Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32332d3233203d3e20323634323937.roa
File:                     3136382e3139372e3232302e302f32332d3233203d3e20323634323937.roa (raw, json)
Hash identifier:          UqqEnyiF74BXrqGSvLLF6PlJQrfxSDJL6Gcu12G2TsM=
Subject key identifier:   53:2F:C1:97:9C:05:74:31:7C:5E:DF:56:F0:A1:60:F0:D8:4F:F3:68
Certificate issuer:       /CN=29C49981A06E753E7D8BA04379CF1A6C4CE85950
Certificate serial:       40AA29C4381D15BCF94FD1F9C30D598C60431AEB
Authority key identifier: 29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32332d3233203d3e20323634323937.roa
Signing time:             Thu 10 Nov 2022 16:27:03 +0000
ROA not before:           Thu 10 Nov 2022 16:22:03 +0000
ROA not after:            Thu 09 Nov 2023 16:27:03 +0000
asID:                     264297
IP address blocks:        168.197.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:aa:29:c4:38:1d:15:bc:f9:4f:d1:f9:c3:0d:59:8c:60:43:1a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29C49981A06E753E7D8BA04379CF1A6C4CE85950
        Validity
            Not Before: Nov 10 16:22:03 2022 GMT
            Not After : Nov  9 16:27:03 2023 GMT
        Subject: CN=532FC1979C0574317C5EDF56F0A160F0D84FF368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:69:2f:71:c7:64:a5:f5:3a:f3:d1:b1:d5:
                    2a:22:5c:76:0c:f1:9a:8e:c6:72:b5:87:a2:5b:6f:
                    2d:53:96:55:d7:de:cd:1b:db:2a:7d:5a:e9:1e:ca:
                    f2:2c:3f:19:49:8e:05:3e:f8:fb:c1:0e:27:17:86:
                    92:a5:02:5a:4c:78:0f:13:8a:96:7c:e1:01:ce:02:
                    7a:24:f1:10:e7:82:88:80:11:cc:e3:17:31:f2:eb:
                    18:d0:bb:ae:e6:be:7e:e3:5d:c0:35:0c:2a:01:21:
                    50:3d:8a:72:60:ee:bc:a5:73:5e:51:a8:fa:c3:53:
                    4c:ef:c9:60:d0:89:1e:dc:b2:4e:02:9f:c3:08:a2:
                    13:4e:a5:cd:15:ea:0b:93:04:68:a1:00:10:59:bb:
                    71:cc:76:07:d4:9f:83:ff:a4:3d:f3:35:12:b2:15:
                    5a:0c:99:61:9b:3a:8d:37:31:26:f5:41:77:6f:5e:
                    27:bc:4e:ed:92:23:79:29:2d:17:a6:2b:70:ee:18:
                    08:52:de:60:eb:fd:8e:ac:13:05:69:48:f5:28:d7:
                    c1:29:74:03:d3:d6:24:ea:c9:83:9d:b0:97:f0:30:
                    fb:f6:47:f6:12:06:e7:c4:41:a9:c6:bb:92:f8:56:
                    9b:14:45:ba:6f:d8:78:78:f7:f2:38:b1:eb:66:6e:
                    aa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:C1:97:9C:05:74:31:7C:5E:DF:56:F0:A1:60:F0:D8:4F:F3:68
            X509v3 Authority Key Identifier:
                keyid:29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32332d3233203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:a4:4e:3f:b9:fd:02:b5:11:39:91:27:62:59:e7:34:3c:fc:
         c5:24:54:d2:56:75:e0:2b:8d:1b:aa:31:4c:2c:eb:b5:d3:f0:
         74:56:0b:ac:4a:41:3c:d3:00:3c:11:c4:d7:09:32:fa:95:ee:
         ca:02:93:07:31:f5:4d:59:8d:19:ac:ef:8a:ef:b0:eb:d3:cc:
         a1:2e:38:da:bb:f2:96:42:43:0d:94:4f:d9:9b:46:38:f5:fc:
         09:ae:d9:1f:df:41:88:4e:b5:d2:7e:20:85:42:9e:1d:1f:53:
         bb:82:de:f4:0a:52:55:41:b1:41:f0:94:ee:e1:11:07:01:9d:
         d1:7e:86:54:70:bc:43:5d:f6:c9:43:e0:98:1f:a3:1d:a9:e0:
         00:61:66:40:0e:e1:df:24:bc:80:77:e6:c2:63:41:ba:30:43:
         cd:0a:44:48:b0:ab:73:37:c2:ad:97:59:f9:5d:96:61:93:0d:
         f0:2d:74:0b:d4:da:86:e9:57:dc:db:90:bb:91:22:21:63:4e:
         07:7f:72:68:de:4d:71:6e:60:72:91:d0:03:74:f1:65:75:39:
         7c:20:95:2e:b0:bc:e6:21:14:1a:34:07:de:41:05:fc:09:42:
         21:e8:a1:b7:e0:f6:c2:bf:ab:b9:d6:9e:2e:eb:4d:fe:19:19:
         b0:4a:2a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org