Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/3136382e3233322e3132302e302f32322d3232203d3e20323634393435.roa
File:                     3136382e3233322e3132302e302f32322d3232203d3e20323634393435.roa (raw, json)
Hash identifier:          MUTzO//Z1KMrf+T1VvWkBElemEGs2WQ8ooHUJ8xhkjk=
Subject key identifier:   25:BA:45:CB:F6:B9:8C:E7:D4:A9:0F:DB:A2:36:59:82:7F:ED:BA:AD
Certificate issuer:       /CN=49A342BBF74F7418B0528D1BF0992AB7F6329760
Certificate serial:       60A00B4FC1E43BD8ABEFEDC37E56D0B7DAADFCBD
Authority key identifier: 49:A3:42:BB:F7:4F:74:18:B0:52:8D:1B:F0:99:2A:B7:F6:32:97:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49A342BBF74F7418B0528D1BF0992AB7F6329760.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/3136382e3233322e3132302e302f32322d3232203d3e20323634393435.roa
Signing time:             Fri 16 Dec 2022 19:55:40 +0000
ROA not before:           Fri 16 Dec 2022 19:50:40 +0000
ROA not after:            Fri 15 Dec 2023 19:55:40 +0000
asID:                     264945
IP address blocks:        168.232.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a0:0b:4f:c1:e4:3b:d8:ab:ef:ed:c3:7e:56:d0:b7:da:ad:fc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49A342BBF74F7418B0528D1BF0992AB7F6329760
        Validity
            Not Before: Dec 16 19:50:40 2022 GMT
            Not After : Dec 15 19:55:40 2023 GMT
        Subject: CN=25BA45CBF6B98CE7D4A90FDBA23659827FEDBAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:6e:3c:00:ed:ed:d9:98:ec:71:7c:94:6b:
                    48:9e:c4:79:3b:f7:aa:e7:27:84:ed:e5:7f:c5:63:
                    e6:f7:4b:67:af:e4:1e:fc:74:e4:69:b0:78:11:b4:
                    db:c9:6c:4b:b8:ed:a8:4d:f1:ef:49:ce:f0:ae:81:
                    ce:43:0c:92:6a:b6:4a:cd:a3:8a:11:01:3a:21:63:
                    42:86:41:4a:72:b0:de:20:9e:3d:6f:db:a8:b7:2b:
                    30:d3:b5:d0:23:84:8b:50:71:9a:26:ce:41:09:e3:
                    be:0b:22:3e:d5:3a:01:63:72:eb:e6:d5:d8:c6:48:
                    80:50:25:b4:01:06:c8:ac:55:29:da:94:93:63:0c:
                    02:be:7c:ac:87:8c:31:64:ac:cc:c0:3a:c4:78:d1:
                    55:33:11:77:ce:5c:a3:65:b5:36:b8:ec:a9:4e:01:
                    2a:0e:d6:1f:09:43:ff:c5:5a:f9:09:f3:17:e4:e7:
                    ea:cd:d7:5c:67:6c:92:df:c6:f8:a0:91:d5:d0:92:
                    54:f8:f7:e8:5c:fe:87:5b:02:81:3e:4e:d6:b6:e8:
                    9a:09:f2:2b:76:8c:7e:80:84:09:fa:42:12:f2:d6:
                    75:f8:21:8f:b0:40:71:16:4a:b0:58:8c:67:b9:12:
                    cd:2d:39:9c:04:28:e3:1a:38:d4:d9:d3:ee:68:58:
                    31:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BA:45:CB:F6:B9:8C:E7:D4:A9:0F:DB:A2:36:59:82:7F:ED:BA:AD
            X509v3 Authority Key Identifier:
                keyid:49:A3:42:BB:F7:4F:74:18:B0:52:8D:1B:F0:99:2A:B7:F6:32:97:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/49A342BBF74F7418B0528D1BF0992AB7F6329760.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49A342BBF74F7418B0528D1BF0992AB7F6329760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/3136382e3233322e3132302e302f32322d3232203d3e20323634393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:f5:b5:d8:7f:8c:eb:7b:56:c8:05:ba:75:4a:8e:73:d5:3d:
         a9:a7:91:ee:95:dc:02:aa:a0:80:a0:46:74:f3:b0:89:0b:8c:
         de:83:98:8a:73:99:9b:77:cd:81:1e:5d:b4:0e:aa:07:1f:9a:
         83:c9:30:68:ff:0e:b9:86:bc:18:f5:76:db:9a:87:52:4f:95:
         cb:79:3d:1f:fe:d1:6f:ab:76:f7:6b:ce:ae:fd:24:06:32:11:
         3c:f1:7e:68:43:e1:13:99:5e:7b:cf:8a:0b:5a:2a:37:1e:56:
         46:f8:ea:af:d6:d3:48:11:64:6d:c7:d4:cf:b0:43:5e:61:54:
         cc:83:5f:db:e2:7e:8b:81:a5:e5:17:a4:94:13:e7:de:85:39:
         2b:bc:61:1a:d7:a6:a1:97:0c:67:23:52:c1:ee:29:92:df:56:
         1f:cf:6a:da:8e:a3:78:ef:e1:fe:a5:92:d6:0d:9f:15:75:63:
         b2:88:20:b7:ba:9e:df:38:21:01:00:cb:54:59:03:8d:cd:23:
         9b:cd:b2:9f:0e:5e:ea:d3:e7:7f:45:69:cd:fa:57:7f:7e:b9:
         7a:1c:6b:30:39:c8:31:36:47:21:5f:42:0d:80:e5:b2:70:1c:
         74:2d:83:51:a5:43:8c:21:f3:4d:88:cd:72:63:d8:75:06:81:
         76:04:29:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org