Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3230312e3134392e3132302e302f32322d3232203d3e20323632393932.roa
File:                     3230312e3134392e3132302e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          8VwE3GT8VYwXeYVltt3fJBCyCUqOjirVBN9mPCNDG2w=
Subject key identifier:   E2:FF:B4:A0:1B:0B:90:77:35:69:28:51:81:C0:B6:78:AA:13:5E:0B
Certificate issuer:       /CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
Certificate serial:       04B914D9FC4CFA2CEF528D18AAE074E9C252C11F
Authority key identifier: 45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3230312e3134392e3132302e302f32322d3232203d3e20323632393932.roa
Signing time:             Mon 23 Jan 2023 21:42:30 +0000
ROA not before:           Mon 23 Jan 2023 21:37:30 +0000
ROA not after:            Mon 22 Jan 2024 21:42:30 +0000
asID:                     262992
IP address blocks:        201.149.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b9:14:d9:fc:4c:fa:2c:ef:52:8d:18:aa:e0:74:e9:c2:52:c1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
        Validity
            Not Before: Jan 23 21:37:30 2023 GMT
            Not After : Jan 22 21:42:30 2024 GMT
        Subject: CN=E2FFB4A01B0B90773569285181C0B678AA135E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:37:0d:38:22:e4:b3:32:b0:de:f0:28:2d:
                    2a:7d:13:7f:02:40:f8:cb:63:0b:72:78:29:2b:1b:
                    f0:cc:3c:72:ed:ab:3b:81:57:7f:7a:0e:c2:20:93:
                    80:2a:7a:c8:59:27:f3:7a:25:75:f8:a4:6f:02:9b:
                    f9:e0:98:57:be:bd:c4:53:d0:29:df:09:d9:70:8f:
                    78:b4:38:41:08:1b:78:5f:30:dc:54:40:75:0d:99:
                    45:93:e9:f9:4a:14:71:0b:9a:2c:22:ba:76:5e:80:
                    a5:28:36:66:f0:da:bc:98:0e:54:6b:f2:06:45:0a:
                    4c:fe:26:75:7a:b0:71:6a:3d:55:e5:b0:06:92:77:
                    98:63:d3:be:4f:e1:c7:34:44:7a:53:cf:c3:3a:fe:
                    dc:cc:54:9c:c0:fc:c2:90:6b:ed:fa:c6:30:3b:d8:
                    1a:f9:b5:e4:14:ca:ae:9a:d1:31:11:23:d0:f4:4b:
                    c9:85:9a:33:a5:64:9c:2f:86:f3:eb:0b:92:a1:fd:
                    b8:cf:42:53:ea:75:cf:89:f2:14:ec:89:b9:9f:e0:
                    41:47:5c:1f:8f:e8:a4:a2:36:f9:2f:0f:8e:34:0f:
                    35:44:76:77:49:2c:a9:90:1d:ba:9b:fb:c1:90:1d:
                    dc:a1:be:13:d5:83:d0:38:77:d8:54:7b:4a:1b:fb:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FF:B4:A0:1B:0B:90:77:35:69:28:51:81:C0:B6:78:AA:13:5E:0B
            X509v3 Authority Key Identifier:
                keyid:45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/4579E09F6F46B73500F1877C7F7BC8F0F677E607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3230312e3134392e3132302e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:8a:83:4b:32:14:4c:00:85:b8:c8:c0:d3:ec:6a:b3:63:be:
         c5:38:5a:e9:72:66:c2:f3:46:d9:51:22:64:8f:5c:38:ed:a6:
         19:7d:9f:3b:98:6e:25:43:62:29:2e:bd:2c:05:50:98:86:67:
         c2:62:58:e6:58:75:ab:b5:fa:46:71:fe:5b:8e:32:61:77:3a:
         a0:ad:91:a4:44:a1:07:93:60:9d:95:b0:ee:aa:87:aa:c0:69:
         07:50:ff:34:f6:a9:e3:9d:93:04:5e:e7:bb:e2:6a:7b:64:96:
         b6:14:26:38:33:a2:ff:82:c5:cf:e5:46:df:e7:36:e4:54:5b:
         2b:b4:de:e5:60:af:50:cf:ee:a9:44:26:41:20:0e:6b:95:29:
         80:80:1d:6a:35:13:42:aa:00:61:4f:02:06:86:a3:92:fc:c8:
         e7:c5:30:f5:8f:b5:75:32:a4:e4:0b:db:b3:16:10:cf:67:35:
         f1:7c:aa:6b:f6:54:8b:da:b5:8c:30:9f:34:54:ee:a8:ba:6c:
         97:94:65:ee:58:f8:35:ef:79:74:ed:34:7a:ab:22:c4:e2:05:
         35:c1:69:9a:d6:1c:1b:08:f2:a8:22:38:25:c9:f3:49:e0:5f:
         da:86:fa:08:5e:8a:15:20:51:40:37:a3:01:4c:cd:f0:65:20:
         51:32:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org