Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa
File:                     3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          KzrO4Ylu5AU7zWDtUWInTJVsFum5duK30P9mdaUCiTM=
Subject key identifier:   C1:41:27:2E:30:26:48:43:55:97:3E:96:D6:B0:6A:C5:BE:3A:49:DF
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       57E06B2F1C76F2D3F9A76A196D3BC991DED24106
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa
Signing time:             Thu 06 Oct 2022 17:39:58 +0000
ROA not before:           Thu 06 Oct 2022 17:34:58 +0000
ROA not after:            Thu 05 Oct 2023 17:39:58 +0000
asID:                     262992
IP address blocks:        168.228.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e0:6b:2f:1c:76:f2:d3:f9:a7:6a:19:6d:3b:c9:91:de:d2:41:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Oct  6 17:34:58 2022 GMT
            Not After : Oct  5 17:39:58 2023 GMT
        Subject: CN=C141272E3026484355973E96D6B06AC5BE3A49DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:6a:9e:27:96:ad:bf:e8:06:bf:1b:57:5f:
                    be:ec:15:25:a1:ac:87:7f:14:02:6d:38:83:10:3c:
                    4a:fe:1b:c5:27:da:50:c2:84:11:f5:8b:35:f2:4d:
                    d1:df:9e:6a:d8:8f:67:34:8e:ab:73:12:f3:d7:fd:
                    cc:92:93:de:c6:f7:c9:67:cd:e7:e7:3f:6a:e9:d1:
                    85:a9:99:fc:08:6b:32:aa:02:99:e6:75:62:69:fb:
                    7a:64:85:e1:b3:41:7c:9e:32:f4:b1:d4:8d:7a:a2:
                    cd:d2:c0:cc:df:03:0b:9a:20:cf:26:b1:47:8b:57:
                    f5:4d:10:2b:d6:d5:1d:d1:23:06:ed:0a:99:ab:89:
                    cb:f4:df:01:08:17:9f:95:c6:27:8c:5b:24:33:60:
                    a2:9e:b8:57:6c:55:fb:0e:fa:9f:e4:e4:52:29:8d:
                    9d:4e:6a:01:76:04:c4:f1:0e:73:01:5f:1f:14:1e:
                    40:49:47:ca:e4:6a:4a:87:74:3a:11:e8:29:06:22:
                    2a:a4:10:65:ee:e6:63:87:bd:bf:68:38:a8:b5:f7:
                    85:99:a0:93:24:98:04:9b:4c:af:28:e6:b7:ff:26:
                    d4:28:ab:a3:e7:22:7a:2c:90:a9:77:46:0d:14:d4:
                    02:7c:bf:99:d1:94:f9:06:44:28:8b:11:43:73:b2:
                    28:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:41:27:2E:30:26:48:43:55:97:3E:96:D6:B0:6A:C5:BE:3A:49:DF
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3232382e3132382e302f32322d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:d9:9c:98:d4:37:86:c3:63:fa:a4:0b:a9:fa:ac:4e:95:3e:
         b0:cb:cd:9d:41:4d:d5:38:a8:dc:5a:a4:b3:89:d0:a7:53:c6:
         8e:56:3e:d6:90:e7:d3:80:bb:7e:4d:fa:9b:c5:b9:5b:a9:93:
         66:86:c8:6b:71:1e:b4:36:6d:2e:ab:ee:56:8c:42:fa:f5:f8:
         23:6a:61:13:72:cd:44:16:d7:da:5f:75:97:71:5a:78:5c:82:
         9b:a4:2d:da:3f:8e:71:d6:53:50:63:58:53:c9:7e:e4:36:5f:
         41:b7:c4:09:e4:35:7b:5f:0f:1f:c9:af:ef:f1:f3:94:f9:16:
         08:16:e6:21:cc:48:00:07:07:1f:78:bf:3d:19:c3:98:34:f9:
         52:7c:b6:fd:86:68:15:c8:c4:10:f8:ed:85:2a:76:93:e3:f9:
         68:ca:34:8a:8e:5a:50:e4:38:6f:77:e0:25:b6:68:77:c4:fd:
         e9:6a:d7:de:67:f2:26:1e:8a:60:7d:55:ca:b7:ac:bb:eb:67:
         da:43:43:79:da:4a:e2:b7:52:7d:73:f3:a1:ee:ae:54:84:cf:
         f0:55:16:f5:e4:ef:57:11:ec:bb:d3:0a:b6:86:3b:ab:6b:52:
         1d:2e:cb:45:32:24:76:f0:a1:98:a5:3f:03:98:1d:88:2e:ec:
         91:12:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org