Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa
File:                     3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          zDQRdoZeQJTYworfPvBVaDvaa2hiphHBrfMU+7tMCJ4=
Subject key identifier:   7F:7A:0D:F8:5C:1D:57:E0:77:4F:45:40:F2:B9:26:E8:CA:EE:60:FC
Certificate issuer:       /CN=5D39942929DA6ADF1083B57D7ED72A3A4653C28F
Certificate serial:       1F386BE809E7C01230E9E6E9AA75A68933E867EE
Authority key identifier: 5D:39:94:29:29:DA:6A:DF:10:83:B5:7D:7E:D7:2A:3A:46:53:C2:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D39942929DA6ADF1083B57D7ED72A3A4653C28F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa
Signing time:             Thu 08 Feb 2024 15:03:00 +0000
ROA not before:           Thu 08 Feb 2024 14:58:00 +0000
ROA not after:            Thu 06 Feb 2025 15:03:00 +0000
asID:                     264886
IP address blocks:        179.108.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:38:6b:e8:09:e7:c0:12:30:e9:e6:e9:aa:75:a6:89:33:e8:67:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D39942929DA6ADF1083B57D7ED72A3A4653C28F
        Validity
            Not Before: Feb  8 14:58:00 2024 GMT
            Not After : Feb  6 15:03:00 2025 GMT
        Subject: CN=7F7A0DF85C1D57E0774F4540F2B926E8CAEE60FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:b1:69:d2:30:d7:4d:ea:ff:65:da:fa:51:
                    70:dc:11:b8:b6:8c:55:26:1d:b0:dc:53:f4:95:05:
                    62:71:8d:ce:24:c9:c7:22:bb:8d:1d:87:2b:6a:01:
                    7d:40:36:9c:a3:b2:89:d0:a0:8e:fc:dd:49:97:14:
                    77:42:49:fe:4d:43:88:dc:e2:dd:6b:5f:3f:97:7f:
                    ce:51:04:de:3f:bf:db:4d:a6:ee:4a:e9:f0:26:26:
                    36:51:6a:36:2a:3e:ab:3f:ce:b1:91:b5:ef:b3:d4:
                    d0:03:17:e4:5f:7a:cb:7c:1d:10:ee:56:a0:49:7f:
                    81:cd:f0:65:14:b3:ed:3f:10:f7:92:47:44:03:25:
                    9e:ed:09:79:d4:0b:08:d1:dc:ec:c0:eb:84:2e:ee:
                    41:7b:a4:ed:1b:f4:68:42:67:9c:55:50:25:39:05:
                    f6:da:24:0d:ef:3a:e7:b6:a9:36:83:86:78:fc:a3:
                    20:8e:60:b5:8d:3e:f5:14:10:be:ed:fe:81:e3:f2:
                    2c:bf:b7:10:d8:57:93:e4:88:5c:e5:9e:5e:8b:3e:
                    54:80:53:2d:81:5e:33:5e:4f:13:90:83:4d:c3:d4:
                    13:39:69:35:89:97:b1:c9:12:0c:98:df:81:3f:e2:
                    4c:7f:45:33:85:83:f8:b2:29:a7:8c:88:21:26:da:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7A:0D:F8:5C:1D:57:E0:77:4F:45:40:F2:B9:26:E8:CA:EE:60:FC
            X509v3 Authority Key Identifier:
                keyid:5D:39:94:29:29:DA:6A:DF:10:83:B5:7D:7E:D7:2A:3A:46:53:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/5D39942929DA6ADF1083B57D7ED72A3A4653C28F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D39942929DA6ADF1083B57D7ED72A3A4653C28F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:8f:0e:31:21:c5:09:7a:c2:a2:92:92:b3:47:ca:88:e6:
         15:2d:ae:10:68:01:72:75:bf:81:6b:43:09:91:3c:08:44:d6:
         fa:71:04:f5:9c:81:93:1e:f2:27:00:78:70:5e:ef:49:29:84:
         44:e8:f1:92:46:9c:21:9d:61:47:ff:25:2f:82:9c:29:cc:dc:
         12:87:34:24:c9:11:fc:53:32:34:46:a8:09:0d:f5:49:c6:57:
         29:8d:af:bf:63:fa:d1:fc:ea:d2:0d:5b:f3:2d:ea:e1:12:e2:
         27:88:42:8f:2a:32:b0:65:99:e9:2f:41:2a:6c:d3:2f:da:7c:
         97:44:33:bd:d5:cd:ca:c9:71:87:e1:24:56:ed:cf:d6:bb:60:
         42:71:60:1d:d5:57:3d:53:1a:6d:24:d3:82:0a:d5:a0:2d:1a:
         a8:f7:2e:3f:47:e2:20:49:0f:58:74:04:52:3d:d5:66:bd:42:
         0a:4b:3f:97:42:4d:78:ef:eb:84:41:67:46:d0:ea:2c:32:26:
         95:1d:ea:85:63:59:47:c5:3e:0c:e5:2e:e8:71:81:6e:ee:3d:
         d6:cc:b0:c3:d6:04:58:7e:49:36:6e:4f:99:d5:38:85:4e:ec:
         cb:de:3a:a5:d2:23:36:f8:f3:72:b9:7e:07:ef:fe:00:35:27:
         cc:d4:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org