Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232372e34342e302f32322d3232203d3e203238323230.roa
File:                     3136382e3232372e34342e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          BP5QiJp1hJf9YGvpfYLAweUx6Dr68HhW0pYOdLY3ujY=
Subject key identifier:   07:7F:3F:01:36:96:E6:71:6B:99:81:74:B9:AE:C8:91:0A:A3:3D:29
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       1521769CFB632BB40B66F3A0FA2DF740B16660B4
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232372e34342e302f32322d3232203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:39:58 +0000
ROA not before:           Thu 06 Oct 2022 17:34:58 +0000
ROA not after:            Thu 05 Oct 2023 17:39:58 +0000
asID:                     28220
IP address blocks:        168.227.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:21:76:9c:fb:63:2b:b4:0b:66:f3:a0:fa:2d:f7:40:b1:66:60:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Oct  6 17:34:58 2022 GMT
            Not After : Oct  5 17:39:58 2023 GMT
        Subject: CN=077F3F013696E6716B998174B9AEC8910AA33D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:e8:67:62:dd:60:a8:52:23:44:ca:3e:a0:
                    c0:f1:22:7e:b8:e3:b3:80:1d:37:b2:57:8e:44:d1:
                    c8:91:fa:d9:18:69:b0:38:8f:49:5b:9a:6f:2b:ed:
                    0a:3a:78:3f:74:e0:5d:b3:48:8e:07:d1:48:3f:55:
                    ac:25:0b:f7:bc:25:3c:59:5f:3d:c3:7a:b0:e5:7f:
                    6d:21:ef:cb:f9:ee:55:e4:44:17:41:49:00:ee:19:
                    f7:c1:03:7a:f6:ca:01:82:9e:32:2d:dc:e3:73:41:
                    68:ad:39:26:4e:2e:d2:86:34:f0:e3:02:c7:3c:4e:
                    7e:f5:e7:ea:a0:44:59:5c:c4:be:ee:44:a9:b6:ef:
                    57:40:6f:be:9a:2a:f3:2a:fe:37:6b:a4:46:e4:7c:
                    61:ba:bf:cd:ea:fd:62:a8:20:fa:08:a0:8f:9b:f0:
                    58:57:c2:52:d5:5d:c9:44:34:fd:4f:a6:8c:d1:e8:
                    6b:f3:ce:51:ee:d0:57:e7:3c:8e:6a:41:9d:47:7a:
                    d2:89:7a:cb:6c:0a:ad:b4:2e:e3:b4:3c:91:c8:b0:
                    65:43:a2:2d:3a:ad:9f:82:c6:4c:dd:4a:b1:81:9a:
                    90:cd:70:92:f1:4c:a9:c3:68:4e:25:8a:78:a8:36:
                    8f:98:49:20:f2:0b:41:0a:ed:82:35:bb:51:13:a6:
                    59:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7F:3F:01:36:96:E6:71:6B:99:81:74:B9:AE:C8:91:0A:A3:3D:29
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232372e34342e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:7c:b1:7a:42:e4:fe:f3:2d:48:f2:50:37:b4:b3:13:3b:30:
         79:d5:e7:85:1a:60:c8:ee:db:07:93:eb:8b:06:d1:9b:50:db:
         8b:32:c7:2a:b3:1f:e5:9a:26:f0:21:b2:d6:ee:b2:c2:85:97:
         ec:42:1c:e7:4e:72:94:a9:ba:25:41:9b:76:42:f5:e3:4c:6c:
         88:6b:ea:80:15:d6:4a:66:28:e3:69:40:cc:52:f5:50:08:6e:
         4a:33:c7:39:a5:0f:91:23:5b:79:95:07:c0:c0:a9:60:4a:c8:
         8a:fa:32:13:c1:39:90:c3:06:96:0c:0f:8f:16:6c:27:3a:85:
         9a:28:ae:90:4c:e0:07:0b:ac:d8:df:ec:3b:79:6d:e6:3c:de:
         f7:27:14:37:4f:db:9b:11:ac:28:84:c0:18:5e:ab:63:d8:3d:
         d3:e5:e4:bf:7f:21:0d:ec:ec:21:af:b9:1d:7f:1c:24:8d:df:
         83:dd:eb:4c:cc:37:a9:8c:ac:74:b7:68:66:4c:e5:02:78:d4:
         32:5e:16:34:e1:4b:07:05:64:c6:8a:b6:a3:44:be:23:f9:1f:
         9d:3e:31:1e:a7:e2:15:9f:1a:a4:e6:00:4d:8d:00:ea:b0:8e:
         a5:90:b0:7f:d0:36:44:c5:8c:95:0b:be:93:2f:bf:70:14:73:
         88:fa:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org