Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34352e302f32342d3234203d3e20323634383836.roa
File:                     3137392e3130382e34352e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          U0pKET6DfGkD3y7uBliplQzaDZXmMtZw7Aek1NRwSh8=
Subject key identifier:   39:B8:73:C4:12:AB:8F:BE:3E:46:6C:C7:65:31:66:00:BD:16:0F:B8
Certificate issuer:       /CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
Certificate serial:       15FDF356E98768BD18BA9D62B5C79826CF37B769
Authority key identifier: BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34352e302f32342d3234203d3e20323634383836.roa
Signing time:             Thu 17 Nov 2022 18:25:15 +0000
ROA not before:           Thu 17 Nov 2022 18:20:15 +0000
ROA not after:            Thu 16 Nov 2023 18:25:15 +0000
asID:                     264886
IP address blocks:        179.108.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fd:f3:56:e9:87:68:bd:18:ba:9d:62:b5:c7:98:26:cf:37:b7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
        Validity
            Not Before: Nov 17 18:20:15 2022 GMT
            Not After : Nov 16 18:25:15 2023 GMT
        Subject: CN=39B873C412AB8FBE3E466CC765316600BD160FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:d4:d9:84:95:32:50:e3:f2:ec:d6:e5:97:
                    3e:0c:ef:aa:b0:1e:28:c5:80:14:42:ec:f3:47:e2:
                    cd:96:84:5f:80:17:27:a8:83:4b:2c:9b:0d:f6:94:
                    0e:03:65:c6:0f:15:2e:7c:0e:e0:ff:8e:c5:a2:35:
                    e9:5a:8a:07:10:38:a7:58:a5:ce:84:bd:3d:cf:6b:
                    2a:3a:39:79:b9:81:df:ff:7b:f6:34:e4:ef:ce:e4:
                    d9:9c:86:73:ab:d7:2d:98:e4:62:5a:04:33:93:f0:
                    1e:2a:fb:43:00:e2:31:5b:85:97:1d:a0:1e:f7:d0:
                    a2:66:09:3b:69:18:30:37:7d:87:97:85:2b:a8:67:
                    dd:25:af:24:dd:8d:ab:68:67:9b:35:0b:dd:fa:cc:
                    76:f6:e7:bd:c8:0e:fb:c5:88:58:af:5c:f6:33:7e:
                    c8:e9:38:db:8b:ae:81:d1:fe:c7:58:64:2d:25:b2:
                    22:b5:b9:7e:0a:a0:ac:b1:62:69:4d:78:d0:57:8b:
                    19:d9:0c:c0:62:1f:f5:54:b7:ec:9d:14:3d:df:2c:
                    6d:5e:fc:3e:fc:c6:80:84:97:d5:f0:96:00:f8:4c:
                    2d:22:98:10:33:a1:6f:06:8d:70:07:d3:f1:78:c7:
                    e9:b2:6b:70:6a:49:f4:43:c2:6b:a0:bc:b2:8a:b2:
                    7f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B8:73:C4:12:AB:8F:BE:3E:46:6C:C7:65:31:66:00:BD:16:0F:B8
            X509v3 Authority Key Identifier:
                keyid:BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34352e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:85:b2:dd:34:38:ef:bf:a1:7d:d6:0d:1c:d2:84:1a:8d:
         07:18:ee:63:cf:f4:fb:6f:f5:26:a7:a9:97:e9:88:9d:d0:1b:
         40:a8:40:c9:0e:84:5b:4b:85:d8:c6:8c:ab:3d:58:af:1c:7b:
         93:80:af:bc:df:c4:37:04:f0:d0:80:5c:91:d5:46:d7:57:18:
         65:05:c9:ca:27:42:11:ba:65:f5:30:50:cf:4b:b6:70:46:7e:
         16:6c:15:12:06:b2:68:d1:23:58:8f:50:59:97:20:0d:3a:81:
         41:36:5e:ba:41:d3:ec:cf:6d:56:f0:f9:da:d4:9f:41:65:ea:
         6d:80:04:19:37:fa:c2:6e:df:ac:5a:25:9a:b1:28:49:51:e0:
         0e:96:94:f0:a0:c4:a5:c9:43:6c:7f:70:d0:1c:e8:a1:82:ec:
         41:bb:f4:5e:d9:e6:2b:84:4f:d6:7f:44:ca:82:ec:99:cf:b7:
         4a:05:1c:d6:57:49:53:6a:cf:47:79:3e:86:5c:69:a2:25:e0:
         2c:e4:48:71:10:d8:b4:f2:c4:f1:14:02:83:93:5b:46:2d:3e:
         9d:30:3e:07:6e:cb:6b:0e:b1:5e:bf:59:92:95:36:1d:75:16:
         68:07:a4:27:1c:86:15:89:00:e0:5e:0f:f6:c9:4e:4d:bf:32:
         96:40:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:36 2023 by rpki-client on console-fra.rpki-client.org