Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa
File:                     3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa (raw, json)
Hash identifier:          PAmYC6D87HDWPMZMtx9k8wjAL8GDhlgZPzGxmnNP7LE=
Subject key identifier:   8D:8C:C6:D5:5A:03:00:85:55:6D:AB:FC:48:1A:04:60:98:92:7A:DD
Certificate issuer:       /CN=74ED85142F26302A125E71A3E55B2063509E7AA3
Certificate serial:       2A01A0C3D3B88CDCDD4091BEC5434CC7243187D9
Authority key identifier: 74:ED:85:14:2F:26:30:2A:12:5E:71:A3:E5:5B:20:63:50:9E:7A:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74ED85142F26302A125E71A3E55B2063509E7AA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa
Signing time:             Wed 17 May 2023 14:12:14 +0000
ROA not before:           Wed 17 May 2023 14:07:14 +0000
ROA not after:            Wed 15 May 2024 14:12:14 +0000
asID:                     266632
IP address blocks:        128.201.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:01:a0:c3:d3:b8:8c:dc:dd:40:91:be:c5:43:4c:c7:24:31:87:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ED85142F26302A125E71A3E55B2063509E7AA3
        Validity
            Not Before: May 17 14:07:14 2023 GMT
            Not After : May 15 14:12:14 2024 GMT
        Subject: CN=8D8CC6D55A030085556DABFC481A046098927ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:57:b9:d6:bc:a9:60:ed:cc:df:0a:64:b4:b2:
                    52:24:ea:a3:f8:1d:21:03:b5:27:a3:a4:4c:89:71:
                    98:c2:a4:de:d0:7b:3a:86:09:f9:f5:5c:dc:ca:16:
                    4e:4c:81:9b:b1:b5:c3:b6:f8:c6:90:89:dd:57:6a:
                    9b:eb:08:d3:79:53:0e:af:b3:41:09:bc:56:f7:1d:
                    58:34:6d:46:37:6f:7b:96:29:6e:b3:6f:2f:27:91:
                    e9:12:38:b1:44:1f:95:8d:d9:06:73:dd:20:20:dc:
                    00:ec:2a:d2:e3:10:2b:b9:7e:d7:f8:d6:bc:69:c4:
                    59:67:1d:53:e7:38:71:f8:d4:6c:cd:8e:09:15:0b:
                    27:2f:28:c7:2e:5c:dc:33:1c:03:bd:ad:4a:b9:29:
                    c6:e0:b7:01:90:ff:bf:6e:57:70:cc:d3:28:d6:51:
                    a5:b2:b0:03:d1:ab:f4:f4:5f:cf:48:36:a7:17:e2:
                    68:bf:f8:af:eb:6a:46:c6:c2:95:e1:e4:7b:26:fc:
                    e8:0f:8b:14:7e:89:3e:02:61:ec:8a:81:45:bf:fc:
                    d7:95:72:a1:94:5a:a9:b9:68:07:be:85:c9:29:0e:
                    5b:3d:8c:e4:c4:7e:9e:40:68:08:8b:24:1c:2f:c6:
                    c4:f5:2b:54:ef:c5:6f:24:1d:4a:5e:97:3f:62:24:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8C:C6:D5:5A:03:00:85:55:6D:AB:FC:48:1A:04:60:98:92:7A:DD
            X509v3 Authority Key Identifier:
                keyid:74:ED:85:14:2F:26:30:2A:12:5E:71:A3:E5:5B:20:63:50:9E:7A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/74ED85142F26302A125E71A3E55B2063509E7AA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74ED85142F26302A125E71A3E55B2063509E7AA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:3a:ef:5f:a2:45:1d:3a:1c:b0:23:a1:a3:5e:23:1a:b1:75:
         cb:4b:5f:1b:b6:35:5a:3e:a6:f8:bc:fe:07:ba:3c:2b:04:ad:
         4d:5f:5c:5d:a8:b4:82:aa:b3:d4:a6:a0:c8:fc:5c:b0:4e:ee:
         18:09:04:0f:c9:4f:b8:4f:37:df:18:75:e6:d2:bb:65:58:33:
         8e:15:f2:86:a7:90:24:43:13:ad:bf:7f:d1:73:b2:11:8a:37:
         40:0e:34:9c:4e:08:5f:0c:6d:a3:0a:03:0c:33:87:bc:8a:e7:
         ac:59:b2:9a:ab:98:f7:dd:c6:c3:c1:1b:42:33:79:65:f6:52:
         9e:9e:44:74:7c:02:f6:c2:09:56:e6:23:38:d2:9d:16:a6:c3:
         61:01:cd:6b:6c:27:c8:00:af:67:9c:e1:ac:e1:e1:74:99:40:
         34:ba:64:39:80:aa:27:e4:c0:4f:be:73:c0:49:e6:4c:d9:f0:
         0f:cd:51:7c:1e:9a:17:d5:e6:74:aa:6b:ae:a2:93:82:ae:2d:
         d7:36:ec:4a:14:74:1a:6a:b9:b9:1d:dd:e0:f3:67:9f:b5:b2:
         55:a1:0c:92:ce:11:94:e0:b9:d0:bd:0e:f7:67:43:7f:b5:6f:
         e8:f0:3c:b3:c1:9c:62:7a:7f:8f:27:41:cc:4f:b0:40:7f:e5:
         51:43:9d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org