Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/3137392e36332e39362e302f32322d3332203d3e20323731353534.roa
File:                     3137392e36332e39362e302f32322d3332203d3e20323731353534.roa (raw, json)
Hash identifier:          FpAIJYyXnGvJsyCOk8XqlclvL4UH1E5GLkipb+gvMQo=
Subject key identifier:   3D:12:11:E6:70:7B:45:58:D8:0E:23:81:9D:26:A4:58:B1:5D:54:A5
Certificate issuer:       /CN=880E36F20E1CF18198A5E42E120A8559F1C6F060
Certificate serial:       50574FF33BC3BA403F7D35F5AF42F8D5010B7F88
Authority key identifier: 88:0E:36:F2:0E:1C:F1:81:98:A5:E4:2E:12:0A:85:59:F1:C6:F0:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/880E36F20E1CF18198A5E42E120A8559F1C6F060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/3137392e36332e39362e302f32322d3332203d3e20323731353534.roa
Signing time:             Mon 11 Mar 2024 14:33:23 +0000
ROA not before:           Mon 11 Mar 2024 14:28:23 +0000
ROA not after:            Mon 10 Mar 2025 14:33:23 +0000
asID:                     271554
IP address blocks:        179.63.96.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:57:4f:f3:3b:c3:ba:40:3f:7d:35:f5:af:42:f8:d5:01:0b:7f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=880E36F20E1CF18198A5E42E120A8559F1C6F060
        Validity
            Not Before: Mar 11 14:28:23 2024 GMT
            Not After : Mar 10 14:33:23 2025 GMT
        Subject: CN=3D1211E6707B4558D80E23819D26A458B15D54A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:33:f7:c9:a8:55:a8:43:f6:72:54:b1:d2:
                    77:f0:d6:d8:0e:08:b5:80:6e:a7:d7:6e:46:e0:2e:
                    cf:5a:c9:ba:c5:b4:75:70:0a:c6:a0:42:52:9b:72:
                    be:b7:31:da:f5:79:38:24:e8:2f:b1:d5:a7:f2:75:
                    91:43:5b:f8:d0:d6:88:59:2c:83:f9:ca:b1:2c:58:
                    17:6e:33:29:db:5e:e0:e6:29:01:6d:12:00:42:dc:
                    60:8c:22:f8:82:82:0f:b0:d1:36:52:4f:42:1d:f0:
                    d7:99:96:7d:29:a2:e5:52:a5:bd:97:2f:40:cb:5a:
                    89:19:d9:17:35:7f:3d:06:cd:f1:5e:01:cc:7d:d8:
                    b1:88:ab:e3:e6:82:c9:89:47:3f:a7:af:8c:dd:1c:
                    d8:c4:1a:1c:60:2d:b7:66:33:91:c6:40:3b:5d:22:
                    38:2c:30:c9:2a:3f:16:e7:3c:dd:2f:a5:41:56:99:
                    e5:62:a4:a7:60:10:88:ea:73:ab:d7:56:2e:a0:fd:
                    4c:45:9d:ea:3c:3a:a9:c6:14:18:a7:fb:98:86:39:
                    20:32:fd:f3:13:c4:7b:e3:4a:a3:34:58:74:18:de:
                    a2:54:86:18:c9:ec:98:4a:15:5a:03:76:c0:30:eb:
                    02:c2:fc:00:0b:d6:c1:6a:ee:7f:b9:e4:24:20:17:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:12:11:E6:70:7B:45:58:D8:0E:23:81:9D:26:A4:58:B1:5D:54:A5
            X509v3 Authority Key Identifier:
                keyid:88:0E:36:F2:0E:1C:F1:81:98:A5:E4:2E:12:0A:85:59:F1:C6:F0:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/880E36F20E1CF18198A5E42E120A8559F1C6F060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/880E36F20E1CF18198A5E42E120A8559F1C6F060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAR1pbQPCj5KNbqNpJhYAfX2X3simGJycxbTBmuGYvS/0/3137392e36332e39362e302f32322d3332203d3e20323731353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:b2:8f:3d:f0:6b:22:2a:ff:3a:0a:20:58:ee:99:54:14:
         d3:41:75:aa:bb:71:40:f1:9d:e9:b5:90:16:23:5a:bd:a9:6d:
         72:4d:65:77:dd:ef:a2:9b:3d:a4:32:05:47:42:c7:98:a6:a0:
         d4:8b:ca:b6:a4:6f:c6:cd:41:bc:ce:53:bf:a8:2e:c0:42:3d:
         b8:98:09:60:a7:e7:4b:35:02:1e:32:84:4c:1d:77:a4:8b:ae:
         34:55:a0:dc:26:b2:b4:ac:ba:75:17:1b:a9:8b:9c:d3:e6:8c:
         10:df:de:fa:8e:d8:eb:8e:6f:19:02:38:f9:b5:b3:6b:12:0b:
         11:f5:65:1b:e7:19:b6:ca:0c:a0:01:b9:7a:7d:fc:13:63:16:
         f9:e7:7f:80:cd:a4:78:60:29:5c:66:a4:27:fe:3c:32:d4:c5:
         95:4e:b7:7c:d6:de:4e:89:72:f0:f1:42:96:67:db:ac:3f:d3:
         39:2c:95:71:0a:8b:29:a3:66:dc:9e:39:e1:62:d0:9d:92:8d:
         83:95:3d:82:bb:b5:4b:06:05:55:71:02:8d:0f:5f:27:cb:6a:
         93:c7:ed:d7:0c:f5:c6:75:5a:a3:33:f4:7d:66:79:99:ce:fa:
         44:5b:f7:6c:25:cd:fe:3d:6a:dc:d5:96:51:b3:ef:e1:f6:c0:
         93:63:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org