Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa
File:                     3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa (raw, json)
Hash identifier:          BM5/h/olA16+GWY+j7+SxhCdYDk+Ct8kirlxoxk+Ugk=
Subject key identifier:   D6:16:8B:9D:C4:54:D3:5D:88:4B:11:CE:8B:77:23:84:F3:B7:1A:00
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       07CF27365ACFD09D500E151C4D87E84682A2C923
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa
Signing time:             Fri 16 Dec 2022 19:45:30 +0000
ROA not before:           Fri 16 Dec 2022 19:40:30 +0000
ROA not after:            Fri 15 Dec 2023 19:45:30 +0000
asID:                     266555
IP address blocks:        160.238.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cf:27:36:5a:cf:d0:9d:50:0e:15:1c:4d:87:e8:46:82:a2:c9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Dec 16 19:40:30 2022 GMT
            Not After : Dec 15 19:45:30 2023 GMT
        Subject: CN=D6168B9DC454D35D884B11CE8B772384F3B71A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:aa:bc:46:94:99:55:72:9e:9e:3f:61:64:
                    71:41:75:5d:dc:ff:4b:ff:44:6e:4d:db:eb:06:90:
                    47:1b:70:fb:9a:e6:6f:e9:bc:b4:7f:9c:b4:1e:71:
                    25:0d:4f:f7:e0:3f:e3:df:24:2b:59:12:36:a2:99:
                    02:87:d2:42:4b:db:e5:c9:9e:1c:e0:eb:33:8c:93:
                    61:85:5b:7d:d9:2d:b4:43:56:e0:b8:88:c0:be:f0:
                    29:41:63:60:32:98:08:38:69:bd:63:1c:7f:d6:1a:
                    c6:2d:91:54:fe:ec:bb:69:f3:67:5e:5c:0b:4d:0f:
                    4e:9f:5b:c1:81:23:25:2f:0c:b4:a2:a8:c7:50:7d:
                    94:f5:6c:af:a9:2a:1d:86:d6:e7:8b:c9:83:16:99:
                    5a:49:99:8d:05:7a:7b:fc:30:3d:9c:e4:8e:78:9c:
                    d4:8f:74:65:c6:c6:22:0a:36:32:09:9a:e4:14:84:
                    f6:8b:49:9f:4b:60:41:cb:b1:75:22:3d:97:1c:0a:
                    96:36:ba:82:7a:29:2b:33:ed:c5:7c:75:99:4e:77:
                    14:ed:e8:70:f1:51:11:db:83:d4:29:60:1e:69:e1:
                    57:27:29:70:9c:96:15:dd:bf:d2:46:e1:83:7e:11:
                    31:b7:ed:69:98:ee:60:71:0c:0c:bc:7d:81:fd:bc:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:16:8B:9D:C4:54:D3:5D:88:4B:11:CE:8B:77:23:84:F3:B7:1A:00
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136302e3233382e3232302e302f32322d3232203d3e20323636353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d8:29:af:84:91:77:c0:d7:b4:63:e2:be:53:9b:14:54:58:f1:
         35:b4:17:c9:69:17:2a:c0:c2:f7:96:5c:95:b1:f6:91:c8:96:
         b0:cf:00:3c:06:ad:c8:b6:d5:ab:0f:c7:f5:0e:7b:da:47:1f:
         de:ab:14:f2:af:78:d5:8e:9a:b0:4a:95:b3:f8:08:13:8e:5b:
         e3:06:7a:c0:a8:36:2d:47:8c:46:8e:a5:8f:34:42:86:91:84:
         81:39:b0:ac:e7:09:16:55:08:e7:88:d3:7d:32:cb:c0:94:4a:
         fb:1f:e7:cd:f5:e5:7d:84:cc:a1:6f:20:6a:69:cc:62:97:32:
         14:b6:e3:ae:0a:a5:11:05:d3:29:68:46:9d:2a:d5:26:df:ea:
         5d:9d:82:99:9b:34:c0:ff:49:1e:83:0e:65:ab:08:98:ae:7d:
         ec:4d:62:6e:53:31:6a:2c:aa:dc:d7:b2:d9:bd:eb:f5:9c:b6:
         30:26:49:ff:1c:fe:be:97:b3:6a:6a:04:12:dd:a2:77:fc:bb:
         58:5d:dd:be:8a:8a:77:61:e1:e9:93:ea:61:7b:a1:a9:8c:83:
         de:13:e6:f4:43:7d:d5:3d:6b:5c:04:00:23:df:a8:b2:63:b5:
         6b:48:73:33:5e:23:39:76:28:c0:29:9f:68:79:92:b4:4d:c5:
         25:fc:18:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:54 2025 by rpki-client