Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32342d3234203d3e20323634323937.roa
File:                     3136382e3139372e3232302e302f32342d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          AiETtVRbJd0vCod6XK0xvESMXQAZ4ChYkg+O5Qid3l4=
Subject key identifier:   6E:22:3D:4F:E1:D5:A1:DF:7D:31:64:72:93:57:A1:D8:C9:10:35:3A
Certificate issuer:       /CN=29C49981A06E753E7D8BA04379CF1A6C4CE85950
Certificate serial:       08F4542D77014A20AFAD420951434832F2E15E6D
Authority key identifier: 29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32342d3234203d3e20323634323937.roa
Signing time:             Thu 10 Nov 2022 16:27:03 +0000
ROA not before:           Thu 10 Nov 2022 16:22:03 +0000
ROA not after:            Thu 09 Nov 2023 16:27:03 +0000
asID:                     264297
IP address blocks:        168.197.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f4:54:2d:77:01:4a:20:af:ad:42:09:51:43:48:32:f2:e1:5e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29C49981A06E753E7D8BA04379CF1A6C4CE85950
        Validity
            Not Before: Nov 10 16:22:03 2022 GMT
            Not After : Nov  9 16:27:03 2023 GMT
        Subject: CN=6E223D4FE1D5A1DF7D3164729357A1D8C910353A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:0f:00:d2:53:ac:49:48:26:8a:2b:5d:54:
                    5c:05:5a:03:a0:c7:2c:b5:34:1d:b7:76:1a:e3:57:
                    40:4a:31:1b:7e:5c:a5:d9:28:48:1c:04:d6:dc:ef:
                    58:46:9c:96:99:02:ac:96:06:3d:66:e8:b3:6b:aa:
                    79:82:bf:01:52:c8:63:f6:d6:f9:1a:43:31:bd:90:
                    f4:13:af:11:73:0b:22:45:d7:80:19:37:29:c7:7f:
                    0d:cf:ce:13:c8:4a:62:1b:69:00:a9:d7:d1:51:25:
                    af:d6:26:61:10:23:b3:15:70:e1:43:6a:f5:f5:46:
                    c4:3c:b4:92:1d:8c:2d:12:78:86:3b:4c:da:74:00:
                    fa:0d:3a:43:1f:55:35:d0:6c:52:fd:f2:49:f4:f3:
                    3c:73:30:89:17:0e:06:7f:02:54:ed:f1:15:fa:11:
                    1a:81:3b:9f:82:80:b2:4d:90:f3:43:34:ca:c6:45:
                    8b:3c:a8:cb:59:91:1f:30:d9:2e:95:c5:7f:b9:1c:
                    ad:9e:49:35:7c:79:7b:ab:42:23:3d:65:b8:59:be:
                    12:3e:bd:0c:c3:fa:c2:88:fb:d8:38:41:6b:db:01:
                    fe:9d:35:78:99:ed:4e:e7:e8:41:85:02:b3:0a:f9:
                    aa:ab:fa:27:26:10:fc:15:a4:99:1a:0c:ce:2b:ce:
                    f9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:22:3D:4F:E1:D5:A1:DF:7D:31:64:72:93:57:A1:D8:C9:10:35:3A
            X509v3 Authority Key Identifier:
                keyid:29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32342d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:75:c2:7e:07:92:0c:f9:7d:fd:ca:79:42:71:29:0e:99:
         48:e7:b6:52:20:3f:73:0f:74:74:5d:34:b3:4b:76:72:11:9c:
         fe:bf:4d:cc:d2:2b:f9:30:77:0b:a7:cd:f0:64:8c:c9:74:ee:
         ac:74:cb:0a:bc:4c:eb:33:ab:81:b0:cb:f7:45:60:d0:f6:e1:
         3e:c9:60:c4:46:bd:9c:8f:5b:23:79:d8:b7:03:36:ee:45:4e:
         bb:0d:76:59:1c:8f:ed:97:de:5b:da:1b:22:f2:4e:80:a2:97:
         68:e7:1a:eb:b7:1b:72:e3:49:57:20:d5:01:af:ec:b5:fc:17:
         5a:3a:8c:17:af:2f:25:4c:1a:a6:2b:1e:b3:35:3a:3c:e5:ec:
         a2:7d:2b:3c:39:c4:3d:8d:81:49:4f:ae:e0:e9:e9:8d:bd:39:
         d4:3d:e4:15:ef:58:58:0b:13:da:25:30:11:00:d8:88:bc:ae:
         91:78:47:d8:e5:59:b1:30:9e:86:e6:46:35:ec:75:3d:fc:30:
         65:39:ed:af:98:9b:e1:b9:7b:b0:01:a1:6d:e4:dd:5c:c6:c1:
         74:c0:6e:94:a9:70:1a:8d:17:46:62:f6:6a:77:cd:ba:bb:d3:
         53:65:55:d3:3f:a6:bc:d5:67:8e:7f:f1:29:8a:ae:e9:08:8d:
         2d:8b:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org