Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31392e302f32342d3234203d3e203532393437.roa
File:                     3136382e3139372e31392e302f32342d3234203d3e203532393437.roa (raw, json)
Hash identifier:          uewuRA2bCQz1Nhi2KeQ5u2wG+PEymAQaqsoIHw3qu34=
Subject key identifier:   DC:86:91:3F:88:3A:38:61:D7:8A:4F:D9:A6:5D:2F:7B:EC:6F:85:63
Certificate issuer:       /CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
Certificate serial:       1B6D7F8BE1F3C77C9B1252152537F551E2CC5B9D
Authority key identifier: 49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31392e302f32342d3234203d3e203532393437.roa
Signing time:             Mon 23 May 2022 12:45:20 +0000
ROA not before:           Mon 23 May 2022 12:40:20 +0000
ROA not after:            Mon 22 May 2023 12:45:20 +0000
asID:                     52947
IP address blocks:        168.197.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6d:7f:8b:e1:f3:c7:7c:9b:12:52:15:25:37:f5:51:e2:cc:5b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
        Validity
            Not Before: May 23 12:40:20 2022 GMT
            Not After : May 22 12:45:20 2023 GMT
        Subject: CN=DC86913F883A3861D78A4FD9A65D2F7BEC6F8563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:2a:0e:64:ed:97:79:9c:ab:03:92:50:33:
                    1b:20:60:95:e1:77:38:40:bc:de:fc:be:2a:64:9a:
                    e1:63:f7:b7:1c:ec:59:35:39:4c:bd:a8:cc:07:d0:
                    a7:14:5d:be:7d:ce:6d:1d:2d:1d:8c:68:69:d9:de:
                    59:6c:80:bf:64:ad:a9:ff:19:68:12:af:ad:67:0f:
                    06:14:da:9a:83:fb:4a:71:51:65:52:9b:20:00:28:
                    15:3b:63:bb:5d:ee:4d:2b:a0:15:a0:83:4e:c8:47:
                    7e:c2:52:a2:80:9f:24:cf:ef:ea:f9:2a:e4:45:c6:
                    95:49:2f:52:b0:51:4b:c3:6e:69:81:01:7e:ed:58:
                    92:f0:cd:f7:28:13:2b:f1:86:9f:7a:3b:47:04:b2:
                    34:bb:5b:c5:44:27:71:39:3a:85:4a:b3:93:03:44:
                    e9:75:4c:f5:39:c8:d2:a1:93:00:98:ad:61:f3:93:
                    bb:1c:39:e2:72:11:47:84:3d:dd:b3:b2:d7:3c:b2:
                    66:9e:f3:30:57:7a:d3:84:af:4a:e2:6e:36:0b:c0:
                    97:4d:50:92:97:15:ae:68:b2:73:46:74:11:17:28:
                    95:a1:b3:ae:f9:6e:16:87:e0:a9:42:0d:92:55:69:
                    2e:a9:65:9e:3d:ab:a9:bd:1b:0b:dd:04:d1:ad:e6:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:86:91:3F:88:3A:38:61:D7:8A:4F:D9:A6:5D:2F:7B:EC:6F:85:63
            X509v3 Authority Key Identifier:
                keyid:49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31392e302f32342d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:0a:b2:12:68:40:b0:fa:b5:51:e0:49:20:1e:dc:c6:ef:e5:
         73:43:08:96:b6:c6:83:db:f3:1a:eb:6c:32:2d:07:cc:37:c5:
         03:df:f8:cf:80:a0:82:b7:2b:32:61:9d:66:d7:ad:0e:d9:11:
         a3:30:d8:b4:2c:01:fc:e8:07:6a:f2:2a:79:78:ff:47:10:03:
         59:d3:5a:23:aa:66:84:49:80:dd:bf:1a:66:4f:7f:24:3d:88:
         00:0d:6d:bc:90:db:c2:20:fd:a6:96:6e:09:93:6b:11:5c:fc:
         96:c3:a1:f7:0e:0b:63:99:cd:40:50:34:78:59:ec:d7:b2:3e:
         60:a7:1c:5c:d0:c1:a5:a3:52:e5:16:91:35:17:18:80:ca:c8:
         c9:79:7f:66:59:b5:6b:fe:3b:24:8f:94:23:c1:d5:03:f1:69:
         44:3e:c9:30:71:64:2e:bc:0b:1f:99:cb:0e:39:81:6c:a4:ce:
         57:d7:1b:3f:20:06:5b:3c:26:d4:ee:9a:4e:b6:9f:15:69:1b:
         21:16:0c:77:ce:a2:a8:ca:4e:57:8e:fa:22:b5:dd:fe:b9:16:
         fe:c9:ea:0e:87:01:e5:63:9f:8b:30:66:87:a8:d7:26:ac:a2:
         31:71:7e:77:ac:98:57:94:f6:54:19:a5:2a:14:d0:d6:e7:ae:
         b0:18:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org