Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa
File:                     3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa (raw, json)
Hash identifier:          Hj70pSOh7v+plAyzBVBYj4ALUM8fJK+uXAR9pGAwMbQ=
Subject key identifier:   92:DA:0E:8F:E5:D8:92:F7:0B:58:EC:EF:54:7C:A5:9A:2B:37:7C:8C
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       41839598C4410A5B15A751F22148D0DAEC024101
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa
Signing time:             Fri 16 Dec 2022 19:42:26 +0000
ROA not before:           Fri 16 Dec 2022 19:37:26 +0000
ROA not after:            Fri 15 Dec 2023 19:42:26 +0000
asID:                     262992
IP address blocks:        186.233.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:83:95:98:c4:41:0a:5b:15:a7:51:f2:21:48:d0:da:ec:02:41:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Dec 16 19:37:26 2022 GMT
            Not After : Dec 15 19:42:26 2023 GMT
        Subject: CN=92DA0E8FE5D892F70B58ECEF547CA59A2B377C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:6d:36:62:0a:fc:35:64:30:d9:f2:fe:db:
                    6d:55:e0:83:4a:37:2f:48:1d:50:3c:e1:79:10:ba:
                    48:7d:87:bb:3d:cc:7b:a7:6f:e4:6b:63:06:bb:c8:
                    cb:76:c0:a5:22:d1:b8:76:e4:53:d6:80:9c:96:77:
                    32:d7:77:6e:39:27:db:1b:ad:3d:7e:46:c0:00:54:
                    9a:c0:49:88:86:bc:21:6a:a4:9d:81:1f:f7:f2:59:
                    e5:13:01:18:0e:4d:77:42:1f:7f:52:e5:bd:ec:ec:
                    1f:30:a0:9c:7c:03:2f:05:c2:7f:f8:1d:ea:aa:0c:
                    28:b7:30:22:ea:a7:53:f5:36:a4:e3:20:61:d5:0d:
                    4d:ca:fc:be:23:cd:b4:07:12:68:42:ef:28:b1:71:
                    53:7a:f0:51:c1:76:98:c0:15:40:26:9f:87:04:78:
                    a0:25:ea:b8:69:34:31:28:9b:48:89:90:b3:f6:83:
                    22:11:88:99:fc:d2:4b:9c:ec:29:2f:8c:c5:31:bf:
                    be:e0:0d:e9:04:44:d2:f9:93:6d:b0:40:7a:1e:9a:
                    e3:07:5b:c6:a2:74:3f:24:6c:4b:31:8b:d3:be:ae:
                    b5:2f:e0:d6:5f:af:59:1d:8e:2b:23:c3:48:24:e4:
                    08:3c:e8:17:20:94:d9:c8:8c:26:f1:b0:cd:ef:b9:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DA:0E:8F:E5:D8:92:F7:0B:58:EC:EF:54:7C:A5:9A:2B:37:7C:8C
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:4e:85:ea:77:eb:ed:e6:f2:49:c2:3b:c8:f6:75:5f:d9:68:
         0b:db:3e:ea:9e:a8:ef:4f:33:65:09:c8:d0:3e:ea:75:3c:60:
         fa:58:8f:85:a3:64:78:68:04:7b:2d:fe:e7:1d:71:c0:a9:ec:
         2a:39:a6:bd:c0:a1:f9:6d:11:b4:7e:0f:1d:c2:c3:a3:19:a4:
         09:72:c5:eb:30:9d:95:33:e8:f4:c1:29:63:e3:f6:38:82:76:
         13:15:cd:c1:ae:4e:ac:f7:9d:1b:cd:0a:c0:37:f7:2d:93:51:
         d7:bc:fc:da:40:05:51:5c:fc:3e:5c:b0:ed:44:9f:7a:95:d7:
         47:e9:5f:7f:0d:79:85:c4:d3:a3:b0:c4:85:47:51:b4:9f:72:
         41:d7:14:7c:a1:0c:f2:3c:28:d6:38:ad:c9:33:e6:77:0e:23:
         be:dc:6d:0a:84:48:29:37:60:78:3b:84:ca:d4:ee:c7:04:7b:
         50:91:ae:36:92:4d:55:93:8f:56:9e:18:98:fc:4c:0f:09:97:
         85:19:69:f5:f5:d0:40:5c:00:24:19:59:c4:ca:49:4e:c3:ad:
         0b:98:46:51:a7:d3:dd:a5:cd:05:29:85:f5:b8:e6:42:b9:7d:
         3d:7c:a9:24:3e:d3:62:9d:b5:d1:9f:43:aa:c9:7e:c3:53:be:
         6e:31:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org