Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3231392e3134342e302f32302d3230203d3e203238323230.roa
File:                     3138362e3231392e3134342e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          oIcL3oQ8p6sfOdAvQbgzVRlIf88ENEdGQe+pi3u7lo4=
Subject key identifier:   4A:8E:33:84:C4:D3:73:87:BF:09:68:41:CC:F4:92:63:C2:DC:94:C3
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       21832BB3A11AD0706CCE809D1855BE36935705BA
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3231392e3134342e302f32302d3230203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:39:59 +0000
ROA not before:           Thu 06 Oct 2022 17:34:59 +0000
ROA not after:            Thu 05 Oct 2023 17:39:59 +0000
asID:                     28220
IP address blocks:        186.219.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:83:2b:b3:a1:1a:d0:70:6c:ce:80:9d:18:55:be:36:93:57:05:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Oct  6 17:34:59 2022 GMT
            Not After : Oct  5 17:39:59 2023 GMT
        Subject: CN=4A8E3384C4D37387BF096841CCF49263C2DC94C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:0f:be:c3:07:60:02:a2:45:50:f6:a1:82:
                    d1:d4:8a:b4:3c:a4:0e:6a:87:f3:7a:bc:18:fd:85:
                    9e:57:c5:f9:3e:ba:0c:f1:e5:80:25:fd:f2:21:b9:
                    83:6d:92:6f:97:e5:d8:c7:fd:b8:19:19:c5:ed:e2:
                    91:26:00:86:d5:e4:fd:08:dc:7f:17:97:1c:f2:2e:
                    93:d2:27:9c:cd:87:bb:38:a5:55:bf:f3:53:47:96:
                    8c:ff:78:b2:da:8f:73:81:5e:7c:6e:b8:1e:9d:df:
                    9c:8d:18:c8:be:86:b2:1e:dc:90:d8:6f:ce:88:c5:
                    4f:57:08:ad:2a:9c:cb:31:8b:24:58:d8:ac:d4:a0:
                    85:70:b7:c8:a1:e0:86:23:62:3d:fe:ba:cf:5f:2c:
                    f0:e2:b2:8c:d8:10:df:ba:be:82:89:5c:a0:76:27:
                    01:ce:21:b5:f7:78:d7:6c:59:37:d1:be:e0:e6:2d:
                    62:1d:63:b2:94:66:37:3b:11:cc:2a:83:d2:b0:fc:
                    ef:09:6a:6f:20:c3:db:05:5f:fb:41:d2:61:8a:48:
                    d3:81:a5:3e:72:97:f7:d3:46:e9:7e:a8:50:a5:ca:
                    e5:f5:66:cb:69:3d:29:cc:b8:36:45:50:fc:11:cd:
                    04:76:c8:82:f2:5a:c2:bf:12:6c:ac:ff:05:d8:99:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8E:33:84:C4:D3:73:87:BF:09:68:41:CC:F4:92:63:C2:DC:94:C3
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3231392e3134342e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:07:27:03:ff:d8:a1:89:99:a3:00:8a:82:a2:ce:1e:f0:6b:
         77:e4:af:fc:6f:2c:91:43:4b:67:3e:d8:13:f2:db:d2:5c:de:
         dc:b0:53:84:a1:3e:a9:d7:46:7e:d2:e1:99:98:fb:ed:8a:31:
         ca:ee:b3:f3:b0:dc:b9:2a:3b:65:f6:c6:ce:cf:d7:2d:66:4c:
         1b:66:60:90:23:b6:99:f7:35:9a:98:d4:f8:1e:1e:cd:03:aa:
         d1:c3:77:fd:ea:3b:8b:b9:d6:be:fa:28:4e:74:42:07:85:2d:
         84:94:ae:b5:73:9b:dd:8a:0a:8b:27:95:0f:84:1b:19:b4:49:
         5c:cd:f5:bc:40:eb:73:93:cd:61:1c:07:ba:e0:5c:0d:e5:c2:
         e7:18:18:d4:22:5c:da:f0:81:94:cd:e2:76:c8:3a:ae:2d:39:
         ee:8d:f3:47:c1:84:9a:c1:e4:14:ac:de:7e:50:20:15:87:5c:
         96:b2:7b:72:5e:16:12:0d:88:cf:fc:d0:21:a9:92:1a:aa:f4:
         97:b3:e8:c7:8b:21:09:ff:cf:dd:51:36:d4:27:4a:1f:aa:0b:
         09:49:aa:42:f0:1f:d4:6e:75:2e:47:3c:b5:28:fa:7f:19:db:
         36:81:83:3b:38:44:93:c7:b4:b1:db:bd:64:18:62:0b:94:8b:
         b4:99:94:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org