Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137302e3234372e35322e302f32322d3232203d3e203238323230.roa
File:                     3137302e3234372e35322e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          dDCSzKpdMn1xRYB2+vhPzPUu4klFnUkWbexUSxXwZVA=
Subject key identifier:   14:97:FE:56:0B:31:3A:C7:D7:A2:C0:1C:62:69:A6:1B:AA:41:85:CE
Certificate issuer:       /CN=D25FB7A3641FB6992609C3E87677747FD5176120
Certificate serial:       7AFA38E791045F028EB2CCE7C4AB2A89D5A90A6E
Authority key identifier: D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137302e3234372e35322e302f32322d3232203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:39:56 +0000
ROA not before:           Thu 06 Oct 2022 17:34:56 +0000
ROA not after:            Thu 05 Oct 2023 17:39:56 +0000
asID:                     28220
IP address blocks:        170.247.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fa:38:e7:91:04:5f:02:8e:b2:cc:e7:c4:ab:2a:89:d5:a9:0a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25FB7A3641FB6992609C3E87677747FD5176120
        Validity
            Not Before: Oct  6 17:34:56 2022 GMT
            Not After : Oct  5 17:39:56 2023 GMT
        Subject: CN=1497FE560B313AC7D7A2C01C6269A61BAA4185CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:fc:41:db:54:f4:62:87:56:0e:44:ee:18:
                    f8:e8:4d:24:70:93:3d:70:80:6a:bb:40:74:6d:3b:
                    c5:82:d8:df:2e:a7:38:cf:c3:fa:59:5a:fa:6c:5e:
                    a0:12:26:6c:9d:d7:59:60:b3:9c:81:d9:cb:49:b7:
                    da:19:b7:c5:01:da:e9:c2:4b:ac:ee:4a:e9:da:e1:
                    e8:12:c4:34:d2:22:80:ee:42:8d:b8:85:11:18:c0:
                    c9:0b:73:3d:06:6e:09:56:c7:01:57:f6:a8:ea:1d:
                    0a:1c:73:77:e9:b6:47:8e:02:12:53:21:31:3e:2f:
                    20:a5:c0:99:10:b5:e7:7b:e7:8b:96:76:16:89:7a:
                    23:e0:9e:c4:9f:ed:67:77:22:fb:9b:61:b6:f4:ad:
                    ab:d4:78:13:da:ae:90:c1:40:e5:c6:f8:59:01:3d:
                    21:b7:dd:b4:45:61:d1:9b:38:fe:1d:a1:6a:29:9a:
                    32:ed:d0:bd:1c:d3:04:1b:17:39:d4:ec:b7:06:10:
                    2a:2a:20:92:85:f3:16:01:15:79:8c:21:62:64:90:
                    44:7b:91:88:c8:c6:30:56:e5:7f:39:5d:5a:5e:4d:
                    6a:f6:4f:83:ff:cc:ad:ab:4b:71:cc:c7:0d:16:5e:
                    47:75:e0:24:c3:42:a8:da:e1:5a:5a:fb:18:fe:f4:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:97:FE:56:0B:31:3A:C7:D7:A2:C0:1C:62:69:A6:1B:AA:41:85:CE
            X509v3 Authority Key Identifier:
                keyid:D2:5F:B7:A3:64:1F:B6:99:26:09:C3:E8:76:77:74:7F:D5:17:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/D25FB7A3641FB6992609C3E87677747FD5176120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D25FB7A3641FB6992609C3E87677747FD5176120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/0/3137302e3234372e35322e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:ae:59:a8:d5:88:42:8d:8f:97:41:3b:fa:5d:dc:29:1c:2b:
         0a:3f:d7:5a:ff:93:95:fc:c1:16:4a:27:fb:38:dd:6a:8d:05:
         33:c9:42:69:df:92:9d:48:06:fa:05:a9:da:2f:b3:e6:8d:5d:
         7b:ef:19:f7:64:e1:16:b4:e9:5d:9b:7d:ae:91:c6:6d:36:61:
         9c:39:c9:3e:66:1b:65:a7:1b:cb:18:a7:f4:cd:3a:5a:a4:17:
         9f:13:ed:f2:7c:8d:a8:96:2b:53:7c:70:08:03:96:b0:58:21:
         5c:2c:28:60:86:91:c6:16:28:03:9b:29:a4:1a:c7:85:52:55:
         c5:a5:85:cd:d3:e2:12:9f:d8:69:be:7f:4c:6c:5f:05:33:95:
         7f:4e:22:35:e5:cb:44:a4:b3:f6:b9:2c:00:ae:81:49:01:26:
         71:00:a9:25:ae:81:8d:cc:fc:e3:fa:54:a0:b0:bd:0a:d2:12:
         be:c9:23:78:46:47:ae:10:58:fc:6c:de:5b:aa:b8:c4:d9:bc:
         d8:36:b1:55:29:6f:58:e8:d2:c9:0c:01:d9:48:d0:76:63:33:
         b6:be:d8:63:c6:70:5f:0e:70:64:5f:48:c9:d0:96:68:c5:a7:
         fc:6b:f4:95:7e:9b:29:53:49:04:7a:d3:27:ef:8a:04:09:b5:
         c2:84:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org