Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3139312e362e38302e302f32312d3231203d3e203238323230.roa
File:                     3139312e362e38302e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          tUPDX5WZ4UrmRc6nc30a5JvnVNCBEHzi/k+pIfISgh8=
Subject key identifier:   40:2E:33:2E:AE:8A:D8:B4:5D:0A:AF:A9:C1:8B:28:ED:1E:D9:7F:9A
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       4C7B4B03EF06DAFCE3623E88BB029BBDD2EAA5C7
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3139312e362e38302e302f32312d3231203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:39:59 +0000
ROA not before:           Thu 06 Oct 2022 17:34:59 +0000
ROA not after:            Thu 05 Oct 2023 17:39:59 +0000
asID:                     28220
IP address blocks:        191.6.80.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7b:4b:03:ef:06:da:fc:e3:62:3e:88:bb:02:9b:bd:d2:ea:a5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Oct  6 17:34:59 2022 GMT
            Not After : Oct  5 17:39:59 2023 GMT
        Subject: CN=402E332EAE8AD8B45D0AAFA9C18B28ED1ED97F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:9a:07:b4:29:08:e1:70:de:58:a0:ce:10:
                    8c:81:3b:74:a5:9e:55:7b:6d:3e:3b:71:c6:22:57:
                    ba:bb:aa:4d:c9:98:c7:80:5f:29:5c:1b:c5:61:f5:
                    3a:74:bc:7e:2b:b5:0e:dc:f6:d3:67:6c:20:34:ea:
                    aa:68:9e:ec:61:94:d0:29:9e:9e:68:14:4b:c7:54:
                    ec:d2:e3:f9:29:73:d6:26:43:87:8b:ee:c3:f5:a5:
                    bc:c4:4f:d9:e7:15:07:18:6a:da:9c:53:a1:12:19:
                    cc:5e:49:ae:a4:d2:b7:62:a9:27:bf:b1:99:fc:ae:
                    1a:d6:33:7c:3d:34:a5:4e:c9:fb:3a:cb:00:32:c0:
                    b8:cb:9f:18:72:5d:7b:be:70:21:83:4e:c6:eb:f4:
                    d4:f4:89:40:dd:cb:3c:04:3d:06:77:88:04:06:9c:
                    f1:99:ed:88:1c:39:7c:3e:ef:62:87:77:67:b2:a7:
                    03:54:24:32:3d:01:32:f5:65:57:f8:2c:bf:a5:4d:
                    e9:3d:68:34:77:2c:d6:91:29:f7:95:d1:14:31:d2:
                    53:fe:1f:d5:88:73:d7:ad:bb:e2:38:de:01:f2:ff:
                    c9:64:30:c1:c6:b0:c4:c0:e4:79:fc:29:bc:d8:34:
                    8a:97:20:8f:19:aa:11:16:72:4f:5d:d0:02:01:40:
                    4a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2E:33:2E:AE:8A:D8:B4:5D:0A:AF:A9:C1:8B:28:ED:1E:D9:7F:9A
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3139312e362e38302e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:62:e8:2e:6a:91:80:ab:c0:cf:a5:77:69:4a:52:fe:92:f5:
         a3:a7:a0:c1:21:52:c7:91:6b:2a:27:d5:da:07:9e:f8:f0:8c:
         1a:ea:97:03:c3:7f:94:8c:12:01:6b:82:dd:90:2d:a9:70:06:
         6e:f1:16:1d:3e:37:fd:1a:95:22:54:aa:2d:11:b4:ab:33:1a:
         17:21:a0:60:6f:1c:f9:c4:5b:cc:74:4a:a0:a9:6b:a8:8c:98:
         ea:54:cc:92:e1:d9:67:fb:5f:a1:6f:55:aa:78:84:03:2b:f7:
         19:55:00:ff:3a:13:92:b4:6b:80:e0:cf:8c:35:60:93:7c:52:
         ff:5f:96:c4:ed:a4:d6:c3:d4:98:5a:be:4d:e2:8c:6a:92:a7:
         7c:a0:51:a1:f1:35:b4:b0:04:12:ba:42:ac:ce:3e:7d:82:4e:
         42:71:72:27:b4:4e:41:bf:ca:80:1e:74:d2:4b:25:8b:bf:41:
         8a:20:ab:b0:15:56:b3:b7:1e:76:00:41:90:5a:73:35:d1:63:
         c3:e9:d0:20:31:57:a0:e6:61:ba:a5:6f:5b:9a:8c:9f:60:9f:
         aa:05:ad:b6:0b:c8:d2:6c:bc:ab:b9:2c:1c:d9:3a:0c:ed:5f:
         f6:2e:b7:ef:55:46:3b:00:de:6e:79:29:70:2d:4f:81:cd:9d:
         be:8a:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org