Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133382e302f32332d3233203d3e203532393437.roa
File:                     3137372e33382e3133382e302f32332d3233203d3e203532393437.roa (raw, json)
Hash identifier:          Uu5DRznvEhiZZ/Urcn3k6ce3U3HdpAXA0DHLgQg5Wfw=
Subject key identifier:   64:AE:18:98:93:31:65:F2:3F:BB:22:48:AE:B4:C5:19:3E:E3:07:2E
Certificate issuer:       /CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
Certificate serial:       5FD402D176684764CB0F81670EF525E1FBE93A02
Authority key identifier: 49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133382e302f32332d3233203d3e203532393437.roa
Signing time:             Tue 24 May 2022 18:57:27 +0000
ROA not before:           Tue 24 May 2022 18:52:27 +0000
ROA not after:            Tue 23 May 2023 18:57:27 +0000
asID:                     52947
IP address blocks:        177.38.138.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d4:02:d1:76:68:47:64:cb:0f:81:67:0e:f5:25:e1:fb:e9:3a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497507B1F741F6F35D5454A9E1FD4D60B6C48E59
        Validity
            Not Before: May 24 18:52:27 2022 GMT
            Not After : May 23 18:57:27 2023 GMT
        Subject: CN=64AE1898933165F23FBB2248AEB4C5193EE3072E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:90:44:1a:8d:f0:b2:b3:d2:6e:bf:42:b4:
                    0f:61:82:3c:53:0c:f3:72:ac:65:cc:a6:8d:f9:1d:
                    52:a6:ad:07:d7:29:73:bd:50:2f:23:e4:52:05:9f:
                    30:ae:52:91:05:83:51:7b:db:17:41:b2:57:53:a2:
                    76:8b:9d:e0:df:63:66:82:79:04:9a:e9:3f:99:20:
                    27:18:5d:f0:45:1d:af:df:c5:5e:88:37:bc:9b:c9:
                    fa:25:30:4b:0e:f2:10:47:ee:ff:88:2a:2d:8f:5c:
                    63:cc:2c:ff:63:ff:18:3a:f5:22:e4:f8:b0:43:7f:
                    20:d6:ca:27:5e:03:dc:e7:78:aa:1e:89:bc:04:48:
                    ce:18:00:d5:f2:2a:e6:0e:c3:68:16:87:b1:e8:70:
                    4e:ac:e7:4d:a9:98:69:9f:e1:f8:7e:80:71:75:f6:
                    68:70:28:5c:be:8d:5a:1e:d6:bd:bb:c3:dc:ec:ed:
                    3c:ab:1c:c0:e2:90:28:3e:cb:1b:44:bc:27:4f:45:
                    91:cb:5e:1b:fd:cd:e0:0b:de:0e:a6:09:fa:3e:7e:
                    52:5c:be:6c:b8:e5:38:97:c7:2c:b9:f4:56:77:72:
                    26:19:1c:47:9b:81:12:d7:64:3e:2b:ca:99:d0:e3:
                    df:a5:8c:d2:d4:67:41:ea:d6:7b:72:43:84:fd:ae:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AE:18:98:93:31:65:F2:3F:BB:22:48:AE:B4:C5:19:3E:E3:07:2E
            X509v3 Authority Key Identifier:
                keyid:49:75:07:B1:F7:41:F6:F3:5D:54:54:A9:E1:FD:4D:60:B6:C4:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/497507B1F741F6F35D5454A9E1FD4D60B6C48E59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133382e302f32332d3233203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:7a:7f:f6:f0:c5:1d:40:57:9a:ad:6d:2a:91:b7:f7:f9:bc:
         5f:7e:24:2e:3d:3c:2e:8a:6f:4a:bf:3a:b8:5f:5d:c1:6f:6c:
         26:ae:0f:72:da:15:e5:2f:af:f0:27:58:0c:17:18:10:3d:41:
         92:dc:bf:8c:1d:5c:02:30:eb:b9:ef:c1:78:0e:88:9e:8f:35:
         6c:0f:a5:22:8f:90:4c:61:55:e8:c0:e9:20:db:07:62:63:35:
         95:21:55:71:1d:91:4c:dc:19:1a:c8:2e:15:a1:7c:4e:6f:7c:
         a3:53:e4:a6:7b:67:7b:86:a8:ae:9b:7b:92:08:3f:db:5b:0b:
         97:d4:fa:d5:2a:3e:4c:da:67:4c:26:1f:90:be:36:49:49:7e:
         2e:51:51:4c:4c:bf:f4:69:38:95:54:20:1e:de:b0:5e:bd:23:
         18:7f:d8:bc:d4:99:d9:45:28:e9:18:fa:0c:df:84:e2:bd:44:
         bf:cb:ad:95:fd:36:ab:b2:be:ac:2f:a1:3c:47:0c:cf:58:fe:
         10:b5:fe:57:b2:10:19:88:bf:7f:9a:bd:74:d4:84:e7:ae:a5:
         4f:56:a0:96:10:19:18:44:19:54:66:47:33:81:de:56:c4:4a:
         5c:cf:17:26:36:6a:7b:8c:ae:7d:1f:50:d8:ab:fb:71:63:af:
         9f:25:aa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org