Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3137392e3132342e302e302f32312d3234203d3e203238323634.roa
File:                     3137392e3132342e302e302f32312d3234203d3e203238323634.roa (raw, json)
Hash identifier:          jyQQkSLWcF+6MQygHud4sAOUZ/ATzgaQ00xgNhopUzw=
Subject key identifier:   03:C5:7F:CC:FA:8F:A2:14:2B:D4:6D:47:08:6F:2D:32:9B:12:DA:E3
Certificate issuer:       /CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
Certificate serial:       2278D450413D28B0DD4F15DBF2930E362550580E
Authority key identifier: 28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3137392e3132342e302e302f32312d3234203d3e203238323634.roa
Signing time:             Sat 27 May 2023 23:14:55 +0000
ROA not before:           Sat 27 May 2023 23:09:55 +0000
ROA not after:            Sat 25 May 2024 23:14:55 +0000
asID:                     28264
IP address blocks:        179.124.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:78:d4:50:41:3d:28:b0:dd:4f:15:db:f2:93:0e:36:25:50:58:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
        Validity
            Not Before: May 27 23:09:55 2023 GMT
            Not After : May 25 23:14:55 2024 GMT
        Subject: CN=03C57FCCFA8FA2142BD46D47086F2D329B12DAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:dd:9a:8f:14:c8:94:9f:22:55:11:b9:9b:
                    60:6e:cb:8b:97:eb:c2:2d:fa:ca:28:80:6c:ba:6b:
                    02:3e:e0:e9:e6:8d:15:be:14:e7:00:fb:38:88:e9:
                    57:74:31:b8:99:9d:33:0f:b3:8a:b0:eb:a2:6f:2d:
                    b1:50:5d:59:f7:d5:14:82:a9:87:a5:f8:64:67:8d:
                    4e:36:f9:77:9b:d6:d3:07:00:2e:88:a6:b4:eb:4d:
                    6f:73:42:b6:42:76:e8:11:f6:fa:36:f7:ea:9f:10:
                    2c:da:1c:a3:80:a5:55:51:27:de:58:25:59:81:a2:
                    a6:6e:32:1a:d6:46:10:f8:33:c2:93:8b:87:ee:67:
                    14:ba:17:b0:48:84:1d:a3:9d:bb:47:4c:2a:7d:cc:
                    46:64:04:b6:4a:33:9e:5e:cb:f4:f3:2b:2b:ed:2b:
                    0c:ef:55:9d:98:7d:00:37:37:ac:75:33:e1:c7:9d:
                    bb:56:10:d2:c9:7a:4e:bc:aa:66:55:c7:91:0b:f2:
                    49:33:20:0b:c9:e9:b8:d2:6c:a2:19:81:c7:45:8c:
                    8f:46:02:c3:e9:e9:fc:63:a5:bb:86:da:7e:7c:90:
                    52:92:97:10:21:aa:74:db:7a:3e:6e:b4:b0:63:98:
                    3a:ee:c5:35:80:9d:ef:5e:16:a6:c2:c0:b0:09:4a:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C5:7F:CC:FA:8F:A2:14:2B:D4:6D:47:08:6F:2D:32:9B:12:DA:E3
            X509v3 Authority Key Identifier:
                keyid:28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3137392e3132342e302e302f32312d3234203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:9a:38:c9:77:ed:0a:c0:98:72:b3:5a:59:17:db:a5:a2:0e:
         59:8b:25:dd:69:5a:6a:58:3f:93:ab:21:39:d0:e8:42:d9:53:
         a8:bb:1c:97:eb:fa:73:79:63:24:a3:c7:30:9e:61:d9:a1:aa:
         19:ad:4e:fb:9e:b7:bb:2e:74:51:62:29:75:49:6d:20:af:4e:
         43:0b:f8:e3:45:32:4b:bc:b5:32:3a:60:64:59:c3:f1:59:18:
         42:26:68:41:a6:5d:b6:3d:43:20:9f:22:61:4d:49:13:41:b3:
         bd:5a:be:e4:e1:54:14:24:b4:fe:70:65:d5:e7:e4:a9:69:a0:
         47:64:2e:8a:25:1b:ae:bb:7e:bc:f8:b7:7b:2a:4f:77:58:a8:
         b2:e6:ea:73:4e:b2:a0:e1:2a:f1:d7:ec:30:37:8e:cd:6d:f0:
         34:b6:24:5e:b2:b0:5e:7f:18:a0:1b:eb:1d:16:30:ba:41:34:
         67:32:af:65:80:29:5d:9a:8f:7d:61:4c:50:d2:93:50:86:33:
         2a:3b:13:fd:ad:a2:2f:bf:bc:cb:4e:48:d8:61:aa:40:5f:c2:
         82:6d:d3:c5:7d:37:1e:86:68:a0:2d:c3:fd:b5:f5:99:55:35:
         9c:ff:94:c7:11:fb:34:75:c4:bb:bb:0c:5f:25:6a:26:df:5c:
         c0:82:b7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org