Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34362e302f32342d3234203d3e20323634383836.roa
File:                     3137392e3130382e34362e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          tFIrSxza2Z89MguiyVUsjjZwHjp8lt8My9CMPSPERpI=
Subject key identifier:   ED:68:59:F6:D3:CB:38:04:A3:77:B6:FE:A1:39:AC:2C:43:D1:46:4E
Certificate issuer:       /CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
Certificate serial:       6B6BAE364E2592E87A3C28332F35C72E5C6DA0CE
Authority key identifier: BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34362e302f32342d3234203d3e20323634383836.roa
Signing time:             Thu 17 Nov 2022 18:25:20 +0000
ROA not before:           Thu 17 Nov 2022 18:20:20 +0000
ROA not after:            Thu 16 Nov 2023 18:25:20 +0000
asID:                     264886
IP address blocks:        179.108.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6b:ae:36:4e:25:92:e8:7a:3c:28:33:2f:35:c7:2e:5c:6d:a0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
        Validity
            Not Before: Nov 17 18:20:20 2022 GMT
            Not After : Nov 16 18:25:20 2023 GMT
        Subject: CN=ED6859F6D3CB3804A377B6FEA139AC2C43D1464E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:11:e4:50:d6:97:24:e6:7e:1d:99:36:fd:
                    ba:1c:f0:ad:f1:71:03:3f:bb:bc:e0:3a:8d:08:a2:
                    fc:41:9d:cd:b7:59:2d:71:65:db:22:52:2f:40:0f:
                    47:87:f4:5e:df:68:b4:bd:cb:1c:c4:bb:57:46:00:
                    8c:93:2f:1f:56:b9:b3:7a:eb:63:8e:eb:48:79:92:
                    70:98:66:52:8a:02:b3:af:8e:6f:f9:12:79:84:fe:
                    b1:b3:77:5b:2f:e3:cb:74:c1:f9:23:08:ca:ea:24:
                    26:ba:8a:71:f5:80:1a:2c:3e:6c:4a:28:cd:f5:65:
                    6e:41:df:61:b4:af:8c:53:30:71:d5:b5:b4:0e:b0:
                    c1:47:7a:34:44:75:8d:97:09:1c:23:6f:34:22:24:
                    d9:c0:f7:2f:0d:a7:12:95:40:ac:fb:0a:dd:ca:79:
                    34:e3:2b:02:9f:e5:f1:b3:7e:90:fd:b7:c3:1b:d1:
                    12:dc:70:d6:6d:37:9d:c9:4d:65:de:b3:9f:87:72:
                    0a:15:1b:ae:26:71:5e:11:c1:70:1d:56:ff:b6:74:
                    96:4d:45:9e:45:fb:99:f6:91:3a:e5:4d:9a:26:6f:
                    62:34:1f:52:55:6c:48:73:a3:fc:db:85:9d:ca:0e:
                    c1:41:d7:cf:77:ab:39:61:f4:02:5d:12:91:06:64:
                    24:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:68:59:F6:D3:CB:38:04:A3:77:B6:FE:A1:39:AC:2C:43:D1:46:4E
            X509v3 Authority Key Identifier:
                keyid:BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34362e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:8e:0f:ab:49:5f:18:7a:76:49:df:27:53:65:f7:c6:4f:b3:
         9f:99:5a:c6:6b:ce:70:5b:20:c1:b6:1e:43:6a:fb:ae:87:be:
         82:67:50:44:4c:38:2b:c1:c0:e3:e6:e8:ff:01:89:f5:90:bb:
         d1:6b:8d:26:42:d7:81:bd:d5:9d:62:89:b3:9b:20:d5:82:76:
         ae:c4:03:1b:f4:89:f3:1c:a4:92:33:81:f6:af:2a:01:f2:2a:
         f6:4d:e4:b0:20:e6:ed:d2:cc:60:a7:7d:3b:ca:7d:4e:95:26:
         4b:bd:5c:21:87:26:61:be:f2:fc:2e:4a:01:64:d9:32:d3:40:
         91:a5:92:7e:eb:5d:e0:cc:89:44:6d:fe:aa:eb:57:57:11:c4:
         73:05:68:61:25:26:d3:ba:3c:43:38:5c:aa:54:77:22:0a:79:
         7a:bd:92:d3:72:68:4c:db:24:87:ae:25:98:8d:8f:9e:b9:b1:
         25:7a:fd:75:c5:ea:ad:16:c1:0c:27:44:33:06:0d:c3:af:3d:
         99:f6:12:01:a7:07:0f:9f:44:fc:8b:c6:80:a6:34:78:0f:6b:
         07:da:55:5d:b9:2a:cb:6f:cc:af:53:dc:8e:6e:4f:bf:61:0c:
         07:5d:3d:eb:da:81:c8:d4:62:02:55:d6:5a:8a:41:80:59:eb:
         b5:2b:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:48 2023 by rpki-client on console-ams.rpki-client.org