Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3230312e3134392e3132302e302f32322d3232203d3e20323636353535.roa
File:                     3230312e3134392e3132302e302f32322d3232203d3e20323636353535.roa (raw, json)
Hash identifier:          kqtvurO4MjV93XQxuE3vUXzeyfzeb0IbSgvIBjweFlQ=
Subject key identifier:   4B:FC:4F:5F:08:51:E2:46:17:83:AD:BF:01:7B:BE:1F:9D:44:42:E6
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       14A44657DBCD8A6C0584057344EE714F65EC3885
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3230312e3134392e3132302e302f32322d3232203d3e20323636353535.roa
Signing time:             Wed 23 Nov 2022 12:30:58 +0000
ROA not before:           Wed 23 Nov 2022 12:25:58 +0000
ROA not after:            Wed 22 Nov 2023 12:30:58 +0000
asID:                     266555
IP address blocks:        201.149.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a4:46:57:db:cd:8a:6c:05:84:05:73:44:ee:71:4f:65:ec:38:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Nov 23 12:25:58 2022 GMT
            Not After : Nov 22 12:30:58 2023 GMT
        Subject: CN=4BFC4F5F0851E2461783ADBF017BBE1F9D4442E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:43:51:a4:19:fe:41:06:54:2e:4a:d9:37:35:
                    df:52:0f:89:e5:9b:3b:a6:fb:62:fd:69:e3:99:b1:
                    19:b7:45:18:c2:f5:ed:22:7f:a9:e3:68:00:54:af:
                    b5:6b:3c:6d:e2:dd:24:20:d1:33:2c:16:56:e0:66:
                    62:91:c8:78:35:15:3f:01:8f:2d:bf:e8:25:f0:e5:
                    b6:cd:bd:60:66:44:b6:36:b5:99:d5:d8:d4:83:92:
                    35:db:8e:ae:f3:5d:4b:49:4b:05:21:33:4b:42:17:
                    38:05:ad:97:72:70:3f:3c:7c:3a:92:2a:ff:52:af:
                    49:dd:f6:87:22:16:f9:9f:ce:ae:60:8a:78:df:32:
                    fd:43:58:80:25:5d:c6:45:86:82:04:d3:e4:2b:86:
                    fd:6e:d6:0f:cf:22:bd:6e:9d:eb:26:55:e5:b9:e7:
                    c0:74:36:8f:61:95:6c:9e:d0:a8:8b:40:ce:5a:da:
                    f4:4f:90:3f:56:e7:ab:48:0a:63:f3:d0:b9:62:95:
                    a7:36:dc:70:08:a3:b0:41:0c:34:3a:56:2f:49:3b:
                    ef:a2:29:4c:7a:46:e4:4d:1e:67:cc:f6:3e:b6:1b:
                    cd:76:83:68:a8:58:7e:80:ec:34:67:73:a6:d1:44:
                    1c:6b:c7:5f:38:14:12:69:ee:be:2e:2d:23:a4:9d:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FC:4F:5F:08:51:E2:46:17:83:AD:BF:01:7B:BE:1F:9D:44:42:E6
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3230312e3134392e3132302e302f32322d3232203d3e20323636353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:d7:6d:00:f6:b0:eb:60:5a:a5:c4:44:ce:66:1d:d8:8c:d9:
         02:03:f5:8a:cd:86:05:14:27:8b:2c:7c:c2:90:12:00:37:1d:
         e1:06:d9:fd:96:e2:32:f5:c2:eb:fc:54:2d:69:b2:50:7f:9d:
         09:d5:cf:fb:15:1b:c1:e2:98:71:8e:f4:6f:79:e0:93:c5:72:
         1e:d2:38:a2:2c:52:99:98:9f:7b:c3:47:9e:52:c3:d9:dd:dd:
         7f:ca:c5:9f:1f:38:a4:e4:58:e9:33:e5:2c:68:ea:b5:92:72:
         31:4f:dd:a1:b4:6f:a0:87:91:dd:58:3c:55:18:97:b0:39:22:
         b3:e3:ec:36:75:73:3e:84:09:35:70:b5:3f:7e:0b:56:55:63:
         67:e4:a9:11:b1:6c:8c:61:cf:00:9e:8a:c8:09:bb:bc:0c:4c:
         af:dc:ed:86:ec:ed:eb:df:c6:de:04:4c:1c:0b:14:27:c3:35:
         b1:6b:c7:16:55:38:6c:58:6e:ac:1c:0d:a8:2a:69:13:76:f3:
         b9:09:eb:e5:38:12:d8:04:f3:52:4f:5e:75:f4:b2:d5:74:3a:
         46:c6:15:df:2e:a0:83:86:2e:68:65:c4:ed:eb:c8:a2:c3:83:
         99:ac:e1:95:65:eb:6a:12:f5:83:56:9e:a5:97:56:46:15:d5:
         a5:cb:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org