Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32322d3332203d3e20323731303732.roa
File:                     3137392e34382e3130302e302f32322d3332203d3e20323731303732.roa (raw, json)
Hash identifier:          SJKU6cpNaqiq5Dys+riQzwYyC+/jM8ZEHSV9fERFe9Q=
Subject key identifier:   81:20:E7:DF:80:BB:F1:DC:08:84:0C:3F:B2:BA:FA:82:CB:23:DB:2A
Certificate issuer:       /CN=35FC7024265CE242898B3F38745C5FE60CAA741B
Certificate serial:       1363A1CDE61EC0719AF272539AB3B79128E36719
Authority key identifier: 35:FC:70:24:26:5C:E2:42:89:8B:3F:38:74:5C:5F:E6:0C:AA:74:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35FC7024265CE242898B3F38745C5FE60CAA741B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32322d3332203d3e20323731303732.roa
Signing time:             Mon 26 Feb 2024 14:58:22 +0000
ROA not before:           Mon 26 Feb 2024 14:53:22 +0000
ROA not after:            Mon 24 Feb 2025 14:58:22 +0000
asID:                     271072
IP address blocks:        179.48.100.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:63:a1:cd:e6:1e:c0:71:9a:f2:72:53:9a:b3:b7:91:28:e3:67:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35FC7024265CE242898B3F38745C5FE60CAA741B
        Validity
            Not Before: Feb 26 14:53:22 2024 GMT
            Not After : Feb 24 14:58:22 2025 GMT
        Subject: CN=8120E7DF80BBF1DC08840C3FB2BAFA82CB23DB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:75:81:ea:ce:b9:d9:d6:0a:d6:f1:66:d8:
                    d8:61:3f:bd:fd:94:35:08:05:36:7b:94:f8:ba:06:
                    8d:e4:cd:f1:5f:f6:ea:47:72:5a:51:6b:ed:ca:bb:
                    fd:f6:47:4f:3b:0a:d0:3b:31:c7:71:4b:f2:7c:a7:
                    c5:14:a2:1c:7f:c8:fd:35:5a:0a:6f:15:ff:51:38:
                    0e:b5:7a:9c:a0:3e:85:29:dc:e6:47:1d:8a:56:3e:
                    3a:b0:c6:33:1b:7f:9a:76:4a:00:ad:dc:c0:3e:73:
                    af:6d:c4:b0:ce:5c:38:f7:78:89:ca:ba:90:6a:08:
                    6b:63:06:80:fd:a5:e9:c4:99:49:c0:c0:50:fe:cd:
                    94:a3:62:ce:ee:6b:c5:e5:aa:79:8d:a4:c2:9b:61:
                    4a:fd:4b:4b:3f:36:3a:25:44:06:86:5e:92:b7:6e:
                    aa:5d:47:b0:d1:25:3a:ec:88:2d:83:eb:ed:65:10:
                    39:39:2f:76:b9:b6:b0:b5:b5:61:5c:82:bb:46:6e:
                    94:9f:ca:3f:57:91:7c:82:a6:6f:3a:8d:78:60:5a:
                    81:00:2a:d7:40:c9:7a:e4:6e:33:ce:6c:86:e9:27:
                    86:1b:1b:4f:ad:0f:05:a1:7f:1e:b4:1c:20:5a:c8:
                    63:ac:93:2d:c4:c7:80:1d:bf:d5:ef:09:d1:5a:1b:
                    2b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:20:E7:DF:80:BB:F1:DC:08:84:0C:3F:B2:BA:FA:82:CB:23:DB:2A
            X509v3 Authority Key Identifier:
                keyid:35:FC:70:24:26:5C:E2:42:89:8B:3F:38:74:5C:5F:E6:0C:AA:74:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/35FC7024265CE242898B3F38745C5FE60CAA741B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35FC7024265CE242898B3F38745C5FE60CAA741B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32322d3332203d3e20323731303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:56:9d:56:18:69:5e:92:3b:fe:3a:2a:35:fc:76:fd:e3:f2:
         d9:09:4c:59:0d:78:06:4f:54:93:2d:60:6d:81:b2:40:80:87:
         27:a7:23:94:ca:52:eb:b3:b3:93:1b:fd:98:d4:e7:88:85:8d:
         d7:7a:41:2a:cb:11:64:8b:3d:ba:8b:27:ad:0e:1a:a5:01:33:
         9a:35:8a:8c:2e:bb:67:7f:a8:30:88:32:23:55:20:a5:2d:ea:
         4b:8a:19:93:76:73:fa:5f:8d:4f:cc:43:c3:e1:6e:af:b1:10:
         19:0e:47:5f:67:90:0d:b4:6b:67:5a:f0:0d:0a:b6:8b:64:31:
         f0:d9:cd:8b:24:c8:44:57:ac:10:46:97:ba:de:2b:03:81:1d:
         bf:ef:d8:19:9a:87:42:7d:ea:d2:ee:d7:73:08:e8:19:f4:66:
         e7:9b:f4:1c:c8:ba:dd:a8:a2:87:60:46:32:e3:0d:0c:fd:eb:
         c7:d2:02:e0:d2:cc:09:03:bf:27:44:64:32:f7:fe:54:77:f9:
         14:86:c4:79:d1:66:da:fc:bb:a6:22:ca:01:f2:4e:99:61:34:
         7e:4b:0f:45:b0:7b:78:e0:a6:50:93:74:4d:d4:d8:cb:73:a1:
         54:04:16:a1:64:f8:6a:df:e9:95:e1:92:f2:5b:29:b3:cb:97:
         6a:8e:77:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org