Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3132382e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          xHyFJTjzI43VULeeUGFqMViio8PapriKPEr9yQyOc0s=
Subject key identifier:   22:65:2A:06:F4:80:5B:26:46:2A:C2:0D:55:3B:21:92:A2:31:78:0A
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       01155069506425DADB712C2AEC8203A4A043E201
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:44 +0000
ROA not before:           Thu 06 Apr 2023 19:15:44 +0000
ROA not after:            Thu 04 Apr 2024 19:20:44 +0000
asID:                     53061
IP address blocks:        187.85.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:15:50:69:50:64:25:da:db:71:2c:2a:ec:82:03:a4:a0:43:e2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:44 2023 GMT
            Not After : Apr  4 19:20:44 2024 GMT
        Subject: CN=22652A06F4805B26462AC20D553B2192A231780A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:8f:44:7c:26:ea:98:06:9b:86:95:35:2a:
                    c2:a0:05:62:48:4f:3f:95:1f:06:d0:35:48:f9:0f:
                    b3:d5:a0:94:25:31:fc:c4:f6:81:8f:19:89:ac:89:
                    77:06:0f:c3:12:04:ef:e7:6e:3b:89:58:e4:c4:bb:
                    d6:ec:7e:4b:20:2e:e3:be:f0:71:d5:68:03:d2:9f:
                    e9:1f:49:b9:67:57:06:10:09:de:b2:a1:67:98:d4:
                    da:1f:d4:31:49:7e:f6:b8:d0:b5:6a:66:9f:3f:46:
                    d6:93:d2:8d:12:9f:f0:1b:b9:96:1b:75:d5:cb:99:
                    62:c5:4d:5d:a3:88:ea:47:2f:e8:6f:35:d9:0f:4b:
                    ac:c5:07:73:ba:79:e7:7d:fa:1a:77:49:8e:8a:05:
                    92:a8:74:bb:e2:e9:9e:fa:36:2b:ba:75:04:1b:ed:
                    80:9c:de:be:e7:1a:3c:fc:63:b6:37:34:d9:50:ec:
                    78:23:1c:2d:cf:83:cb:58:aa:91:47:31:5f:74:8d:
                    5f:04:23:4b:74:a5:83:a0:9d:d2:8f:c7:28:fa:19:
                    bc:c1:28:ab:65:e6:53:43:4e:c3:b2:3e:77:17:b4:
                    9b:3b:2d:04:d0:4c:62:3b:76:d6:81:b6:f0:18:2b:
                    c5:33:b5:b4:e3:8e:31:39:2d:8c:89:4e:16:5b:28:
                    12:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:2A:06:F4:80:5B:26:46:2A:C2:0D:55:3B:21:92:A2:31:78:0A
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:cc:28:c9:64:c2:94:79:15:f6:d7:85:c5:84:07:3c:11:52:
         15:39:92:f8:99:2d:ef:a7:d1:8c:a2:b8:29:7a:b8:dd:a0:87:
         a5:30:bb:56:fd:42:9e:ed:dd:b4:76:87:d7:e7:36:9e:f6:52:
         13:9b:8f:45:7d:ff:10:67:21:5c:48:33:aa:b0:ef:10:f0:8d:
         56:9b:d6:5f:58:6c:d0:0d:ea:46:71:02:91:13:cb:2c:3e:44:
         ae:b4:08:fe:68:f1:7e:36:77:ea:ac:0f:e1:9e:20:1f:eb:24:
         e0:5b:87:53:1e:f6:14:43:07:9e:0e:1a:f1:a1:47:e8:c5:19:
         2e:4d:27:ed:39:1d:f2:e1:86:75:ea:09:f8:76:22:5b:7b:85:
         ca:e6:3f:00:5e:51:46:44:2f:44:4b:67:1f:94:d5:d7:fe:44:
         51:84:53:5a:d5:dc:ae:f3:dd:64:8c:77:32:78:5f:6e:a4:42:
         b5:d5:06:8f:9d:d4:d0:0d:03:7d:67:9c:bc:dc:e6:99:06:72:
         a7:b9:41:4f:63:4c:72:a5:d1:35:bc:c8:8b:fd:2d:1b:ec:0d:
         3b:a4:bf:36:de:23:df:f8:7b:c6:f0:96:d6:d5:17:67:69:75:
         67:e7:39:5b:77:32:e2:0c:9c:9e:a6:18:d7:3f:1a:bb:54:1d:
         f9:42:d7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org