Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32332d3233203d3e203533303631.roa
File:                     3138372e38352e3132382e302f32332d3233203d3e203533303631.roa (raw, json)
Hash identifier:          Udk+zNLBR2KppCUO6eDvRrDsht4nywt0UMcZezWBmxc=
Subject key identifier:   F9:5C:25:F9:11:BC:E5:1B:3A:1C:65:10:EA:2C:15:2F:98:F3:8F:95
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       554B6EAB80D43C70FD6A16A66243B9AD2EDE046A
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32332d3233203d3e203533303631.roa
Signing time:             Thu 05 May 2022 18:45:55 +0000
ROA not before:           Thu 05 May 2022 18:40:55 +0000
ROA not after:            Thu 04 May 2023 18:45:55 +0000
asID:                     53061
IP address blocks:        187.85.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4b:6e:ab:80:d4:3c:70:fd:6a:16:a6:62:43:b9:ad:2e:de:04:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: May  5 18:40:55 2022 GMT
            Not After : May  4 18:45:55 2023 GMT
        Subject: CN=F95C25F911BCE51B3A1C6510EA2C152F98F38F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:cc:10:4b:d4:f2:c3:27:c7:a7:f9:d5:41:
                    4d:f3:0f:0e:2e:0f:58:df:13:7c:5f:f7:90:95:70:
                    9f:0e:dd:e8:9a:fc:fc:31:97:bb:24:03:68:9a:21:
                    96:bf:b8:07:7c:03:aa:0e:f5:0d:c5:2a:17:6b:0a:
                    43:cf:1c:aa:ae:9c:e3:21:e6:8c:a5:d7:10:47:b0:
                    92:8d:be:54:08:90:84:58:aa:95:5f:47:27:b3:8e:
                    35:9e:32:5d:23:b7:25:ac:e4:9d:11:82:35:81:b1:
                    0c:89:51:63:79:c9:ce:4e:ca:15:74:ec:f8:f1:2b:
                    8d:ce:1b:f7:fc:b5:a3:23:6c:64:fc:5d:e4:69:64:
                    9c:60:38:be:58:60:7f:e4:ca:a9:19:d0:5c:a0:bb:
                    3d:f2:63:91:9b:0e:81:b9:dd:ca:1f:6a:7b:f5:d2:
                    ac:fc:91:39:7b:52:25:e9:14:46:2a:a3:f7:da:a6:
                    a1:78:b2:f3:af:cd:59:dd:c2:cf:69:6d:7f:c4:f0:
                    97:82:b6:d7:e5:7a:ca:23:be:29:87:b2:8a:17:00:
                    f5:c2:71:8f:a8:3b:65:64:d6:54:93:b3:27:33:eb:
                    93:4e:55:d2:c1:28:ca:28:d4:e9:8e:94:f5:6b:23:
                    ec:75:63:31:93:ad:36:81:a7:7b:08:86:9b:ff:cd:
                    f0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5C:25:F9:11:BC:E5:1B:3A:1C:65:10:EA:2C:15:2F:98:F3:8F:95
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32332d3233203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:e1:89:f0:08:5c:76:1e:d3:71:13:90:6f:ef:54:ef:8a:c5:
         22:b0:29:55:bf:93:be:26:c3:5f:3e:cb:cb:01:a4:3c:fd:7a:
         e6:49:cf:32:80:84:b3:d1:c9:49:58:af:ad:13:ad:79:95:f8:
         39:d4:e1:c1:dd:84:9f:2b:cb:42:17:84:26:c3:37:36:f6:5d:
         55:12:a9:bd:55:ca:7f:51:3e:38:ab:40:b8:41:7c:41:b1:0d:
         97:29:db:c5:71:aa:e0:62:64:18:f2:11:17:fa:ea:f6:2f:a6:
         5b:96:f6:2f:1a:a0:5e:ba:fa:6a:cf:d7:da:cc:40:a3:03:e5:
         20:60:79:24:c3:44:c8:c8:f0:0c:cf:49:c7:5c:47:b7:96:a5:
         d1:98:50:53:6a:56:98:dd:48:2e:8a:1a:f5:9c:39:23:4c:b7:
         6a:91:54:dd:c4:8c:a4:bb:2e:79:06:8a:f1:d0:81:67:6f:84:
         60:49:dd:c6:20:ed:12:f3:f1:19:cf:d2:fc:bd:b5:f8:fd:fa:
         01:d5:b4:dd:e0:fc:2a:3e:e2:88:2d:cb:12:c1:34:8a:8c:47:
         c0:b2:9d:a7:56:d2:bd:aa:de:4c:71:c5:73:d3:42:1d:92:70:
         d7:34:17:1d:8f:17:20:66:91:cb:c4:74:ac:04:81:70:da:ba:
         50:42:78:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org