Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32322d3232203d3e203631353837.roa
File:                     3137392e34382e3134382e302f32322d3232203d3e203631353837.roa (raw, json)
Hash identifier:          pJoE6zvhBZXFOjj9tpRr5FTEQiBaXbmiM8UyjjTD43g=
Subject key identifier:   92:3A:7D:F6:28:88:E9:47:C4:2E:B2:10:99:02:39:EF:F8:49:16:22
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       12816D927261EA5A94028E2A1F6990E36D0E6DD2
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32322d3232203d3e203631353837.roa
Signing time:             Mon 18 Sep 2023 13:56:57 +0000
ROA not before:           Mon 18 Sep 2023 13:51:57 +0000
ROA not after:            Mon 16 Sep 2024 13:56:57 +0000
asID:                     61587
IP address blocks:        179.48.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:81:6d:92:72:61:ea:5a:94:02:8e:2a:1f:69:90:e3:6d:0e:6d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Sep 18 13:51:57 2023 GMT
            Not After : Sep 16 13:56:57 2024 GMT
        Subject: CN=923A7DF62888E947C42EB210990239EFF8491622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:bd:df:f8:ba:3f:6d:68:bd:a5:a5:c4:23:
                    49:79:ec:59:f5:3d:b3:60:64:b6:02:c9:50:bb:ab:
                    cf:dc:0b:b9:74:40:b7:24:f9:1a:eb:66:a0:c2:46:
                    4a:29:1b:f5:55:65:d5:3c:1c:84:4b:2b:e6:c7:74:
                    2e:56:54:b5:f4:fd:16:e4:d8:08:6d:39:89:b2:0d:
                    00:60:32:c6:de:f9:26:d1:22:76:8f:67:eb:07:70:
                    d9:bc:bc:dc:1b:b7:bf:8f:92:dc:ea:bc:41:19:30:
                    ce:62:77:34:92:9c:8c:f0:a7:f2:f7:01:40:7a:2e:
                    02:b1:93:fa:a3:37:3c:d2:6f:8e:91:35:d9:aa:33:
                    33:1e:f6:c4:d9:d7:0f:bd:ae:e6:c3:ab:bf:49:8e:
                    e5:9e:70:26:f4:95:7a:a5:a0:ff:bb:68:ed:6e:2d:
                    6d:4a:84:cc:fd:27:63:1f:bb:11:0e:4b:78:45:a1:
                    80:a5:4f:1c:ee:2a:a1:7a:7a:08:9c:c0:0b:4f:0d:
                    10:6f:c4:25:f3:6b:79:0f:37:fd:00:1f:d7:c3:cd:
                    a8:44:09:3e:41:39:e2:cb:26:c1:bc:bf:a7:16:cc:
                    a1:b4:a7:aa:82:7f:6f:5c:ab:e7:c8:f5:73:39:50:
                    50:0e:a3:48:db:20:4c:4d:4c:bb:b1:d7:99:58:27:
                    72:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3A:7D:F6:28:88:E9:47:C4:2E:B2:10:99:02:39:EF:F8:49:16:22
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32322d3232203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:dc:51:52:b9:d3:01:68:d1:b7:56:37:f6:6d:86:03:67:05:
         f0:4d:9c:98:01:d3:20:36:37:37:1d:12:e8:56:18:b0:25:53:
         5e:ff:a6:ec:f4:a1:8b:bf:86:a3:0d:84:b3:b5:98:e2:0c:f4:
         99:52:16:31:51:ba:cf:df:cc:bf:26:da:32:24:53:3a:fc:45:
         03:8c:fb:5e:33:d6:f4:b1:e1:57:40:ec:2b:bb:69:93:2f:88:
         b0:51:5d:4d:6d:5d:27:a5:65:82:f3:78:74:50:16:3f:c5:68:
         57:64:78:74:62:2c:b8:91:38:b7:57:f4:70:51:5a:f9:3c:ea:
         18:0f:0a:27:fd:32:68:d7:fa:95:ab:fe:f8:7e:77:23:82:09:
         66:8d:34:93:cf:b8:1e:f7:fc:47:a8:a0:13:37:df:6f:eb:bd:
         f0:6d:76:f2:fa:91:72:90:bd:a6:f5:05:6d:5d:54:73:17:d3:
         4a:42:1f:ba:19:d2:82:0b:eb:7f:08:be:4f:fc:0e:92:7a:95:
         83:f9:b3:b1:8b:66:68:51:fa:c8:3d:5d:3b:d6:84:41:cd:0d:
         d3:95:96:57:2d:40:c8:e4:7c:b8:8f:8c:ab:38:a7:f9:27:fe:
         83:2c:0b:8e:61:77:99:94:c7:e0:04:e9:9a:62:28:f8:e3:7d:
         e4:a2:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org