Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231382e302f32332d3233203d3e20323635323234.roa
File:                     3136372e3235302e3231382e302f32332d3233203d3e20323635323234.roa (raw, json)
Hash identifier:          RQ3LlFGn/u0Y2RLeGC6lpYvHH2R7gqMSPzU3sryc4Bs=
Subject key identifier:   A6:AB:DF:37:57:CB:76:94:08:84:3E:96:F8:D4:C0:AD:A7:50:CC:D7
Certificate issuer:       /CN=44BCB0CBD8B6995E115D021F5565C1A25FBF52AF
Certificate serial:       4980A0514DE1C1FC2BB285AA34AC69C0375A90C1
Authority key identifier: 44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231382e302f32332d3233203d3e20323635323234.roa
Signing time:             Fri 18 Feb 2022 12:27:00 +0000
ROA not before:           Fri 18 Feb 2022 12:22:00 +0000
ROA not after:            Fri 17 Feb 2023 12:27:00 +0000
asID:                     265224
IP address blocks:        167.250.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:80:a0:51:4d:e1:c1:fc:2b:b2:85:aa:34:ac:69:c0:37:5a:90:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BCB0CBD8B6995E115D021F5565C1A25FBF52AF
        Validity
            Not Before: Feb 18 12:22:00 2022 GMT
            Not After : Feb 17 12:27:00 2023 GMT
        Subject: CN=3082010A0282010100C50520ADD2658C84B49230AD866A006949D5379AC958229E62FA8CAE7A3B3CE20F5293833B811E870BF8AE2189D5AF54C1DBE37D86EE1B6E72B86DE1C7C77B73A2CA1A8BD81B363B37EBAF7DEF73C36354094CAE5BFB78C8A055772F6F893541A4D626D59C15D7EFB596176EE1E5379F09E35BE2756F65025D2741839993603DF8A5949FDE163C01AB83C2D77556E1221CFEC0195A8A0C76F03DC947E1108FF9905C60CBE0F51AA0AD4284E04FE251262B15E81C7E17448613E1AD791F4FCDBB9DCC934DEE92583166F68538DE64DD7AC298AFE71CC4D1EE569088932C2D28B182EF6C668D35C6DEEDE83B1277EB09017AE0430A41D52BA473F5E0228CD1A82D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:20:ad:d2:65:8c:84:b4:92:30:ad:86:6a:
                    00:69:49:d5:37:9a:c9:58:22:9e:62:fa:8c:ae:7a:
                    3b:3c:e2:0f:52:93:83:3b:81:1e:87:0b:f8:ae:21:
                    89:d5:af:54:c1:db:e3:7d:86:ee:1b:6e:72:b8:6d:
                    e1:c7:c7:7b:73:a2:ca:1a:8b:d8:1b:36:3b:37:eb:
                    af:7d:ef:73:c3:63:54:09:4c:ae:5b:fb:78:c8:a0:
                    55:77:2f:6f:89:35:41:a4:d6:26:d5:9c:15:d7:ef:
                    b5:96:17:6e:e1:e5:37:9f:09:e3:5b:e2:75:6f:65:
                    02:5d:27:41:83:99:93:60:3d:f8:a5:94:9f:de:16:
                    3c:01:ab:83:c2:d7:75:56:e1:22:1c:fe:c0:19:5a:
                    8a:0c:76:f0:3d:c9:47:e1:10:8f:f9:90:5c:60:cb:
                    e0:f5:1a:a0:ad:42:84:e0:4f:e2:51:26:2b:15:e8:
                    1c:7e:17:44:86:13:e1:ad:79:1f:4f:cd:bb:9d:cc:
                    93:4d:ee:92:58:31:66:f6:85:38:de:64:dd:7a:c2:
                    98:af:e7:1c:c4:d1:ee:56:90:88:93:2c:2d:28:b1:
                    82:ef:6c:66:8d:35:c6:de:ed:e8:3b:12:77:eb:09:
                    01:7a:e0:43:0a:41:d5:2b:a4:73:f5:e0:22:8c:d1:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AB:DF:37:57:CB:76:94:08:84:3E:96:F8:D4:C0:AD:A7:50:CC:D7
            X509v3 Authority Key Identifier:
                keyid:44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3136372e3235302e3231382e302f32332d3233203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:35:7b:b0:87:12:bc:0c:5e:a0:6c:23:5e:d3:3b:ef:fc:c2:
         9b:e3:e1:2a:16:1e:7c:3a:9f:fb:be:11:71:ba:0f:22:22:42:
         28:ab:f4:11:99:09:a7:d5:9e:46:1b:04:96:53:70:0a:0a:44:
         77:27:aa:11:4c:16:9d:4d:9d:b4:2e:15:84:68:eb:21:f7:e1:
         cb:b0:c5:47:65:68:a5:d2:f4:41:88:b2:ba:83:2a:69:19:2d:
         d6:50:cd:29:b9:43:d8:a4:8f:8c:4d:5a:b3:3e:cd:67:d9:2c:
         6e:55:80:48:09:8a:5a:31:f7:66:d8:85:e9:f5:96:ac:6e:3c:
         66:4e:22:1d:20:84:d7:07:de:d6:2c:0a:80:1f:67:d6:7b:09:
         91:cb:59:df:96:a5:f2:f3:94:a6:2b:2d:80:1f:65:cb:2f:20:
         b0:8e:f6:80:1a:f8:68:15:0d:44:8a:22:c8:d0:21:4c:6a:7d:
         5b:1c:33:9e:3e:cc:54:20:44:32:5f:06:77:53:bb:6e:d9:1c:
         d9:49:fb:01:38:dd:68:f8:b5:be:b3:3b:8c:d6:e7:7a:8b:dc:
         d7:1e:35:cc:08:8e:b7:99:7b:c8:c2:ca:49:20:58:96:e1:63:
         c0:10:3b:5e:bf:3a:be:8f:e3:f9:78:f6:d4:69:3c:d3:1e:59:
         64:c4:e2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org