Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31362e302f32332d3233203d3e203532393437.roa
File:                     3136382e3139372e31362e302f32332d3233203d3e203532393437.roa (raw, json)
Hash identifier:          YTSH8ItKTA8powv0FPMqIbJmDjI3V/Jsth56Ri6cdoM=
Subject key identifier:   EF:7C:98:01:C3:91:24:FA:F5:0B:68:13:DD:67:C0:BE:E8:4C:77:76
Certificate issuer:       /CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
Certificate serial:       4F630AB629969AC04C9D7475E53DD91EF81215C6
Authority key identifier: 49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31362e302f32332d3233203d3e203532393437.roa
Signing time:             Tue 24 May 2022 18:56:37 +0000
ROA not before:           Tue 24 May 2022 18:51:37 +0000
ROA not after:            Tue 23 May 2023 18:56:37 +0000
asID:                     52947
IP address blocks:        168.197.16.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:63:0a:b6:29:96:9a:c0:4c:9d:74:75:e5:3d:d9:1e:f8:12:15:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
        Validity
            Not Before: May 24 18:51:37 2022 GMT
            Not After : May 23 18:56:37 2023 GMT
        Subject: CN=EF7C9801C39124FAF50B6813DD67C0BEE84C7776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:52:aa:af:eb:f8:4f:72:7e:d9:e1:59:7e:
                    74:e2:13:cd:21:15:7f:c9:43:46:93:c5:33:ec:d6:
                    61:de:45:11:9a:71:7f:1f:04:cc:50:93:a2:b9:42:
                    56:ce:5e:ef:27:33:99:b2:24:03:71:83:dc:9c:84:
                    11:88:ad:14:cb:88:31:eb:8c:61:2a:da:31:4d:99:
                    9f:ea:be:49:6e:04:2b:43:f6:5a:51:02:96:63:e4:
                    b3:3c:86:c8:d3:5a:cc:19:bc:13:32:8d:69:3e:a2:
                    5d:cf:05:de:b4:c3:8b:b7:8e:20:a6:03:34:77:f4:
                    04:fc:b3:1d:d0:b6:98:c1:b0:fd:48:6b:61:05:52:
                    36:65:eb:42:d4:bd:6e:55:3d:ce:cb:44:62:41:fe:
                    75:90:9d:83:02:13:30:e6:5b:76:11:dc:eb:e0:d1:
                    44:0e:13:01:08:f3:4e:e3:76:f7:38:5b:bf:6a:79:
                    1c:1b:48:5f:31:05:bc:85:0b:7b:4b:3b:ad:ba:7a:
                    8b:5c:3a:47:74:f1:22:c4:df:20:2f:dc:97:e7:6e:
                    7c:7f:cb:7e:ba:04:82:f1:d3:d8:ef:88:2d:bf:02:
                    d6:81:cc:7a:1a:7e:d9:19:f9:45:67:aa:c8:fe:23:
                    dc:de:6f:b5:c5:d8:e1:0b:61:bb:9e:0f:c1:a8:0d:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7C:98:01:C3:91:24:FA:F5:0B:68:13:DD:67:C0:BE:E8:4C:77:76
            X509v3 Authority Key Identifier:
                keyid:49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31362e302f32332d3233203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:10:91:97:7d:b7:83:d0:3b:df:a6:e9:40:c9:7c:99:b7:df:
         31:ac:ab:cb:23:08:92:fd:3e:8f:c0:00:fe:70:54:ce:33:4f:
         7a:36:30:9d:84:ab:8b:73:36:fa:49:ad:0e:da:93:91:b7:6b:
         7b:cc:a9:1c:73:9d:48:6a:2f:4b:9c:18:36:91:ce:a6:fb:89:
         16:b4:34:bc:3d:df:8c:df:74:1e:9a:5b:f2:3d:f1:1c:b0:b5:
         28:39:ff:b5:3f:d7:27:b8:bd:55:0b:1d:9c:54:14:4d:3c:e4:
         2a:c6:5a:e1:af:bb:68:06:6d:f5:d3:c4:4c:fa:d7:45:44:5a:
         be:6b:38:e9:20:f0:33:d7:e8:19:02:61:c4:9e:d6:83:d7:6e:
         2f:4f:9a:1a:6d:fd:89:6f:22:43:b2:c5:f5:23:55:a2:e9:2c:
         d0:d3:a5:4a:7d:fc:68:50:a9:7f:1a:70:ff:5d:2d:e1:c5:02:
         2d:74:27:7a:53:d4:cc:c9:ec:2a:0e:76:5d:9d:9d:19:df:8b:
         a6:c3:44:cb:27:fc:07:63:b7:8d:51:99:51:d8:bb:fb:8e:de:
         ed:b9:61:37:9a:30:13:ff:35:94:b4:a6:c2:c5:11:db:cd:a6:
         77:bf:a1:8f:13:03:8a:7d:bf:7b:ab:31:27:7b:5c:99:4a:d6:
         bb:32:78:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:20 2025 by rpki-client