Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3231392e3135322e302f32312d3231203d3e20323632393932.roa
File:                     3138362e3231392e3135322e302f32312d3231203d3e20323632393932.roa (raw, json)
Hash identifier:          GjEuyl2b82719g0/Nu488mB9JsGtHDeEL65sUvJu87I=
Subject key identifier:   22:60:A1:02:05:A3:34:C3:19:D6:51:1A:C0:B0:D3:1F:DC:FB:0E:20
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       6B6EE27F533E4169F4242DB3AF1C76A6439013C2
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3231392e3135322e302f32312d3231203d3e20323632393932.roa
Signing time:             Sat 22 Oct 2022 12:51:10 +0000
ROA not before:           Sat 22 Oct 2022 12:46:10 +0000
ROA not after:            Sat 21 Oct 2023 12:51:10 +0000
asID:                     262992
IP address blocks:        186.219.152.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6e:e2:7f:53:3e:41:69:f4:24:2d:b3:af:1c:76:a6:43:90:13:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Oct 22 12:46:10 2022 GMT
            Not After : Oct 21 12:51:10 2023 GMT
        Subject: CN=2260A10205A334C319D6511AC0B0D31FDCFB0E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:90:ce:6a:a5:cf:07:d6:6d:d8:5a:b1:fa:3f:
                    63:e6:75:f3:27:93:f4:19:94:81:85:86:ce:4a:49:
                    df:54:6a:c8:75:8d:58:24:58:65:c8:a6:72:3f:9f:
                    a1:a8:d8:b9:d1:22:86:31:0e:55:37:48:80:33:ec:
                    85:dc:ac:b9:35:24:4d:37:29:3c:b9:70:98:57:b8:
                    74:59:eb:2b:c5:7c:9b:27:21:e8:1c:67:70:86:49:
                    f7:92:02:bf:ec:52:c9:d4:90:b0:94:a1:2f:eb:71:
                    ce:24:b1:c8:60:94:01:58:ee:b1:44:72:40:4d:14:
                    38:9d:ff:1c:b7:fe:8a:09:7f:77:f2:8b:35:96:ec:
                    c7:da:65:23:78:73:ca:2c:7c:b2:ef:9d:e2:d6:e2:
                    17:a8:07:c1:a9:e1:5a:9f:9a:bf:74:a0:86:74:03:
                    a7:26:53:80:05:77:84:31:f7:f7:bc:8c:e2:ae:42:
                    6c:36:09:10:1e:5d:3c:ff:20:af:fe:94:14:a6:5f:
                    50:2f:be:17:4c:d0:25:a9:f3:04:b8:a9:4d:a4:f6:
                    0c:19:27:f9:27:2c:6b:ea:92:35:cd:ae:f2:d2:fa:
                    26:52:f7:63:e1:e3:48:f6:0d:90:a2:3b:87:2c:d7:
                    d1:c4:f1:c8:39:cd:01:50:1e:95:5f:59:a7:42:a1:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:60:A1:02:05:A3:34:C3:19:D6:51:1A:C0:B0:D3:1F:DC:FB:0E:20
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3231392e3135322e302f32312d3231203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:0e:3b:8a:54:e7:1b:ce:de:32:85:32:a7:0c:78:a9:3b:97:
         1e:7d:ad:14:fc:37:53:6f:4a:01:71:75:20:55:26:7f:f3:8f:
         3e:48:a6:d0:7e:19:9e:73:68:d0:56:db:bb:e7:da:09:f8:f4:
         4c:10:f3:7c:84:87:b5:83:05:66:d1:36:dc:c4:aa:04:4b:1b:
         4b:c0:fd:7e:d5:55:be:37:70:f7:c6:09:ea:bd:04:d9:7d:39:
         5a:6a:5a:ad:b4:36:1a:1f:70:a4:c2:c6:16:6e:bd:34:27:6d:
         26:09:a0:43:d2:7a:aa:a6:0e:dd:d5:b3:36:68:fe:8b:13:2f:
         13:97:a1:f7:cd:c9:2f:13:72:3d:96:91:38:42:84:a5:5d:20:
         8b:6b:36:12:60:f9:5c:db:7a:37:05:05:33:f3:0d:69:1b:06:
         26:99:6b:2e:45:e9:3b:d6:9e:ba:74:38:0c:a8:47:48:66:4e:
         8b:d9:2e:01:81:13:ec:62:a3:0b:d6:bb:b2:92:b0:5c:8b:fd:
         7a:16:65:76:4f:de:b6:e8:bb:cd:7c:95:a5:f0:62:04:f1:d9:
         9e:6e:09:04:c3:ac:b5:11:32:f9:b7:87:25:a1:29:fc:c4:53:
         ef:f2:b6:fa:80:b0:66:3b:90:28:1a:d7:ca:ac:0d:82:06:70:
         c6:87:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org