Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3137372e37302e3132382e302f32302d3230203d3e203238323230.roa
File:                     3137372e37302e3132382e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          XXiV+baPf8wi6G7Q89/0gs+2+HJaJ04D50AKKp/FZXw=
Subject key identifier:   CD:78:13:C6:4D:E8:C2:83:32:4C:FC:1A:E8:90:96:D8:5A:36:1B:00
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       741243848D1BBF3AB69A0B1F9130F2232DADDF3C
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3137372e37302e3132382e302f32302d3230203d3e203238323230.roa
Signing time:             Fri 16 Dec 2022 19:48:58 +0000
ROA not before:           Fri 16 Dec 2022 19:43:58 +0000
ROA not after:            Fri 15 Dec 2023 19:48:58 +0000
asID:                     28220
IP address blocks:        177.70.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:12:43:84:8d:1b:bf:3a:b6:9a:0b:1f:91:30:f2:23:2d:ad:df:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Dec 16 19:43:58 2022 GMT
            Not After : Dec 15 19:48:58 2023 GMT
        Subject: CN=CD7813C64DE8C283324CFC1AE89096D85A361B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:cb:3f:26:1f:1d:af:39:1c:33:7d:f6:bb:
                    ae:07:43:12:fc:be:1f:2d:18:02:af:4e:53:1f:34:
                    26:ab:cd:5e:07:1f:3c:ef:1c:dc:c8:a1:75:69:86:
                    b8:c5:84:29:54:e2:ff:78:b6:ba:9b:1d:c0:2d:a6:
                    df:80:1a:71:11:83:7c:82:af:e5:55:cf:5e:ff:cf:
                    3f:8b:23:92:be:db:e9:21:f7:fb:f5:5d:03:9c:46:
                    b6:d7:fb:dc:83:88:91:c8:95:67:06:ef:e0:91:4a:
                    09:bc:1a:96:18:6c:9f:e9:70:2e:df:77:9d:21:f8:
                    be:7a:db:2e:c4:6a:da:87:49:15:26:bd:96:64:e1:
                    77:68:08:a4:19:67:09:44:d7:22:70:d0:af:1b:fc:
                    80:f4:c4:18:e1:14:5e:89:35:24:1a:6e:8c:45:ce:
                    be:d5:0e:09:bd:df:5d:d9:d4:0d:fb:e9:b2:99:ea:
                    97:29:49:6d:ba:8f:87:b9:fb:76:09:0a:b4:85:13:
                    a0:d7:92:46:b0:c8:4a:0a:01:e4:8d:c4:e2:ad:49:
                    0f:96:ee:ca:36:04:b7:c1:53:64:0b:35:c4:50:4a:
                    1d:be:cf:c9:69:78:8c:32:f4:cf:c4:4c:0f:d5:e0:
                    4f:d7:b1:f7:be:3f:f0:58:1e:b7:7b:40:c0:a6:3c:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:78:13:C6:4D:E8:C2:83:32:4C:FC:1A:E8:90:96:D8:5A:36:1B:00
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3137372e37302e3132382e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:02:39:a2:ba:a1:97:7b:b4:7e:18:44:df:0f:81:91:6a:00:
         1a:78:38:c4:c1:d7:ee:bc:84:d8:91:c8:f5:e7:57:97:cd:19:
         db:74:8d:74:df:70:09:e2:8a:bb:6f:b2:27:af:1b:40:22:95:
         bd:2a:02:64:d1:13:de:14:1d:3d:71:95:a8:f1:13:d7:34:a9:
         27:b8:75:ef:f0:bf:d4:d2:12:00:04:ff:97:a0:f2:31:78:86:
         8c:fa:9f:d2:61:95:de:fe:8d:d0:bb:e8:84:8b:2e:96:4b:66:
         e8:41:40:c1:85:54:07:27:f4:c9:72:e3:e9:32:14:6c:1d:39:
         33:72:5b:68:72:77:b9:b0:cc:da:5a:b7:33:8d:64:cc:49:04:
         60:bb:d4:11:c6:ff:76:35:e1:c2:cb:b7:78:24:e1:29:27:ed:
         e7:1b:a9:8b:45:fc:bd:82:2d:4d:75:cc:27:2d:65:a3:71:c2:
         e3:ed:03:2e:35:38:63:9a:92:1c:c3:d9:fe:e0:9e:8c:16:1c:
         6f:79:32:e8:9a:ea:f0:88:fb:9c:f3:fc:91:6c:b2:d6:52:fe:
         98:bb:8d:7c:cb:c8:0c:23:da:c7:59:db:78:bb:42:52:8b:a3:
         ca:e7:d6:b6:f5:54:f7:62:57:8e:60:ab:1f:e6:d1:b3:6b:7d:
         43:db:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org