Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32332d3233203d3e20323635323234.roa
File:                     3136372e3235302e3231362e302f32332d3233203d3e20323635323234.roa (raw, json)
Hash identifier:          cOGFbbg40nm51lwZhgAEnEZbIZGIZBl1k4zMhjNF0+w=
Subject key identifier:   DE:5A:47:2A:58:FB:F4:E0:BF:2F:1D:66:6C:E7:7F:DB:70:5E:40:85
Certificate issuer:       /CN=44BCB0CBD8B6995E115D021F5565C1A25FBF52AF
Certificate serial:       2D50197557718A25D1906396ED223527FBF8FBF9
Authority key identifier: 44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32332d3233203d3e20323635323234.roa
Signing time:             Fri 18 Feb 2022 12:26:27 +0000
ROA not before:           Fri 18 Feb 2022 12:21:27 +0000
ROA not after:            Fri 17 Feb 2023 12:26:27 +0000
asID:                     265224
IP address blocks:        167.250.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:50:19:75:57:71:8a:25:d1:90:63:96:ed:22:35:27:fb:f8:fb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BCB0CBD8B6995E115D021F5565C1A25FBF52AF
        Validity
            Not Before: Feb 18 12:21:27 2022 GMT
            Not After : Feb 17 12:26:27 2023 GMT
        Subject: CN=3082010A0282010100A545F91E875979CCAF846C940B986BE9A431EFDF64BB547D16B610F219DDEC3D8CE1EEEDBB72A16A370714C673235ACC66CFFB8FA6C160DCC6868589444063719276F988A6F8BF1DB554F80839FFF3A331AF6D122DCCFE3A8CC73484A5C335D0F076533394B15C0602CF7EE261FD188CF4F41F625F72ED1999976C0684FC89BB7ADC42A0F28CDDECCAE02DBD85F5B04FDDAC7F442AF6F303C95A4A8A2F8B823176A02715472ABE0138412712300AC08CE40BC778B7E03AA8DAB7EB55C7F2D80124F156DBB1FDD785F30EB4CE37EE98318511FE98417462019FE12DD95F18604AA0FFE598CA2E769D30BE620573919D1A1FE5E6705E9B40F6F79B78F1B5785FBF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:f9:1e:87:59:79:cc:af:84:6c:94:0b:98:
                    6b:e9:a4:31:ef:df:64:bb:54:7d:16:b6:10:f2:19:
                    dd:ec:3d:8c:e1:ee:ed:bb:72:a1:6a:37:07:14:c6:
                    73:23:5a:cc:66:cf:fb:8f:a6:c1:60:dc:c6:86:85:
                    89:44:40:63:71:92:76:f9:88:a6:f8:bf:1d:b5:54:
                    f8:08:39:ff:f3:a3:31:af:6d:12:2d:cc:fe:3a:8c:
                    c7:34:84:a5:c3:35:d0:f0:76:53:33:94:b1:5c:06:
                    02:cf:7e:e2:61:fd:18:8c:f4:f4:1f:62:5f:72:ed:
                    19:99:97:6c:06:84:fc:89:bb:7a:dc:42:a0:f2:8c:
                    dd:ec:ca:e0:2d:bd:85:f5:b0:4f:dd:ac:7f:44:2a:
                    f6:f3:03:c9:5a:4a:8a:2f:8b:82:31:76:a0:27:15:
                    47:2a:be:01:38:41:27:12:30:0a:c0:8c:e4:0b:c7:
                    78:b7:e0:3a:a8:da:b7:eb:55:c7:f2:d8:01:24:f1:
                    56:db:b1:fd:d7:85:f3:0e:b4:ce:37:ee:98:31:85:
                    11:fe:98:41:74:62:01:9f:e1:2d:d9:5f:18:60:4a:
                    a0:ff:e5:98:ca:2e:76:9d:30:be:62:05:73:91:9d:
                    1a:1f:e5:e6:70:5e:9b:40:f6:f7:9b:78:f1:b5:78:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5A:47:2A:58:FB:F4:E0:BF:2F:1D:66:6C:E7:7F:DB:70:5E:40:85
            X509v3 Authority Key Identifier:
                keyid:44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231362e302f32332d3233203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:3e:bc:06:9b:ba:ab:8e:b0:38:ec:f8:66:4c:a9:1d:da:
         38:79:28:aa:71:fe:f0:af:7f:29:93:fe:1d:16:84:02:76:e1:
         11:12:61:bf:a9:47:85:ed:38:ed:ed:25:7a:01:b5:fe:1c:d4:
         51:97:19:59:82:10:37:bb:dc:36:2a:aa:2f:1c:68:40:3f:b7:
         9c:14:6f:5e:0a:49:85:6e:93:cb:f7:62:0e:bd:6a:cc:f2:fc:
         16:f8:eb:73:c6:e8:68:04:28:a6:5c:67:0c:c7:e1:b9:a9:3c:
         76:06:2f:8c:6e:d9:f7:df:cf:3a:be:8c:a9:6b:9a:5a:c6:12:
         bf:53:55:cd:d2:72:4e:f3:21:18:3e:70:86:ce:ed:65:07:d8:
         62:05:15:3a:01:06:cf:1d:56:ea:ef:e5:e0:43:b0:55:b5:53:
         22:22:c8:49:e9:66:93:fb:0a:a7:81:59:9f:59:46:c5:fc:4e:
         86:4a:29:e3:b6:00:ae:4f:92:dd:2e:97:85:90:95:cd:d0:cf:
         45:59:1f:ac:a6:ca:1d:c6:9e:a4:ff:00:08:0c:3a:c6:60:1d:
         83:5d:92:31:ef:12:af:5d:7c:ef:aa:a4:52:69:0c:c4:2e:aa:
         03:ca:9e:06:59:59:17:49:35:bd:40:a4:da:02:f4:9f:bb:2c:
         f3:15:d8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org