Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137392e3132342e3139362e302f32322d3234203d3e20323632353339.roa
File:                     3137392e3132342e3139362e302f32322d3234203d3e20323632353339.roa (raw, json)
Hash identifier:          O2M/nYGH/xgcQt3LxNJvjDWT/SyfucFrZB3zGwTvYc0=
Subject key identifier:   28:33:E2:A7:65:B9:1B:C5:CB:0C:DC:BC:E4:E7:75:05:49:BE:18:BC
Certificate issuer:       /CN=E455A68CFCEEC925F1438219DF3DD9581BE0B084
Certificate serial:       79EB1AEBCCB86D8BD0C633D1007D47B30D1B37E8
Authority key identifier: E4:55:A6:8C:FC:EE:C9:25:F1:43:82:19:DF:3D:D9:58:1B:E0:B0:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E455A68CFCEEC925F1438219DF3DD9581BE0B084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137392e3132342e3139362e302f32322d3234203d3e20323632353339.roa
Signing time:             Mon 12 Feb 2024 14:18:00 +0000
ROA not before:           Mon 12 Feb 2024 14:13:00 +0000
ROA not after:            Mon 10 Feb 2025 14:18:00 +0000
asID:                     262539
IP address blocks:        179.124.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:eb:1a:eb:cc:b8:6d:8b:d0:c6:33:d1:00:7d:47:b3:0d:1b:37:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E455A68CFCEEC925F1438219DF3DD9581BE0B084
        Validity
            Not Before: Feb 12 14:13:00 2024 GMT
            Not After : Feb 10 14:18:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:ef:91:a3:cb:2e:06:c7:79:88:a0:d8:89:
                    e1:d7:da:14:95:c9:78:b3:14:68:70:fa:53:c6:2b:
                    13:25:6a:b5:6c:f1:81:6b:da:43:d1:1b:8a:98:2c:
                    36:b3:b5:93:bb:03:84:5d:fd:af:6c:72:23:e1:ca:
                    5b:92:8c:55:56:25:eb:a8:b8:5e:50:42:d8:dd:9e:
                    de:2c:ad:b0:96:5a:b4:02:8a:96:53:0c:4e:26:e8:
                    ab:d3:60:18:fa:f9:ce:de:2b:54:d9:7e:34:ca:b2:
                    81:e4:8a:db:09:a1:c1:1e:20:89:89:80:05:3c:ce:
                    6c:df:8e:8e:3f:7f:f4:02:9b:1e:bf:6f:a5:93:c0:
                    1b:e7:d8:4b:3f:8d:9c:2e:0c:f0:c2:14:a8:ec:a4:
                    b2:cb:39:5c:52:4c:d6:64:ee:9c:63:88:0d:55:a0:
                    14:d1:96:3f:03:89:1b:d9:d3:c8:bb:2b:62:07:c3:
                    a7:72:be:3a:67:3f:56:89:2f:08:a5:8f:23:b0:d0:
                    56:80:2a:db:07:61:d1:66:57:01:ce:2a:7e:ea:bd:
                    73:2d:bc:e2:38:1d:2f:35:25:d7:e4:05:29:f3:33:
                    48:a3:8c:6e:b5:d3:21:8c:19:ff:b9:98:66:d5:5f:
                    6a:8a:92:7f:fd:ec:3e:cb:66:a2:37:14:0e:eb:12:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:33:E2:A7:65:B9:1B:C5:CB:0C:DC:BC:E4:E7:75:05:49:BE:18:BC
            X509v3 Authority Key Identifier:
                keyid:E4:55:A6:8C:FC:EE:C9:25:F1:43:82:19:DF:3D:D9:58:1B:E0:B0:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/E455A68CFCEEC925F1438219DF3DD9581BE0B084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E455A68CFCEEC925F1438219DF3DD9581BE0B084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cv7u6nEsJgdGbKPpBocFcDo4GzoCzbkiPNwb23cdfc4/0/3137392e3132342e3139362e302f32322d3234203d3e20323632353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:32:20:51:98:e6:11:a1:7b:9c:e1:b4:1d:f5:6e:e7:da:
         b1:b3:54:25:4c:21:0a:9a:dd:c2:58:d6:0b:6a:46:ee:8b:2e:
         fa:94:13:84:e6:7f:85:c3:e4:2d:e1:a0:16:e0:d5:28:9e:a6:
         7b:c4:73:34:ec:a6:74:ad:90:7a:88:8e:33:93:ba:10:db:5e:
         39:2e:d8:a9:0e:99:f7:0e:24:8e:a0:31:a6:eb:bd:1b:1b:21:
         52:25:42:34:fb:6d:18:de:7f:9f:76:50:19:32:19:8a:80:e8:
         24:90:7f:79:cf:db:c9:13:92:16:f8:82:e8:bf:ba:71:eb:b5:
         19:be:97:8c:a5:c5:4f:4a:99:f8:ba:97:97:2d:4e:46:5d:5a:
         af:1e:d8:dd:e0:81:b8:1e:2a:06:52:27:ea:ee:1c:5d:d0:90:
         2f:e0:80:fe:f7:2d:e2:78:e8:68:cc:30:0e:14:a7:14:8c:a1:
         06:c2:1e:15:af:b5:89:7d:5b:9c:87:bf:87:45:a4:00:1f:f2:
         b9:13:05:4d:55:13:a8:08:93:7e:6b:9b:8a:c7:c0:b1:50:f7:
         0f:8c:f2:80:ef:fc:32:a9:9b:85:82:31:7e:6a:e8:52:c6:a9:
         24:97:21:a9:3f:fa:b3:25:2c:b2:29:fa:48:36:4d:45:c4:a6:
         b7:10:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org