Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3233322e3131362e302f32322d3232203d3e203238323230.roa
File:                     3136382e3233322e3131362e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          jiV9ghvE8J1p2WNfXgxa3Df7gRTYbx8D5fri9LGw8Io=
Subject key identifier:   73:CB:30:E8:71:E8:FC:58:30:60:F5:B4:1E:B7:00:0F:AA:E0:D3:BF
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       1BBBBA8DDE3DE56EAA854D126CB62D3F293905B7
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3233322e3131362e302f32322d3232203d3e203238323230.roa
Signing time:             Fri 16 Dec 2022 19:48:43 +0000
ROA not before:           Fri 16 Dec 2022 19:43:43 +0000
ROA not after:            Fri 15 Dec 2023 19:48:43 +0000
asID:                     28220
IP address blocks:        168.232.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bb:ba:8d:de:3d:e5:6e:aa:85:4d:12:6c:b6:2d:3f:29:39:05:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Dec 16 19:43:43 2022 GMT
            Not After : Dec 15 19:48:43 2023 GMT
        Subject: CN=73CB30E871E8FC583060F5B41EB7000FAAE0D3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:92:7b:b5:2f:c5:02:cf:e6:e2:2e:30:9d:
                    96:00:b8:d7:53:e1:3b:5e:ed:dd:ff:d2:a4:8f:d1:
                    cb:e3:74:57:b2:59:9e:ef:b6:8e:34:3a:63:c9:5d:
                    fc:d9:c6:10:88:46:a6:eb:81:d6:21:39:e3:47:c2:
                    6e:d9:04:43:d7:41:26:46:6d:aa:48:3c:bc:34:32:
                    e4:6d:1c:2a:76:2d:84:d8:08:04:a0:48:e8:06:3e:
                    3f:29:e0:19:f2:9f:46:b9:fd:36:7b:dc:ba:bf:8f:
                    7d:cc:44:24:51:bb:c9:4d:df:34:c8:e5:28:f8:3b:
                    5d:d3:80:21:e2:a9:35:a8:76:23:a6:27:36:94:65:
                    a8:37:a9:c2:e8:89:6e:d7:2b:0b:96:03:60:94:60:
                    2c:59:d9:df:36:af:e1:8b:31:55:bd:f3:32:a2:bc:
                    d2:5e:77:8f:8c:e6:2f:13:25:cc:98:0b:2e:61:f2:
                    24:5a:2b:00:75:73:bd:3c:23:8f:a1:a7:66:77:49:
                    ce:23:23:e0:1e:ed:a9:92:47:6e:2a:9c:1a:64:1b:
                    a6:ef:40:c7:d0:f5:46:5d:d2:72:d7:59:5a:00:ed:
                    81:ea:ac:d6:e5:01:d9:df:9b:1a:2b:e5:31:16:f3:
                    1f:ce:e6:d0:9d:9c:ce:d7:8e:9d:20:de:ca:8c:06:
                    84:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CB:30:E8:71:E8:FC:58:30:60:F5:B4:1E:B7:00:0F:AA:E0:D3:BF
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3136382e3233322e3131362e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:ca:1d:8d:e7:21:78:01:76:11:c7:2d:bf:cf:cd:ae:49:f5:
         ca:4f:59:59:e2:9c:d4:ae:c6:ca:8e:a6:07:7e:55:2b:ce:3a:
         ff:42:f0:e2:3b:0f:7c:96:ff:c7:80:2f:91:72:25:b1:0b:3c:
         37:d4:ce:ae:a8:1f:5f:d3:f6:34:fb:8c:8d:1f:c1:9e:e7:38:
         50:dc:a0:1c:a1:58:c9:52:1d:fe:e9:42:db:52:a0:47:74:d5:
         db:47:58:0b:02:78:04:b0:1b:24:6c:df:04:32:d1:0b:7e:ce:
         60:52:7a:35:e9:22:32:87:e3:c0:9c:75:77:e2:ff:dc:14:6f:
         30:c1:34:32:7a:8d:e4:fe:50:5f:fb:16:16:bd:41:d8:d7:f1:
         54:10:4a:81:bb:70:0f:f3:9c:2a:c2:80:0c:6a:29:cd:b4:1c:
         f5:df:47:9d:54:61:aa:35:e8:bf:be:98:92:1d:80:6e:e0:b8:
         4b:5a:6d:ae:1a:9d:fd:df:3b:4e:54:e9:e7:31:f3:18:aa:d7:
         dc:e9:84:63:b4:ae:40:44:7c:c2:b4:c5:50:81:1c:d8:75:ad:
         03:5c:40:bd:6a:d3:80:87:98:a6:2b:8f:11:97:56:17:1a:fb:
         39:c5:bc:2a:a0:11:97:8b:9c:4f:50:55:ce:d2:c1:0f:aa:e8:
         93:79:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org