Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa
File:                     3137392e36332e39332e302f32342d3234203d3e20323731363132.roa (raw, json)
Hash identifier:          lgRt6uQB09ozdiOJ8PHdFr5HZqpbppB/CIy2/j40+ts=
Subject key identifier:   BA:10:62:64:BB:7A:99:7F:C0:B8:84:B6:E3:48:60:1D:C0:E9:5E:5A
Certificate issuer:       /CN=365EB380D1AF8407FD93545D5B6D63209853804F
Certificate serial:       3AB2ECC7E9FE4E09FB9375207D494EABED5FE766
Authority key identifier: 36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa
Signing time:             Fri 08 Dec 2023 21:35:29 +0000
ROA not before:           Fri 08 Dec 2023 21:30:29 +0000
ROA not after:            Fri 06 Dec 2024 21:35:29 +0000
asID:                     271612
IP address blocks:        179.63.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b2:ec:c7:e9:fe:4e:09:fb:93:75:20:7d:49:4e:ab:ed:5f:e7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365EB380D1AF8407FD93545D5B6D63209853804F
        Validity
            Not Before: Dec  8 21:30:29 2023 GMT
            Not After : Dec  6 21:35:29 2024 GMT
        Subject: CN=BA106264BB7A997FC0B884B6E348601DC0E95E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:b3:ed:bf:cb:cd:ed:ef:c4:7b:e9:b6:26:
                    f8:e9:3d:d2:15:bc:97:4d:a0:4f:fd:51:c5:d9:f2:
                    7b:0c:fb:2d:a3:18:62:d6:21:b0:70:9a:f1:d4:a7:
                    2d:18:53:13:a8:0c:64:82:12:7d:33:97:8c:99:60:
                    5b:42:6d:86:23:c5:dd:70:da:4d:b4:79:28:f8:12:
                    ec:99:b3:9c:11:4e:60:64:e8:58:17:fd:ef:9b:65:
                    88:a5:1a:dc:8a:d1:e0:79:c0:db:9f:d2:67:70:4f:
                    61:07:d1:03:de:76:1b:84:04:cd:16:17:05:64:80:
                    03:62:98:22:05:23:7d:a1:c3:bb:92:af:ce:18:75:
                    87:3c:6e:96:63:5b:93:80:29:28:fa:f4:06:af:f7:
                    f3:6c:76:da:55:f5:6e:f3:9f:2f:08:04:6e:1d:ad:
                    78:65:76:90:39:fe:8c:85:c7:77:43:66:6f:00:04:
                    f1:a6:69:3b:c9:66:48:dc:75:88:79:5b:27:f4:d1:
                    d9:e4:25:dc:ad:5d:df:74:69:31:40:24:fd:ac:3d:
                    53:84:90:38:85:90:1a:f5:d1:24:60:40:93:6d:e8:
                    c8:37:58:9f:91:21:cf:5e:d2:7d:b0:af:d1:4c:0c:
                    48:63:f6:7f:f4:6a:fe:74:8e:a0:44:ef:45:af:5f:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:10:62:64:BB:7A:99:7F:C0:B8:84:B6:E3:48:60:1D:C0:E9:5E:5A
            X509v3 Authority Key Identifier:
                keyid:36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/365EB380D1AF8407FD93545D5B6D63209853804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:1f:5c:93:90:b7:d6:d1:07:06:eb:46:f7:9e:01:ae:8f:33:
         66:ff:81:86:83:64:b9:1e:96:8c:c6:f6:d4:84:b1:78:d2:63:
         e0:49:e6:4d:52:26:f1:49:4a:8a:ba:e0:67:5a:1a:e6:f5:ce:
         bf:6b:86:2c:2e:b7:67:8a:8e:0e:b3:88:27:7d:80:ac:a9:90:
         b0:c3:65:22:c7:da:15:5b:4b:6c:85:8f:e4:45:50:7c:23:cd:
         1e:72:1f:ed:54:12:93:71:33:04:95:44:42:09:45:4f:e2:fd:
         c5:80:11:65:5d:80:c9:be:e6:41:ef:f1:b1:ce:88:73:a9:78:
         a4:67:74:5f:0e:61:3a:bc:58:6e:a7:92:ff:31:3c:dc:45:e7:
         2c:59:a3:7b:27:dc:70:6d:c8:07:a5:76:f1:57:49:f3:ad:cb:
         ee:8d:08:b9:78:ed:f6:d4:86:fd:49:ae:32:c3:f9:0d:1b:af:
         5e:7f:68:2c:c2:aa:6b:9e:ff:f4:4e:b6:23:3c:b6:da:a6:8b:
         32:68:d4:c1:0e:f1:5e:73:aa:cb:d8:fb:21:02:88:f8:91:e5:
         bb:f7:7e:7a:e5:cf:b6:85:30:e3:3c:65:e4:ab:f4:6a:24:58:
         62:4a:70:ce:73:77:70:4e:a7:43:52:fa:08:4e:36:e8:9b:26:
         f7:1f:fc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org