Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3233322e3131362e302f32322d3232203d3e20323636353535.roa
File:                     3136382e3233322e3131362e302f32322d3232203d3e20323636353535.roa (raw, json)
Hash identifier:          7xRoRGwOg4sgg6km4ge/+L3ZTtNYgCAuXhKi2e4cWIA=
Subject key identifier:   A4:78:D8:39:0C:CF:08:C3:2F:D5:C5:5E:B9:23:CC:62:70:0C:12:2D
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       06CA71E48904EBB8DC31172235DF4F74160E231D
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3233322e3131362e302f32322d3232203d3e20323636353535.roa
Signing time:             Wed 23 Nov 2022 12:31:46 +0000
ROA not before:           Wed 23 Nov 2022 12:26:46 +0000
ROA not after:            Wed 22 Nov 2023 12:31:46 +0000
asID:                     266555
IP address blocks:        168.232.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ca:71:e4:89:04:eb:b8:dc:31:17:22:35:df:4f:74:16:0e:23:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Nov 23 12:26:46 2022 GMT
            Not After : Nov 22 12:31:46 2023 GMT
        Subject: CN=A478D8390CCF08C32FD5C55EB923CC62700C122D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3b:58:97:ed:15:45:3a:5f:58:dc:22:7d:9a:
                    10:ce:7b:a8:bb:6b:c4:c8:28:97:2e:6e:e6:6e:6e:
                    f1:12:48:99:4b:ec:b9:46:01:eb:a3:23:c6:2a:e9:
                    45:b2:a6:c6:c2:f6:1f:e3:6c:df:79:eb:07:56:56:
                    6d:73:53:f8:6e:67:16:22:01:ed:4e:ff:30:4f:98:
                    ed:d2:16:e4:f6:d4:31:09:64:d1:6a:6e:63:1f:dd:
                    95:b9:c8:0b:0f:7a:40:67:7e:5f:1e:26:75:07:57:
                    87:a4:ca:a6:37:47:99:2b:74:06:93:1c:4f:07:c9:
                    86:e5:f5:e6:24:d7:ca:66:13:26:df:08:89:8b:e4:
                    81:66:85:89:c1:13:d8:6a:ac:b5:94:ed:64:ca:c1:
                    f0:52:bd:5e:a7:82:e0:96:6b:69:d2:5d:09:2b:b8:
                    c0:35:e4:61:b9:5e:73:51:56:a7:8e:de:4f:ab:f6:
                    0c:08:0a:e1:be:2d:f4:61:15:06:c5:27:51:0a:a3:
                    f5:76:24:4d:de:eb:fa:7c:f4:fa:83:5c:1a:07:48:
                    49:64:70:ac:ec:98:65:2d:a4:66:32:b2:03:30:12:
                    a3:48:30:ce:94:74:d7:c5:a6:96:db:e2:99:0d:57:
                    4f:30:18:73:f4:5b:74:eb:18:1d:7a:d5:27:b8:53:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:78:D8:39:0C:CF:08:C3:2F:D5:C5:5E:B9:23:CC:62:70:0C:12:2D
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3233322e3131362e302f32322d3232203d3e20323636353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:d6:89:27:6f:3a:9c:c0:85:07:39:4b:22:df:e1:aa:60:f9:
         25:2a:03:5f:33:e8:57:4c:28:a0:0a:b9:a0:a2:37:5f:9d:02:
         bd:57:c5:ef:5e:b5:db:af:30:f3:ad:5e:88:96:17:31:28:1e:
         3d:5f:3b:bc:0d:a7:c7:cc:6d:f0:cb:c7:58:f4:0c:ea:98:d0:
         05:1a:4c:35:87:02:ba:74:22:48:86:a9:38:2f:38:bd:7d:e2:
         7f:94:24:31:9e:32:79:54:32:ee:0e:97:1d:ce:2e:85:71:ad:
         6c:d3:27:f8:e4:23:e6:c5:f1:0b:dc:18:b0:99:0f:72:2b:89:
         24:49:c0:30:73:51:48:bc:16:d9:9d:26:08:39:71:b3:62:df:
         26:04:22:75:48:26:22:8a:61:5b:c0:5c:99:b0:b5:79:d0:45:
         f7:b4:7b:ce:80:ab:11:8c:14:7d:10:da:69:a8:43:bd:5e:1a:
         fb:1e:34:94:7d:b7:3f:0c:51:f8:16:b5:25:b8:a2:69:96:50:
         6e:3c:dc:0e:a0:93:78:e8:52:85:89:52:9f:a8:20:4b:21:d7:
         e4:b8:e5:61:aa:e5:bd:45:96:0e:c6:f4:a2:95:ac:79:ad:de:
         9a:be:eb:7e:f7:7e:26:04:05:1e:66:d1:70:3b:d9:6c:17:17:
         96:82:f1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org