Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3138362e3233332e3232342e302f32322d3232203d3e203533323131.roa
File:                     3138362e3233332e3232342e302f32322d3232203d3e203533323131.roa (raw, json)
Hash identifier:          qAhlSU2gQnOqtpoa0MRWK6ZMc4eHjkeJW/bsy0GP0yg=
Subject key identifier:   9B:33:81:AC:48:98:D6:3B:BA:4F:2F:D6:0B:1E:73:3F:D0:1E:3A:B1
Certificate issuer:       /CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
Certificate serial:       73EE16AD10E8550FAC1DC31338CA6CA2ABA698ED
Authority key identifier: B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3138362e3233332e3232342e302f32322d3232203d3e203533323131.roa
Signing time:             Sat 19 Feb 2022 17:18:36 +0000
ROA not before:           Sat 19 Feb 2022 17:13:36 +0000
ROA not after:            Sat 18 Feb 2023 17:18:36 +0000
asID:                     53211
IP address blocks:        186.233.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ee:16:ad:10:e8:55:0f:ac:1d:c3:13:38:ca:6c:a2:ab:a6:98:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6
        Validity
            Not Before: Feb 19 17:13:36 2022 GMT
            Not After : Feb 18 17:18:36 2023 GMT
        Subject: CN=9B3381AC4898D63BBA4F2FD60B1E733FD01E3AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:3c:79:0b:73:c1:77:20:bb:b8:27:ad:3d:
                    2a:12:72:11:0d:f4:23:1b:1b:28:0d:28:2c:57:ce:
                    16:5e:72:95:c7:dd:b9:79:b3:ae:9d:51:a7:06:a9:
                    ca:c6:45:fd:1e:7c:5a:b5:dc:9d:be:13:9a:1c:0d:
                    74:cc:3a:4c:41:e7:77:cc:19:b5:28:68:b8:a9:ff:
                    55:b0:93:57:6e:3f:00:95:f1:cf:f6:a6:37:f5:60:
                    60:e2:e9:8c:18:80:ee:6a:80:09:b2:78:cd:e7:64:
                    c1:4d:46:39:03:7a:00:ad:fa:72:84:9b:d2:5e:ff:
                    79:53:b0:04:ba:b3:74:5d:15:cf:64:bd:44:5f:0d:
                    47:d7:66:68:35:a3:6a:bc:12:52:58:d2:88:ad:f2:
                    ca:ba:8c:76:7f:56:ca:99:09:dd:56:e4:75:4e:bb:
                    a6:4f:ad:e8:13:ce:ac:da:fe:65:9a:1a:e1:ff:c2:
                    63:d2:5e:8d:91:31:96:7b:b3:f3:7f:0d:45:99:76:
                    97:3d:dd:b4:58:d6:4a:07:c1:9d:2d:92:26:c1:71:
                    7c:42:6f:40:94:ba:45:0b:08:e9:af:d7:f3:9e:19:
                    77:a9:c2:e0:2a:be:88:34:32:58:3b:49:f9:64:a7:
                    f3:c3:2d:d7:cb:d3:eb:8e:58:27:a0:88:10:fd:db:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:33:81:AC:48:98:D6:3B:BA:4F:2F:D6:0B:1E:73:3F:D0:1E:3A:B1
            X509v3 Authority Key Identifier:
                keyid:B8:09:FF:E7:E9:58:FC:2B:24:3C:E9:AB:B1:DF:FD:7F:ED:FE:99:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B809FFE7E958FC2B243CE9ABB1DFFD7FEDFE99A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BENTnFC8Kq9mt5tmVxyR5RZYwcU4Zhd97KGQWJpRbRPS/0/3138362e3233332e3232342e302f32322d3232203d3e203533323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:1d:26:4c:b3:c8:0a:fb:5d:53:9a:59:b0:f0:41:ed:07:
         b9:bd:e5:96:97:23:0e:01:65:b2:48:5e:a0:57:78:fa:65:e3:
         08:58:43:66:e0:60:4a:e0:74:c6:28:26:2b:58:86:3d:91:a6:
         a0:e9:c1:a2:77:bf:b5:f2:b3:c3:1d:92:ec:bd:cb:6e:5d:18:
         08:5b:4f:19:ba:de:f1:53:6c:24:c6:55:a8:4a:8b:84:84:49:
         ad:d2:aa:ab:6d:89:3e:a7:47:55:8a:80:0a:a7:f2:86:01:8e:
         49:33:c8:f5:d0:5d:a9:8b:56:8b:2d:b0:1f:2f:64:5a:3e:bb:
         6c:0f:72:60:f9:df:19:1f:98:c1:41:31:20:3b:1b:68:7f:81:
         81:6c:bf:f0:bc:90:d8:96:93:85:0e:7a:93:ab:71:0a:cd:58:
         15:00:f4:49:11:5c:20:22:2f:20:c4:5c:94:ec:41:4b:5a:61:
         f9:81:73:f7:da:11:9e:61:5f:56:c1:66:c1:1b:f6:6a:5e:c7:
         dc:4b:af:e2:31:e5:7e:c9:05:fa:04:18:d6:b5:fd:e6:7b:76:
         8e:4d:5a:e2:ac:6c:dd:92:6a:14:e4:f8:22:44:d2:fc:2a:bf:
         5d:38:d2:49:e4:5e:19:8b:f9:f4:c6:74:89:59:9b:3c:5c:44:
         cf:34:62:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org