Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3136382e3132312e35322e302f32322d3232203d3e20323632393932.roa
File:                     3136382e3132312e35322e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          t4vVv6dUoXlCGKL//23yIeSxbxkuaeDPNlP3chH1wSE=
Subject key identifier:   89:DC:83:A9:F0:0E:BE:46:C6:41:71:89:56:FC:AE:07:1A:02:5C:83
Certificate issuer:       /CN=D25FB7A3641FB6992609C3E87677747FD5176120
Certificate serial:       02199FFE38628115C7149F922962B818B8BC47CB
Authority key identifier: D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3136382e3132312e35322e302f32322d3232203d3e20323632393932.roa
Signing time:             Sat 17 Dec 2022 23:31:55 +0000
ROA not before:           Sat 17 Dec 2022 23:26:55 +0000
ROA not after:            Sat 16 Dec 2023 23:31:55 +0000
asID:                     262992
IP address blocks:        168.121.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:19:9f:fe:38:62:81:15:c7:14:9f:92:29:62:b8:18:b8:bc:47:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Validity
            Not Before: Dec 17 23:26:55 2022 GMT
            Not After : Dec 16 23:31:55 2023 GMT
        Subject: CN=89DC83A9F00EBE46C641718956FCAE071A025C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:98:c9:53:61:74:53:b5:72:c5:34:36:d9:
                    8f:34:84:0d:9d:76:c0:c5:4f:75:96:2b:3f:58:54:
                    fb:5d:ac:19:96:af:e9:21:ef:c2:bc:f1:30:9f:7c:
                    1d:0d:82:dd:d8:75:62:7f:b6:0d:3e:8a:ef:2b:95:
                    87:57:03:45:cc:b4:ed:92:55:92:07:b1:c0:4d:d5:
                    21:16:d3:eb:d1:bc:eb:11:b5:2e:3e:5e:17:08:b0:
                    87:f6:be:ad:d6:55:58:4d:f1:7b:33:8c:5d:98:68:
                    66:df:17:4f:cd:6b:a8:11:50:07:65:9b:23:ef:68:
                    2e:3b:ea:1a:11:65:06:0c:2f:8c:35:ca:7d:bd:31:
                    51:fd:ab:9d:ba:23:10:ab:8c:1c:c0:73:af:8d:b2:
                    c4:9a:82:de:d7:0f:c9:de:d4:b8:87:02:2f:13:3d:
                    d9:b1:2a:ba:5d:17:f1:8f:15:d5:7d:7b:9d:7c:28:
                    6b:2e:bc:b0:c3:39:03:89:d0:99:90:01:72:dc:03:
                    ff:ba:a7:17:d7:a4:9a:6f:28:23:ba:02:91:10:7b:
                    c7:4b:0d:b5:5e:aa:4a:a9:e0:cc:54:46:73:75:b0:
                    99:6e:ac:77:7f:6b:51:e2:3a:1b:f5:a2:c8:ab:14:
                    86:3b:1a:cd:db:bc:bb:d7:e1:c6:52:1a:cd:b2:32:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DC:83:A9:F0:0E:BE:46:C6:41:71:89:56:FC:AE:07:1A:02:5C:83
            X509v3 Authority Key Identifier:
                keyid:D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3136382e3132312e35322e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:82:75:9a:1e:14:06:08:18:56:2e:aa:09:f3:af:c8:b3:78:
         65:2e:ea:d4:d6:f5:2a:cb:21:0f:3d:c9:bc:70:0f:37:f0:ba:
         a9:29:f5:69:7f:d2:3f:65:55:a4:b0:2d:6f:4b:4f:d3:52:e5:
         3d:6d:86:7d:2a:06:8d:c7:cd:b9:f4:57:e3:6e:41:34:91:56:
         8f:32:4b:c9:df:e8:ef:2d:f0:cf:a5:5c:1e:67:e6:8c:e8:38:
         ab:5c:50:bb:74:30:21:16:fd:9d:f8:bf:33:7d:7e:ab:21:8f:
         fb:70:34:f3:08:d5:a9:44:4a:36:6e:d7:ed:24:3e:60:ec:5d:
         a8:f6:c3:80:36:ac:de:75:a6:05:7c:fe:27:d8:58:78:f6:36:
         d1:fe:54:56:cf:e4:a2:a8:1c:c4:83:80:a4:e9:71:bf:4b:bd:
         28:58:1f:15:3b:19:15:07:38:1b:6e:35:59:85:75:76:f8:b3:
         bd:72:fd:8a:4f:08:79:23:ca:91:1d:82:a4:86:5e:51:24:ff:
         b8:3e:9f:27:db:72:3c:e8:82:cb:a5:f3:77:be:2d:dd:34:fe:
         ed:e6:5f:b5:23:fe:e9:84:b4:03:94:ff:4b:ac:4d:a9:41:7b:
         eb:30:c0:22:33:a2:5a:e2:ee:83:2f:83:df:57:c3:49:81:e1:
         d6:ec:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org