Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa
File:                     3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa (raw, json)
Hash identifier:          1hg67W9nHJQIWxe9nrkGWqIM6FQESIkJkbloKgFq9LM=
Subject key identifier:   C2:4E:FF:A1:2A:99:2A:12:5B:D4:A8:9F:AB:D5:93:B2:AD:15:85:DE
Certificate issuer:       /CN=7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3
Certificate serial:       793E89E929D8180A6CE334D663FACA5F6B7ED9E2
Authority key identifier: 7A:2D:CE:8A:D3:C9:E8:A3:1D:53:D5:32:C9:68:E9:87:DB:BC:70:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa
Signing time:             Wed 20 Dec 2023 16:24:39 +0000
ROA not before:           Wed 20 Dec 2023 16:19:39 +0000
ROA not after:            Wed 18 Dec 2024 16:24:39 +0000
asID:                     268824
IP address blocks:        179.107.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3e:89:e9:29:d8:18:0a:6c:e3:34:d6:63:fa:ca:5f:6b:7e:d9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3
        Validity
            Not Before: Dec 20 16:19:39 2023 GMT
            Not After : Dec 18 16:24:39 2024 GMT
        Subject: CN=C24EFFA12A992A125BD4A89FABD593B2AD1585DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:74:ac:67:9d:bf:cd:e7:6b:8e:1f:36:e8:
                    c7:4c:da:3a:02:91:c4:db:c3:2a:ab:62:f2:80:f9:
                    8f:f5:06:4a:71:b7:76:f7:79:bf:36:a5:aa:c1:08:
                    d6:c3:22:52:47:72:7f:09:9e:b5:93:ef:84:40:41:
                    dd:b0:88:cf:e0:8d:31:61:24:9c:b0:a1:3c:fa:55:
                    0d:3d:54:9f:4b:70:1b:5c:4c:8c:9b:e5:c3:7d:c6:
                    33:dc:46:90:3d:82:7b:93:73:5d:8a:27:8a:eb:a2:
                    2a:45:9e:4c:ab:e3:8a:f8:bc:9b:1d:bf:0a:95:0c:
                    4a:1a:3d:57:46:23:2e:44:68:de:80:34:6a:41:de:
                    ee:42:19:d9:e1:08:16:26:d5:39:db:c1:9e:7b:31:
                    0b:54:5d:da:05:e1:19:f4:de:10:62:d9:49:26:78:
                    43:06:6b:5e:94:e4:64:16:88:06:cd:63:19:de:ce:
                    9a:28:67:52:ff:ce:77:e8:03:bd:ce:01:c7:65:9a:
                    a8:e2:f8:0e:73:58:59:50:78:c0:de:f8:ca:54:36:
                    a8:9e:f1:14:77:42:45:00:9c:1d:01:41:c1:dd:89:
                    90:ee:69:25:c5:3b:fa:0e:d8:4a:68:0c:e0:59:ca:
                    6c:01:a6:63:70:e7:39:0b:05:5c:b6:0f:89:59:67:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4E:FF:A1:2A:99:2A:12:5B:D4:A8:9F:AB:D5:93:B2:AD:15:85:DE
            X509v3 Authority Key Identifier:
                keyid:7A:2D:CE:8A:D3:C9:E8:A3:1D:53:D5:32:C9:68:E9:87:DB:BC:70:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:97:aa:7c:f5:e2:c5:98:f5:25:81:42:90:7b:21:ca:e8:99:
         dc:6e:f4:e7:51:6e:54:ea:2a:56:6a:72:39:c0:27:96:2a:fe:
         12:c5:58:01:82:c3:38:ed:15:26:cf:f2:7c:dd:3c:70:e1:c8:
         ff:7c:15:dc:9d:ff:5b:df:34:16:a8:d0:e8:38:35:29:fb:1f:
         6b:6d:d6:4c:e6:66:06:c2:f1:9b:b0:50:b4:ea:78:ab:8c:42:
         28:c0:7e:d9:70:4f:8d:e3:89:46:80:82:6d:4f:b7:e7:64:fe:
         24:d4:05:b1:81:a1:58:19:0f:2c:8e:cd:ff:cc:6b:77:90:6e:
         36:ee:c3:54:2a:d3:ce:c0:c9:eb:b6:fc:94:52:fa:47:fd:31:
         d5:f0:71:a1:89:be:76:61:f8:a4:66:0d:e9:f5:bf:5c:25:d4:
         aa:84:d2:7a:a7:92:0a:ab:1d:2e:7d:20:01:84:24:aa:86:19:
         87:13:74:9e:bb:6c:06:b2:e5:e7:56:a3:4a:86:d0:19:fa:92:
         92:ef:c8:e4:a1:3f:2e:e3:24:c7:6b:d7:df:49:bf:cb:00:4e:
         62:5f:0e:01:73:b3:71:c2:6f:6a:bf:14:6d:ce:15:d5:4c:e9:
         06:da:5c:83:0e:4b:e2:0f:28:10:a0:ff:1a:40:c7:bc:cf:82:
         48:b1:eb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org