Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232312e302f32342d3234203d3e20323634323937.roa
File:                     3136382e3139372e3232312e302f32342d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          4DUQTlGfPgs95GLFhmfHp4EQBJ3S/WfVV5DZDZoz+rg=
Subject key identifier:   07:90:18:AF:21:2C:36:6D:52:1C:A7:E0:1B:9E:9F:74:46:8B:A3:D2
Certificate issuer:       /CN=29C49981A06E753E7D8BA04379CF1A6C4CE85950
Certificate serial:       7B657119890DD2FF1FAABF9DE5EA78658A552064
Authority key identifier: 29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232312e302f32342d3234203d3e20323634323937.roa
Signing time:             Thu 10 Nov 2022 16:27:02 +0000
ROA not before:           Thu 10 Nov 2022 16:22:02 +0000
ROA not after:            Thu 09 Nov 2023 16:27:02 +0000
asID:                     264297
IP address blocks:        168.197.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:65:71:19:89:0d:d2:ff:1f:aa:bf:9d:e5:ea:78:65:8a:55:20:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29C49981A06E753E7D8BA04379CF1A6C4CE85950
        Validity
            Not Before: Nov 10 16:22:02 2022 GMT
            Not After : Nov  9 16:27:02 2023 GMT
        Subject: CN=079018AF212C366D521CA7E01B9E9F74468BA3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:2f:1a:81:84:e9:62:a1:c0:a7:8d:8a:fc:
                    e5:06:6d:be:0f:23:67:28:55:c5:08:ce:54:73:47:
                    57:b3:94:56:b9:de:c5:2a:94:a9:61:d1:c2:06:1c:
                    4f:5b:30:77:0e:2b:ca:32:c0:8e:81:38:00:e6:5f:
                    15:a5:1b:5f:d9:0d:10:49:23:c5:4b:2c:52:ee:16:
                    c8:f9:a6:c9:ee:ea:24:36:73:6c:48:58:a9:c0:a3:
                    e3:7a:a0:65:03:bc:ec:c7:ef:d5:f3:c8:f5:20:b1:
                    42:c6:13:65:ec:4a:0f:39:79:44:ff:f7:e9:32:8c:
                    4c:07:62:99:a5:13:1a:40:1d:80:8d:41:11:e8:14:
                    04:42:4e:1f:d9:22:49:90:95:27:3e:50:32:14:f5:
                    6b:64:de:a1:f4:de:5d:fa:b1:74:90:37:53:68:9d:
                    8d:87:08:d2:af:5e:75:c0:96:0b:ca:69:95:ae:c0:
                    7c:ef:4d:29:13:67:2c:f2:7b:46:3d:8a:70:dd:2b:
                    ac:18:09:31:e7:47:04:4d:2a:65:13:71:15:0f:28:
                    fc:5a:0d:54:d8:51:10:2d:78:06:63:a3:f5:e2:7e:
                    71:23:cf:3d:e3:a4:fc:b2:a7:7e:72:65:01:84:e2:
                    c1:88:12:03:af:ef:df:3f:16:e0:10:2d:83:71:64:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:90:18:AF:21:2C:36:6D:52:1C:A7:E0:1B:9E:9F:74:46:8B:A3:D2
            X509v3 Authority Key Identifier:
                keyid:29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232312e302f32342d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:32:18:3f:be:71:bd:03:ca:e2:7d:fc:0d:2d:07:da:e5:8f:
         f5:ee:7a:f7:a5:db:74:d2:16:20:45:54:5c:9a:4e:bd:e9:ff:
         a2:04:09:d9:b6:71:e4:40:69:0d:14:ce:9d:16:f7:5a:b0:42:
         8f:d1:db:e3:f4:2a:f3:d9:51:6c:e0:d6:c9:b7:ac:55:6d:27:
         20:c4:91:3b:6f:3b:4f:15:bb:58:f6:af:04:f1:76:11:a0:74:
         b6:e6:d1:f4:6b:f2:00:ba:2d:2a:e4:52:3d:c5:43:09:32:c3:
         64:00:ca:fd:8f:08:90:f1:6d:4b:2f:a2:61:8b:9f:ae:71:ed:
         58:08:c5:66:67:21:d2:58:4d:6c:9d:5e:da:05:fc:83:c0:3f:
         98:46:ba:14:32:1c:e9:db:13:4f:ef:cd:e4:85:88:a1:13:66:
         70:a8:6e:fa:f8:b2:7d:38:28:9f:37:da:4d:a0:89:9e:cc:75:
         6b:34:41:fd:b5:f1:a4:f3:fa:85:d4:e4:6b:5e:90:67:bc:36:
         ba:a4:80:5b:96:a6:d7:42:7e:c2:34:84:b5:74:eb:1c:d5:c4:
         e7:b5:c7:f3:50:03:28:8f:d5:39:2d:57:3c:14:25:d7:4a:32:
         7b:43:a5:ae:9e:3c:0a:40:d6:99:e4:ec:41:7f:8b:64:09:ac:
         87:79:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org