Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32322d3232203d3e20323730343833.roa
File:                     3230302e37332e3231362e302f32322d3232203d3e20323730343833.roa (raw, json)
Hash identifier:          GWI1/9GsrCVDU4jhb616/f+leeSDSC1Kop0ybLidKz8=
Subject key identifier:   02:8A:2C:CE:B1:3E:2E:FC:B5:AE:D4:D7:89:91:E9:FF:DE:06:DC:D9
Certificate issuer:       /CN=F085138718820792611D32A989F42838906CE373
Certificate serial:       4FF6818EA28672DEB77E644406EA21A335F2860E
Authority key identifier: F0:85:13:87:18:82:07:92:61:1D:32:A9:89:F4:28:38:90:6C:E3:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F085138718820792611D32A989F42838906CE373.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32322d3232203d3e20323730343833.roa
Signing time:             Tue 18 Jan 2022 18:46:32 +0000
ROA not before:           Tue 18 Jan 2022 18:41:32 +0000
ROA not after:            Tue 17 Jan 2023 18:46:32 +0000
asID:                     270483
IP address blocks:        200.73.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f6:81:8e:a2:86:72:de:b7:7e:64:44:06:ea:21:a3:35:f2:86:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F085138718820792611D32A989F42838906CE373
        Validity
            Not Before: Jan 18 18:41:32 2022 GMT
            Not After : Jan 17 18:46:32 2023 GMT
        Subject: CN=028A2CCEB13E2EFCB5AED4D78991E9FFDE06DCD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:c6:b3:c6:ad:58:f6:82:cd:dd:99:8d:0d:
                    d4:e8:b0:9b:a3:fa:ea:53:b9:92:70:86:eb:c9:0a:
                    7d:6c:35:bd:82:ef:5c:d6:d5:e5:ac:5c:cc:9e:16:
                    b0:4a:98:60:f8:fa:33:33:d5:ad:13:b0:f0:60:e1:
                    21:14:f1:bd:59:86:33:1f:31:5c:71:ac:e6:42:3a:
                    05:99:b1:d6:6b:90:6b:5a:61:d5:3c:8a:f4:75:4c:
                    3a:8e:55:39:86:4b:5a:1c:65:f3:ca:0f:4f:f7:86:
                    03:4f:e3:53:2a:2a:2d:03:67:26:b6:10:da:a3:7b:
                    83:83:26:69:17:cd:95:cb:63:91:fa:02:0b:d8:70:
                    65:9d:34:19:29:cd:d5:8e:89:e6:18:7a:22:a7:1d:
                    c3:42:3a:b0:de:87:87:72:1b:b3:61:22:fe:ae:89:
                    11:7a:17:fd:84:f2:5a:fa:50:66:de:59:5c:5a:44:
                    80:c2:25:1b:aa:6e:2e:ff:10:d7:85:48:e5:dd:de:
                    5f:db:f2:41:47:c4:aa:2f:fe:f7:e4:ec:83:27:a9:
                    9e:37:6b:93:69:4d:0b:7f:97:10:bb:5c:ad:ca:eb:
                    50:41:67:e8:46:07:67:c7:71:27:4d:49:7a:7a:80:
                    c1:f2:f1:22:86:cc:ec:a6:e7:16:0c:fd:82:fc:f7:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8A:2C:CE:B1:3E:2E:FC:B5:AE:D4:D7:89:91:E9:FF:DE:06:DC:D9
            X509v3 Authority Key Identifier:
                keyid:F0:85:13:87:18:82:07:92:61:1D:32:A9:89:F4:28:38:90:6C:E3:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/F085138718820792611D32A989F42838906CE373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F085138718820792611D32A989F42838906CE373.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32322d3232203d3e20323730343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:47:ef:54:c4:ad:10:3a:a3:39:93:10:f2:25:6b:78:48:a6:
         63:e2:38:64:40:9d:c4:26:82:b5:da:c7:fb:d2:e2:31:cc:72:
         3c:72:99:84:55:51:59:65:49:60:18:bd:c5:44:c0:5b:b5:08:
         a6:07:a2:e1:c2:31:05:f0:f5:e4:4a:bd:3a:54:e5:f6:a1:e8:
         83:cb:6f:fe:78:7e:4a:36:92:53:c7:19:cb:69:fa:bf:b6:90:
         67:3a:27:30:da:e0:bb:75:84:99:b3:6d:4c:33:f6:14:cb:4a:
         41:29:d8:f7:87:da:3f:c9:bf:00:76:2c:72:a6:7e:2b:84:04:
         4b:be:72:d9:35:d4:4b:1b:07:36:f9:70:f1:df:1b:d0:67:fd:
         da:d7:2e:ce:c0:95:e3:7f:6b:39:20:24:97:63:07:88:bf:39:
         f7:61:ec:47:d3:e8:cb:cb:44:3c:36:e0:b7:97:4b:d9:cb:91:
         79:16:17:4b:72:16:94:75:0b:71:03:50:8f:ac:f3:48:21:5a:
         58:a3:f8:eb:27:53:93:bb:28:8a:60:ad:34:45:10:e2:c0:35:
         c4:49:f3:da:09:40:3d:89:72:d4:93:fe:3d:35:20:20:c7:cc:
         6f:89:bc:b6:43:e4:58:73:7e:6b:f5:c0:1d:9c:9c:86:8e:a8:
         19:b5:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org