:1f:
         86:85:11:2b:56:0b:8b:0f:ff:75:b8:0d:dc:5c:c6:54:71:9e:
         88:80:94:d5:27:88:77:1a:9e:0c:a8:55:ba:54:5a:de:23:50:
         b2:39:b8:07:db:20:53:10:75:64:ad:69:b1:69:92:cb:e8:ee:
         c8:c1:c3:07:4f:11:62:d5:5e:33:20:35:fe:3f:cd:d2:f7:5e:
         4d:9d:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:32 2023 by rpki-client on console.sobornost.net