Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3136382e3132312e35322e302f32322d3234203d3e20323632353039.roa
File:                     3136382e3132312e35322e302f32322d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          GF1qABvoW7UQTuU1O69gqJsIePsZI7uKQx64dgbGQOU=
Subject key identifier:   FA:55:E7:78:0E:1E:33:8D:07:1A:12:DD:75:37:8C:33:44:D7:90:FC
Certificate issuer:       /CN=D25FB7A3641FB6992609C3E87677747FD5176120
Certificate serial:       71531D4E82A18E4C8601FEAB393C767FD4A2F00D
Authority key identifier: D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3136382e3132312e35322e302f32322d3234203d3e20323632353039.roa
Signing time:             Thu 06 Oct 2022 17:39:56 +0000
ROA not before:           Thu 06 Oct 2022 17:34:56 +0000
ROA not after:            Thu 05 Oct 2023 17:39:56 +0000
asID:                     262509
IP address blocks:        168.121.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:53:1d:4e:82:a1:8e:4c:86:01:fe:ab:39:3c:76:7f:d4:a2:f0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Validity
            Not Before: Oct  6 17:34:56 2022 GMT
            Not After : Oct  5 17:39:56 2023 GMT
        Subject: CN=FA55E7780E1E338D071A12DD75378C3344D790FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b9:29:33:3c:e1:3b:95:93:32:49:01:43:88:
                    32:af:dc:95:e0:4a:0b:24:ff:be:ef:cc:af:b5:f9:
                    fc:6b:65:c8:f1:1b:48:df:f7:19:f0:79:f4:30:a1:
                    01:03:92:0e:29:89:7c:f7:13:a0:81:7f:fa:a7:98:
                    82:d8:b1:c3:d1:94:12:47:9a:5d:77:23:da:43:1b:
                    31:27:2f:c1:c0:31:14:1f:7d:36:32:65:75:f1:c0:
                    01:c9:83:0c:7b:96:bf:83:97:84:66:4b:a6:8a:60:
                    ed:77:67:e6:46:f1:00:20:be:b9:3b:ac:7e:2c:0f:
                    8d:24:74:94:ca:3a:fc:a9:88:bc:73:06:c3:ae:69:
                    56:79:23:66:1a:49:c2:ca:a1:5e:f6:fe:b1:e4:f2:
                    b6:d8:7c:7f:f0:f4:af:b2:d3:f1:de:4a:7e:9e:89:
                    7f:cd:75:30:68:ac:c2:92:a3:5f:90:2d:68:25:dc:
                    f6:57:bb:f7:13:74:5a:91:76:f0:b2:cb:c2:f7:fa:
                    97:d9:ee:10:34:8d:f9:41:ff:28:6a:d1:ae:03:20:
                    8e:2c:35:ec:5d:9e:ba:a6:38:99:a1:4f:11:cd:9e:
                    c3:1e:07:52:ca:e5:82:c6:6a:d3:42:98:e1:ed:2e:
                    43:b7:bb:d0:25:f8:ec:80:44:27:7b:1b:0a:90:74:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:55:E7:78:0E:1E:33:8D:07:1A:12:DD:75:37:8C:33:44:D7:90:FC
            X509v3 Authority Key Identifier:
                keyid:D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3136382e3132312e35322e302f32322d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:b7:79:97:d5:37:01:7c:54:0b:e6:64:4a:14:9f:cf:7e:89:
         0c:c7:6b:46:fd:12:f3:1e:a5:2a:5c:b2:cc:84:e0:0a:04:b1:
         5e:98:ee:2c:d4:02:1c:2b:f3:cc:20:76:09:9a:82:b9:16:b1:
         61:f6:ab:df:5e:fe:33:06:d3:fd:31:a3:cd:4b:8a:4b:b0:a8:
         ac:5b:b6:bf:ea:21:6c:a5:f9:73:8d:e2:ed:c5:66:ef:cd:11:
         1a:39:be:6e:23:e8:a1:cb:eb:69:0d:66:59:b5:f1:39:53:6b:
         46:ad:b9:71:4e:01:38:bc:ad:6a:ba:0c:a1:48:6d:6a:e2:40:
         5a:ad:c8:2a:59:56:55:64:be:ad:bb:87:31:48:94:fe:0a:cb:
         e6:cd:93:3a:a5:e4:37:13:cb:54:e0:7b:c6:cc:4c:22:e0:5d:
         f9:cf:8c:18:e6:5c:6b:66:21:aa:29:e4:59:3a:1d:37:fd:f8:
         71:d8:09:45:1f:9e:52:9c:d7:b7:a6:1b:ac:d4:27:c2:b7:2d:
         9d:22:bd:1f:13:75:4e:77:b1:f1:01:a4:bd:24:71:f7:a9:79:
         fc:f4:c6:8d:9f:f1:cd:bb:37:08:09:9d:6f:2e:e7:7f:a5:ee:
         a9:80:cd:5c:c1:1e:5b:52:e1:f5:d2:0d:d0:78:0f:11:64:a3:
         7b:f5:72:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org