Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232372e34342e302f32322d3234203d3e20323632393932.roa
File:                     3136382e3232372e34342e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          w1unpxGHxzRfXwYBOOJiyAMTQwPC6gMbjxdJAliPszA=
Subject key identifier:   BA:C5:8B:2E:7E:52:47:87:92:F6:25:E2:63:AB:2F:61:30:73:F4:02
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       506AE10F3FD855AC5009AB3941941BDF84D58A69
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232372e34342e302f32322d3234203d3e20323632393932.roa
Signing time:             Thu 06 Oct 2022 17:39:59 +0000
ROA not before:           Thu 06 Oct 2022 17:34:59 +0000
ROA not after:            Thu 05 Oct 2023 17:39:59 +0000
asID:                     262992
IP address blocks:        168.227.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6a:e1:0f:3f:d8:55:ac:50:09:ab:39:41:94:1b:df:84:d5:8a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Oct  6 17:34:59 2022 GMT
            Not After : Oct  5 17:39:59 2023 GMT
        Subject: CN=BAC58B2E7E52478792F625E263AB2F613073F402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:be:52:d6:ce:3a:2f:ad:f6:35:0a:f7:54:
                    80:a1:0a:c7:f1:00:cc:3d:1d:b7:f6:aa:5d:30:1a:
                    45:f9:cc:90:dc:b0:38:3d:f2:4b:f0:cc:f7:70:55:
                    c1:9a:38:18:2b:8c:77:16:d2:e8:47:9d:9b:64:5f:
                    4f:0d:27:a6:40:75:5d:5e:bf:52:9c:39:65:34:e8:
                    27:04:94:45:8b:71:ea:f1:c1:d6:e5:a0:6f:65:9c:
                    65:ec:8e:51:84:8d:97:d8:c6:96:8a:5f:e6:29:ba:
                    24:e8:e1:e9:51:e1:22:84:08:bd:79:fc:4b:8a:64:
                    d9:da:53:b6:b5:15:18:88:fb:9f:79:e7:27:ef:b8:
                    c9:9a:a9:52:7f:d1:57:c1:8e:fa:6a:67:8e:9f:a5:
                    0d:3b:5d:20:0d:56:a9:e4:11:b7:de:cf:d8:7a:bf:
                    02:cd:5d:38:3d:e7:63:aa:f7:c2:c5:1a:8a:cd:97:
                    27:c1:cc:64:cb:e1:e3:67:0d:e6:d1:b3:17:3b:90:
                    a1:d5:da:41:79:29:29:03:1c:12:34:5a:dd:a8:ff:
                    f2:f9:94:8e:96:2c:ab:7b:83:9e:b6:4d:ce:4a:51:
                    62:8e:20:91:c9:e0:ac:f3:96:51:42:4b:b4:90:50:
                    19:5f:a9:46:ba:a8:75:3d:fe:24:9a:7d:0d:90:1f:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C5:8B:2E:7E:52:47:87:92:F6:25:E2:63:AB:2F:61:30:73:F4:02
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232372e34342e302f32322d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:5c:40:ad:9a:22:9f:c4:ef:7c:8c:7f:04:df:ce:e1:17:17:
         6f:cb:63:4c:71:b8:65:5c:40:f6:db:49:d6:14:e1:06:f6:5a:
         c4:35:7d:13:c1:26:06:b4:b9:24:c1:5e:25:aa:4a:34:33:38:
         12:eb:85:db:d4:d6:7a:38:15:78:ed:04:27:4b:63:c4:6f:9d:
         af:48:83:7d:81:bd:f9:7e:fd:68:a8:fe:42:d4:dc:68:de:0d:
         ec:ae:d8:16:74:f1:e7:ee:1b:92:f2:e3:99:22:44:35:42:31:
         15:85:67:dc:1f:8b:fc:5d:29:08:aa:a9:29:22:8b:05:ea:be:
         1b:3c:68:31:a9:17:e4:81:da:2d:d0:a2:ac:3a:48:a9:e6:f1:
         be:23:28:2f:a1:11:e7:75:30:4b:a2:75:d2:ba:e4:b7:93:90:
         95:16:d4:aa:ef:89:6f:9e:fd:1f:91:ce:e6:c8:d1:d9:6d:70:
         35:8a:67:ad:9b:79:fa:39:1f:55:9c:af:8d:e1:93:e6:7e:06:
         6b:63:98:3a:63:85:df:c4:bf:89:44:6b:8f:dd:1c:84:9c:c5:
         62:23:36:c1:4b:30:6a:8f:7f:14:67:f0:6c:2e:2c:4c:d7:24:
         49:c0:4b:30:3c:84:d0:a6:c8:34:61:e1:ff:4c:55:32:c9:e0:
         b4:38:d5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org