Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/3136382e3233322e3132302e302f32322d3232203d3e203238323230.roa
File:                     3136382e3233322e3132302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          YoqhlB6G0T26rcckmCmxbZkLoZ3JIqYD/108abbFnoM=
Subject key identifier:   55:0B:B2:50:B3:56:32:59:6A:2F:60:E0:75:20:9F:26:4E:7A:EC:A2
Certificate issuer:       /CN=49A342BBF74F7418B0528D1BF0992AB7F6329760
Certificate serial:       70AE1D926C9324139E2B3DF5D9E4C43359DE605C
Authority key identifier: 49:A3:42:BB:F7:4F:74:18:B0:52:8D:1B:F0:99:2A:B7:F6:32:97:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49A342BBF74F7418B0528D1BF0992AB7F6329760.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/3136382e3233322e3132302e302f32322d3232203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:40:01 +0000
ROA not before:           Thu 06 Oct 2022 17:35:01 +0000
ROA not after:            Thu 05 Oct 2023 17:40:01 +0000
asID:                     28220
IP address blocks:        168.232.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ae:1d:92:6c:93:24:13:9e:2b:3d:f5:d9:e4:c4:33:59:de:60:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49A342BBF74F7418B0528D1BF0992AB7F6329760
        Validity
            Not Before: Oct  6 17:35:01 2022 GMT
            Not After : Oct  5 17:40:01 2023 GMT
        Subject: CN=550BB250B35632596A2F60E075209F264E7AECA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:5a:c9:83:86:65:2f:8b:72:8e:5a:9f:78:
                    8e:99:c9:2b:c0:85:54:9f:90:99:5f:06:64:bd:9e:
                    8c:dd:3f:06:fa:dd:89:f1:e0:fe:36:0a:af:a9:60:
                    5a:98:7e:f0:d6:e0:4e:23:70:84:1b:7c:fd:ba:ac:
                    e8:40:8b:39:fe:47:3e:6c:34:78:98:11:6d:1c:78:
                    a8:d4:a7:11:08:cf:23:8c:01:ee:6e:fc:a8:f8:be:
                    95:33:24:0b:35:bb:e5:c1:ff:d1:a7:e5:a5:b1:f3:
                    71:c8:d4:39:67:8c:25:93:0e:3d:8f:de:69:ad:d4:
                    c3:43:13:fa:3b:a5:7d:e6:9d:ab:22:66:31:41:24:
                    b9:1f:1b:0b:30:1e:64:11:94:72:13:da:60:54:ba:
                    3a:c5:28:3c:55:f6:7f:f8:b8:fa:66:5f:ce:2e:50:
                    58:27:41:39:3b:0d:fb:c4:bf:b7:96:51:82:4d:cf:
                    a9:08:cd:2c:78:92:bc:67:c1:78:1e:02:6f:53:8a:
                    0c:fd:51:bb:a3:2b:d5:41:f2:e9:77:70:b5:f1:bc:
                    c5:e1:d0:ad:73:a6:ce:57:77:6b:75:d8:27:45:2b:
                    02:5d:9a:00:26:40:01:b0:49:fc:ca:10:22:3d:1e:
                    63:5d:35:65:d9:9c:87:91:e1:3d:4c:47:f0:ee:76:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0B:B2:50:B3:56:32:59:6A:2F:60:E0:75:20:9F:26:4E:7A:EC:A2
            X509v3 Authority Key Identifier:
                keyid:49:A3:42:BB:F7:4F:74:18:B0:52:8D:1B:F0:99:2A:B7:F6:32:97:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/49A342BBF74F7418B0528D1BF0992AB7F6329760.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49A342BBF74F7418B0528D1BF0992AB7F6329760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qWu7cnEbXwe7MQuRVSorCfRVBBeQBeDHXvUaqaXvJB2/0/3136382e3233322e3132302e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:8d:8a:c5:23:63:34:2a:69:0d:f5:1b:60:1c:3a:66:2e:f4:
         28:6e:d7:af:ce:23:ee:32:f3:89:2e:ec:4c:af:46:11:55:22:
         21:59:13:c4:85:e0:00:1f:04:6e:78:15:df:26:c0:8c:e5:7c:
         d2:73:f9:fc:91:e2:31:07:05:a7:27:fb:e0:c3:19:d2:a4:a2:
         01:94:c5:5c:79:9c:af:01:17:bb:3d:f8:81:22:e3:b1:eb:04:
         43:4f:05:e9:47:56:69:d4:55:73:d3:70:a8:2f:7b:54:29:43:
         79:6d:61:3c:0b:31:40:63:6e:64:bb:39:6f:f4:cd:75:56:4a:
         12:11:9d:81:fe:ec:2f:b4:aa:3d:2c:a4:e6:e8:70:02:a4:06:
         d3:07:2d:43:00:4d:18:21:16:aa:c7:20:aa:ac:74:7c:42:be:
         a8:08:6b:c4:9a:8e:a7:24:d3:1d:89:a8:df:b4:d8:2e:60:ec:
         03:96:04:1d:3e:f2:aa:9f:e5:42:16:95:82:44:12:6d:14:6c:
         4b:ee:1f:55:a9:be:e6:24:6f:08:00:0a:35:c8:5a:19:94:0e:
         89:8c:12:8a:bc:77:4b:20:40:66:02:91:f2:a9:9f:72:ed:1d:
         81:50:d0:ef:bf:32:d1:a7:f5:fe:40:0d:c6:50:c5:47:26:02:
         5b:6c:bf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org