Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31372e302f32342d3234203d3e203532393437.roa
File:                     3136382e3139372e31372e302f32342d3234203d3e203532393437.roa (raw, json)
Hash identifier:          YSg0SAZYhNQdMf3NRb1chaXTbMzNf1NCKCr4NrAra+4=
Subject key identifier:   F4:54:95:95:78:21:10:54:A9:99:4F:AD:D9:0A:B2:AF:C2:35:A7:95
Certificate issuer:       /CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
Certificate serial:       29E2AE9F429279E91E6CEB50695B00B6A64033C1
Authority key identifier: 49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31372e302f32342d3234203d3e203532393437.roa
Signing time:             Mon 23 May 2022 12:45:14 +0000
ROA not before:           Mon 23 May 2022 12:40:14 +0000
ROA not after:            Mon 22 May 2023 12:45:14 +0000
asID:                     52947
IP address blocks:        168.197.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e2:ae:9f:42:92:79:e9:1e:6c:eb:50:69:5b:00:b6:a6:40:33:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
        Validity
            Not Before: May 23 12:40:14 2022 GMT
            Not After : May 22 12:45:14 2023 GMT
        Subject: CN=F454959578211054A9994FADD90AB2AFC235A795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:22:a1:71:85:00:1d:be:7a:8d:fa:39:49:9a:
                    54:d8:52:60:25:c3:15:3d:fd:13:78:50:69:fc:e0:
                    86:5e:05:1d:c7:84:fa:9a:a8:a3:9a:7f:c0:8b:23:
                    de:3f:03:65:91:24:12:dc:a2:7e:57:9d:f4:e0:13:
                    24:54:45:9f:6e:f8:89:33:e7:bd:fd:9f:19:30:ac:
                    33:77:7d:7c:f2:c0:f0:e4:1b:a4:90:84:e1:ae:27:
                    46:83:70:dd:25:a6:e8:03:74:c9:7b:3d:13:8e:34:
                    2c:24:ad:16:2d:bf:29:c4:8a:27:55:d7:d0:1d:54:
                    68:9f:40:e3:44:7f:de:c0:72:5d:04:62:c8:a3:fb:
                    c7:33:85:4f:ee:ab:18:be:10:d5:0b:44:f2:01:45:
                    b3:a9:35:31:0f:31:f1:e1:b5:48:bd:14:a8:6c:90:
                    06:64:57:24:df:16:a7:5c:1d:a0:a4:fb:78:8a:70:
                    9f:e2:e2:7c:41:a8:73:5b:71:cc:68:a8:ef:5e:82:
                    12:85:19:20:7a:c9:67:7b:cc:5a:cb:a2:12:ec:bc:
                    f3:d6:a1:f7:9f:ee:06:2a:9b:3c:06:66:fd:ee:4e:
                    a2:60:50:5a:d5:29:4e:74:bf:f2:6c:da:f6:dc:4d:
                    12:ae:30:cc:70:71:b8:8f:95:56:eb:99:95:58:c7:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:54:95:95:78:21:10:54:A9:99:4F:AD:D9:0A:B2:AF:C2:35:A7:95
            X509v3 Authority Key Identifier:
                keyid:49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31372e302f32342d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:d0:f0:c3:ce:0c:fc:84:4e:5c:fc:51:78:0b:c6:99:d9:f7:
         76:05:3f:2d:e0:18:b3:f6:69:09:45:2c:3f:2a:a9:fb:1d:01:
         2d:5f:cc:32:1b:0a:75:8b:96:ed:e2:f2:b6:48:36:33:64:7e:
         44:76:de:38:83:53:bd:50:40:47:8e:9a:70:ce:f1:9a:f3:9d:
         19:0d:23:2c:d2:2c:87:e3:fd:c3:0a:00:5a:98:db:59:5b:e7:
         d7:7e:07:8a:29:08:e7:ce:4e:a5:58:7a:b3:98:f7:71:ad:62:
         1a:11:5e:0a:be:68:ed:3d:d6:9b:66:01:97:04:33:35:da:36:
         37:a6:a3:73:b8:00:55:1a:08:3d:7a:59:24:c1:c6:e1:53:ca:
         8f:b8:38:26:5f:4d:01:33:f3:5f:d1:61:77:f6:8d:00:2a:d5:
         b1:2a:87:1e:91:a6:c0:79:a7:c8:42:dc:84:39:fa:60:96:ec:
         26:f7:d7:f5:e5:da:dc:66:62:4b:b6:e6:04:ff:bb:d8:fa:ee:
         8b:e6:11:a6:d4:1c:2d:19:e8:bb:77:bc:f3:c4:c1:bb:d5:98:
         7b:22:03:ba:fd:29:1c:3e:c2:3b:59:d8:34:c1:39:ef:b9:e3:
         6c:ff:12:fd:26:4e:47:e7:e8:b7:72:ed:0d:82:c7:bb:33:2f:
         a9:f0:b8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org