Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31362e302f32322d3232203d3e203532393437.roa
File:                     3136382e3139372e31362e302f32322d3232203d3e203532393437.roa (raw, json)
Hash identifier:          NAGBIuYlASHxi3jXXd6bSpJTZ6HUUMsYDXl4yy8n9y4=
Subject key identifier:   0F:5F:FB:5B:61:91:C7:C1:21:96:33:16:D3:2D:A2:A8:C5:A5:2E:88
Certificate issuer:       /CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
Certificate serial:       5E776C2755F6C01A329873AC6BDD57AB3B28FB77
Authority key identifier: 49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31362e302f32322d3232203d3e203532393437.roa
Signing time:             Mon 23 May 2022 12:45:06 +0000
ROA not before:           Mon 23 May 2022 12:40:06 +0000
ROA not after:            Mon 22 May 2023 12:45:06 +0000
asID:                     52947
IP address blocks:        168.197.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:77:6c:27:55:f6:c0:1a:32:98:73:ac:6b:dd:57:ab:3b:28:fb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
        Validity
            Not Before: May 23 12:40:06 2022 GMT
            Not After : May 22 12:45:06 2023 GMT
        Subject: CN=0F5FFB5B6191C7C121963316D32DA2A8C5A52E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:35:58:23:e6:16:78:b8:c5:fd:08:a0:4b:
                    2c:2a:de:79:49:c6:ea:70:1a:b9:98:b2:6a:b5:7a:
                    1d:b2:b9:10:2f:1a:c7:38:f2:be:8f:20:fb:ef:8f:
                    b7:b2:2b:ff:a4:3d:48:23:4e:fd:76:6f:89:1b:5e:
                    81:1c:87:3a:45:1c:1a:d6:cd:e2:15:c4:44:32:56:
                    20:67:40:28:a5:70:e8:81:c4:01:4e:f5:de:b5:21:
                    70:6b:1f:b1:1e:00:d9:a8:d0:16:b4:6f:ae:98:90:
                    d2:f3:59:66:0a:cc:ea:82:59:6a:d9:2b:64:e7:14:
                    ce:e8:8c:bb:b9:bb:c8:f8:87:69:43:f9:14:bd:37:
                    27:c5:bd:6b:de:9c:7c:07:31:c8:25:1a:f1:fc:96:
                    6e:5c:95:eb:e6:09:1a:3c:27:aa:28:41:d9:3f:f1:
                    e7:14:1e:ed:8f:53:82:cc:de:87:81:98:e1:b8:52:
                    1d:2d:da:bb:69:07:40:68:f0:70:0d:82:dc:36:4c:
                    9b:a1:48:d5:2e:a1:f0:19:87:e3:20:16:6c:d1:eb:
                    a2:51:c8:3a:3d:29:77:53:bf:72:63:5c:78:8a:01:
                    9b:72:38:68:5e:0a:2f:73:f1:6c:87:bd:45:2e:52:
                    39:c5:ce:fb:86:be:ba:ce:3b:0f:a7:93:cf:ed:48:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5F:FB:5B:61:91:C7:C1:21:96:33:16:D3:2D:A2:A8:C5:A5:2E:88
            X509v3 Authority Key Identifier:
                keyid:49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31362e302f32322d3232203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:5c:01:9b:27:ea:97:96:43:8b:46:05:7c:b3:d7:33:64:d9:
         81:10:f4:4c:5c:70:d2:59:67:be:49:ac:1d:a4:d3:40:d9:70:
         11:0d:0f:9b:fc:c0:21:7a:7e:b2:1a:88:d6:8a:d4:39:2d:05:
         9c:92:79:f7:76:e1:fc:91:55:32:91:a7:a5:e3:8d:b2:cb:be:
         50:2e:6f:59:f4:ab:da:c0:5e:ec:52:95:c0:bd:c2:87:28:19:
         21:fc:a2:fc:33:d0:72:eb:f5:5b:f7:00:5e:08:b9:c7:99:09:
         d9:b7:68:10:d9:6c:ed:a8:35:15:1a:0f:d9:37:df:67:02:46:
         39:77:bc:87:c0:1b:22:9f:53:3c:f5:68:9a:f8:82:69:9e:bf:
         43:1b:c3:22:50:c1:ef:b6:cf:90:f1:4a:66:d4:48:3a:d1:c5:
         59:07:6d:9d:e2:84:5d:4e:6d:3b:d2:a3:69:54:a3:03:d2:82:
         32:9d:7e:99:2a:b5:83:41:c2:33:21:ab:ce:e2:f6:6d:3b:be:
         75:26:0b:6b:d7:60:60:98:2c:8a:ae:f8:d8:53:ca:97:f7:3b:
         ed:9c:a4:98:41:fc:9a:c1:cd:8e:b4:5d:d5:13:ee:2c:35:4b:
         95:f7:3d:29:a3:95:9c:1b:21:82:df:03:77:32:29:37:69:bc:
         1b:98:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org