Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31382e302f32342d3234203d3e203532393437.roa
File:                     3136382e3139372e31382e302f32342d3234203d3e203532393437.roa (raw, json)
Hash identifier:          x9hzLUW9QiEmtmyKJZlFpuRImnc5rnWy4+5YoCYTRrg=
Subject key identifier:   82:0A:B9:20:66:D3:D5:A5:DC:4F:52:E2:C5:9A:90:07:3F:50:7A:06
Certificate issuer:       /CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
Certificate serial:       5F8132A549432F141005F53E75F2B67D5E88D48C
Authority key identifier: 49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31382e302f32342d3234203d3e203532393437.roa
Signing time:             Mon 23 May 2022 12:45:17 +0000
ROA not before:           Mon 23 May 2022 12:40:17 +0000
ROA not after:            Mon 22 May 2023 12:45:17 +0000
asID:                     52947
IP address blocks:        168.197.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:81:32:a5:49:43:2f:14:10:05:f5:3e:75:f2:b6:7d:5e:88:d4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
        Validity
            Not Before: May 23 12:40:17 2022 GMT
            Not After : May 22 12:45:17 2023 GMT
        Subject: CN=820AB92066D3D5A5DC4F52E2C59A90073F507A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:50:af:64:15:83:6a:35:70:cc:2a:85:30:
                    d6:b0:87:d2:35:9f:0c:37:05:98:ff:f0:ab:78:6a:
                    31:22:ef:ee:43:d8:11:29:28:ec:af:bc:08:b7:b9:
                    97:92:bc:a8:a3:72:23:81:1b:95:0d:5a:5e:ac:0b:
                    1b:14:6a:56:a7:12:ce:fc:58:40:a3:b1:20:cd:da:
                    6d:1f:bd:41:52:44:29:35:e7:45:57:2a:b7:88:24:
                    0f:b9:7e:e2:e7:c5:f7:9e:25:fd:e5:f1:fa:0e:ed:
                    9a:c8:91:ea:1d:5e:a1:84:7a:7c:99:1c:d2:03:eb:
                    94:35:7c:af:ea:62:b5:ad:5f:5e:12:4d:d2:f0:7e:
                    8a:e7:51:ea:ed:da:33:cf:41:c0:07:b2:11:69:7f:
                    04:99:31:78:31:f2:a7:86:62:d5:32:05:10:c0:63:
                    c7:11:ab:88:b2:3a:3b:31:cb:49:ed:67:86:66:c0:
                    c9:94:22:4a:bf:5a:9e:30:76:aa:b1:d5:d2:b0:0f:
                    e6:eb:e2:83:fd:eb:b4:17:0a:0e:43:4a:36:48:38:
                    ea:cd:31:7c:19:72:f9:6b:79:ec:f4:6e:c1:d3:d0:
                    b6:31:da:da:fa:c5:f9:be:f1:9c:d0:42:24:6f:2d:
                    0d:bf:f8:cc:66:a5:e4:40:e1:7e:75:60:8c:3e:3f:
                    36:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0A:B9:20:66:D3:D5:A5:DC:4F:52:E2:C5:9A:90:07:3F:50:7A:06
            X509v3 Authority Key Identifier:
                keyid:49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31382e302f32342d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a9:ac:2d:cc:c9:ee:1a:7f:83:5c:a7:d5:de:37:e3:fb:2c:
         1a:ca:76:65:18:36:c6:ab:e7:a4:d4:98:36:eb:af:68:c2:4c:
         5d:cc:4e:06:90:ba:1d:0a:f5:97:36:fa:e1:1b:05:d7:4d:2d:
         8f:3c:6c:5d:91:9a:31:e1:3a:12:5e:78:9a:5e:37:f4:6d:05:
         91:76:6b:ad:4e:bc:fe:24:20:30:05:45:56:98:aa:7a:a2:9b:
         6a:b0:89:d8:07:04:52:a1:16:b1:65:6d:ee:c0:cd:93:ee:60:
         da:95:80:21:81:9b:39:af:3a:29:c3:51:82:61:38:e8:10:d5:
         50:33:a3:7e:a7:ea:05:8b:1b:cd:a6:15:6a:79:9a:89:39:99:
         07:2e:2e:aa:9f:23:24:f9:37:d6:af:05:a6:d8:6c:82:49:69:
         b8:fb:cb:8b:6e:3d:d9:1d:9f:2a:a9:e1:0e:5d:22:77:89:08:
         84:48:bd:02:ac:fe:94:b6:22:39:58:d9:19:30:0b:e7:6a:a0:
         07:f3:53:7f:b9:5c:1a:33:44:a7:f4:a6:f5:8c:08:78:34:ec:
         24:67:b1:0a:0e:17:3c:fe:f8:10:f5:43:3b:82:fd:55:66:3e:
         c0:9e:31:7f:ca:f1:9b:c7:c9:ca:58:99:53:9a:2a:94:40:77:
         68:f0:d8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:24 2025 by rpki-client