Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/1/3137392e3132352e31322e302f32322d3234203d3e20323731373337.roa
File:                     3137392e3132352e31322e302f32322d3234203d3e20323731373337.roa (raw, json)
Hash identifier:          athID6XlDWL5XMugb6AJtiCQnipt3ktaj+Cv0fsnclY=
Subject key identifier:   72:B9:11:B8:DE:F0:66:42:75:F8:04:98:B7:83:73:60:5A:51:D4:F0
Certificate issuer:       /CN=70263C6B4E9B9CFA414F3898519C9B8B44D12959
Certificate serial:       2CF8F3CC296A0E1EE191738D5733019ED2D90037
Authority key identifier: 70:26:3C:6B:4E:9B:9C:FA:41:4F:38:98:51:9C:9B:8B:44:D1:29:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70263C6B4E9B9CFA414F3898519C9B8B44D12959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/1/3137392e3132352e31322e302f32322d3234203d3e20323731373337.roa
Signing time:             Mon 11 Sep 2023 12:11:29 +0000
ROA not before:           Mon 11 Sep 2023 12:06:29 +0000
ROA not after:            Mon 09 Sep 2024 12:11:29 +0000
asID:                     271737
IP address blocks:        179.125.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f8:f3:cc:29:6a:0e:1e:e1:91:73:8d:57:33:01:9e:d2:d9:00:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70263C6B4E9B9CFA414F3898519C9B8B44D12959
        Validity
            Not Before: Sep 11 12:06:29 2023 GMT
            Not After : Sep  9 12:11:29 2024 GMT
        Subject: CN=72B911B8DEF0664275F80498B78373605A51D4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:1c:86:e4:cd:d9:fc:d8:99:e5:1f:b0:e1:
                    6a:53:82:b9:fc:ec:75:be:b0:6e:95:5b:54:f4:77:
                    f9:58:07:63:e3:43:9d:48:95:17:eb:bc:fa:14:84:
                    8e:60:58:2e:b2:a7:1e:b1:58:7f:13:d4:c3:8c:48:
                    51:89:13:c2:80:0a:7f:00:fb:97:7c:0c:b0:1b:23:
                    b2:aa:36:a4:2c:0c:8f:01:db:a2:af:64:af:23:d3:
                    1e:71:36:f1:c2:e2:76:cf:da:5f:e0:23:d5:89:cb:
                    9a:61:8e:12:87:8d:0e:8d:f5:9e:94:62:b3:5c:1a:
                    84:71:87:13:99:63:48:03:1c:fb:4b:d0:2f:24:0e:
                    3c:c3:42:2b:83:ba:a2:75:a8:7e:4d:4e:35:1a:b3:
                    33:67:4e:b1:c8:3e:9b:01:1c:2d:0e:62:c4:b3:3a:
                    e5:ba:8c:d8:a3:ea:98:7a:9f:d2:7f:d1:2f:e1:d6:
                    3f:41:d0:59:03:ef:d3:a3:0c:00:55:40:68:92:7f:
                    59:34:97:a8:79:e8:b0:9c:5e:be:42:e5:0e:dd:3d:
                    a3:c7:ce:c8:b2:a1:c1:de:b9:f2:4e:44:1d:b6:11:
                    b6:2d:60:66:64:2d:21:8a:28:7f:34:7f:cd:10:02:
                    ca:27:1c:f2:86:06:5e:4d:22:27:cf:2f:1d:81:bf:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B9:11:B8:DE:F0:66:42:75:F8:04:98:B7:83:73:60:5A:51:D4:F0
            X509v3 Authority Key Identifier:
                keyid:70:26:3C:6B:4E:9B:9C:FA:41:4F:38:98:51:9C:9B:8B:44:D1:29:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/1/70263C6B4E9B9CFA414F3898519C9B8B44D12959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70263C6B4E9B9CFA414F3898519C9B8B44D12959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/1/3137392e3132352e31322e302f32322d3234203d3e20323731373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:02:a6:7e:2b:bd:db:14:2b:9a:89:7f:50:d4:05:51:07:79:
         26:4d:bf:81:96:17:d8:15:60:53:8b:15:56:12:70:f2:bc:ce:
         59:0a:86:5f:92:ed:3a:d0:bc:97:a1:0d:32:28:81:a9:17:7c:
         68:f4:59:13:ce:cf:c1:2c:1d:5b:bf:c9:89:55:ac:41:eb:fa:
         01:62:6c:73:03:59:cc:d1:30:b8:98:5f:3e:95:0e:3e:6f:4b:
         c0:72:f6:92:70:13:49:9b:ea:46:14:7e:2c:ff:ec:84:50:25:
         d8:e2:47:24:74:4b:56:33:07:09:9f:29:84:05:81:91:a6:88:
         56:0e:4a:98:f2:54:81:36:62:5a:5e:53:5d:8c:df:a5:41:bb:
         24:00:8a:dc:72:02:b5:b6:19:b7:32:36:12:63:d9:d0:84:fb:
         6e:d5:33:45:a3:25:8a:d8:44:dd:63:b3:6b:f0:cf:32:de:87:
         f6:48:82:d2:f4:24:fc:4e:09:56:5b:f7:53:47:b1:2d:25:89:
         da:67:23:51:3e:3f:94:5e:fc:f3:fd:4e:6a:cb:a1:36:0d:a5:
         05:5f:3c:bb:1d:10:3a:85:6e:66:cf:4d:45:1e:dd:da:e0:06:
         ea:ec:eb:55:d9:73:eb:a5:3e:26:7b:ad:18:67:cc:71:24:08:
         52:ec:98:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org