Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137392e3130372e3132382e302f31392d3234203d3e203238313731.roa
File:                     3137392e3130372e3132382e302f31392d3234203d3e203238313731.roa (raw, json)
Hash identifier:          DibMz5UD/V0qGl90ck6JnVPQinkMUH+jrZd9rECXP0M=
Subject key identifier:   2F:A8:35:FF:09:23:E0:00:3B:94:03:C1:15:A1:AA:A3:AE:A3:8F:DC
Certificate issuer:       /CN=685127D62A24E86E271BBBBFE4E01D67A0F2C1DD
Certificate serial:       70B2CA7CC96250DB27A0148F0428AE1706B5F93E
Authority key identifier: 68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137392e3130372e3132382e302f31392d3234203d3e203238313731.roa
Signing time:             Tue 02 Apr 2024 21:00:01 +0000
ROA not before:           Tue 02 Apr 2024 20:55:01 +0000
ROA not after:            Wed 02 Apr 2025 21:00:01 +0000
asID:                     28171
IP address blocks:        179.107.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b2:ca:7c:c9:62:50:db:27:a0:14:8f:04:28:ae:17:06:b5:f9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685127D62A24E86E271BBBBFE4E01D67A0F2C1DD
        Validity
            Not Before: Apr  2 20:55:01 2024 GMT
            Not After : Apr  2 21:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:18:bf:cb:12:ae:46:45:05:27:7e:49:75:ff:
                    86:4b:58:75:50:be:48:65:a0:9f:68:33:d4:25:02:
                    c4:f6:07:7e:af:72:db:b0:3e:2e:b5:87:02:09:d6:
                    86:53:d8:53:33:cb:cc:bb:5d:c9:e9:46:5f:d3:77:
                    18:f7:d5:07:f0:f7:eb:49:00:62:65:0b:85:73:89:
                    9a:a0:73:1f:5e:04:be:da:41:3f:17:eb:50:f1:4d:
                    f8:95:3a:81:d1:b9:0c:33:8b:d9:47:84:67:b3:46:
                    5c:ff:d0:5d:9a:a5:43:1d:35:28:f0:ef:42:65:d9:
                    ed:74:de:0f:42:b8:72:a5:34:7d:4e:30:8b:93:11:
                    31:ee:32:c7:60:b5:03:1b:60:24:c9:14:1c:7d:2a:
                    61:2c:ce:a0:de:15:21:2f:c8:9d:16:29:ff:c5:0e:
                    83:b6:cb:67:bb:cf:89:38:f4:9e:4c:da:0a:b9:81:
                    6f:8c:ed:3a:84:d1:a8:f4:c0:0c:9b:43:59:1a:48:
                    f9:72:4a:cb:54:67:b1:df:78:08:f9:4f:d2:c8:cd:
                    ec:15:af:c4:5c:0c:1d:44:e2:2d:b0:3c:a6:88:4b:
                    0b:38:b8:69:ac:ea:e5:66:20:dd:3e:a8:83:04:ab:
                    1a:2c:8e:ae:9d:09:bf:17:04:97:94:f2:17:f6:bd:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A8:35:FF:09:23:E0:00:3B:94:03:C1:15:A1:AA:A3:AE:A3:8F:DC
            X509v3 Authority Key Identifier:
                keyid:68:51:27:D6:2A:24:E8:6E:27:1B:BB:BF:E4:E0:1D:67:A0:F2:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/685127D62A24E86E271BBBBFE4E01D67A0F2C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137392e3130372e3132382e302f31392d3234203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:7e:a3:0c:aa:e6:2c:c8:5c:13:a3:17:46:30:21:90:89:80:
         ba:71:5f:9e:fe:b4:3d:c8:a5:ff:b3:5f:40:ce:38:d6:22:f2:
         ff:6c:2b:36:6b:60:5a:6f:b1:40:f1:30:d7:84:e2:a9:6f:f2:
         93:9c:ef:58:67:bb:19:75:a0:b9:2e:d7:c9:39:e9:fb:87:8b:
         63:75:3b:be:61:74:f9:92:9a:6a:5f:3e:b2:0a:4e:e4:5d:76:
         38:33:da:13:2c:b3:76:c9:ef:0a:fa:ac:62:ca:d4:f7:01:8c:
         b8:e1:65:88:e1:73:62:66:1f:34:e0:e8:9b:96:80:67:ae:f2:
         81:db:a5:51:de:7a:13:28:95:53:6b:d3:dd:ff:31:d0:68:68:
         db:df:d4:74:0a:66:25:8f:f5:a4:8f:67:76:11:ee:67:32:3c:
         2a:74:5b:24:02:a9:e3:3c:95:7c:56:d6:5d:e6:ba:65:29:28:
         39:6f:e7:ba:96:cf:e2:f0:7a:ae:37:a4:a3:22:13:35:98:59:
         c5:4c:19:3a:ad:23:53:9b:e1:e6:df:2a:94:3f:e4:31:52:59:
         b0:cd:5b:07:ee:e9:f1:f9:35:95:4a:45:a9:82:75:f2:8b:15:
         1f:60:51:e3:28:a4:aa:f3:17:ce:5f:ac:50:45:15:71:f7:02:
         e2:5b:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org