Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3139322e302f32312d3231203d3e203533303539.roa
File:                     3137392e39362e3139322e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          1hAtDgb5hAIeCu0sFPHUBWMekEF2GOjE1Rr4hbefj3E=
Subject key identifier:   1B:DC:CB:AC:AA:3D:5B:A3:28:25:D3:30:8A:4F:BE:7F:CF:DD:3C:63
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       0FD3801F839287E7F330B1C6A582BE0A2D719C25
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3139322e302f32312d3231203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:14 +0000
ROA not before:           Fri 03 Mar 2023 12:13:14 +0000
ROA not after:            Fri 01 Mar 2024 12:18:14 +0000
asID:                     53059
IP address blocks:        179.96.192.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d3:80:1f:83:92:87:e7:f3:30:b1:c6:a5:82:be:0a:2d:71:9c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:14 2023 GMT
            Not After : Mar  1 12:18:14 2024 GMT
        Subject: CN=1BDCCBACAA3D5BA32825D3308A4FBE7FCFDD3C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:b6:94:b7:88:51:d2:71:88:67:51:bf:3a:
                    6d:b1:d4:77:90:0a:e1:31:91:0f:c2:8a:04:3c:a4:
                    ce:be:a1:92:20:4c:48:21:24:b8:8d:2a:83:70:eb:
                    e5:57:d4:dc:6f:52:cc:35:b6:df:ef:63:24:32:a3:
                    78:e1:3c:39:cf:01:7a:e3:5c:f3:55:98:e5:27:6b:
                    e5:c0:8e:f5:40:40:ad:37:be:a1:a2:f6:7a:73:21:
                    61:2e:f2:31:ed:d4:93:87:ee:ff:2c:8c:5a:b1:9e:
                    ee:89:57:29:9b:ec:a5:10:6e:e4:56:1b:51:af:bc:
                    82:3e:4d:a6:99:bf:1d:8c:be:4e:d1:82:45:79:23:
                    60:c4:a3:06:3a:82:b7:49:e9:99:44:63:0e:79:48:
                    04:1e:31:76:5d:fc:8c:8b:c6:5f:2a:09:e7:e5:65:
                    1e:cd:14:74:16:1f:6d:d2:8d:1b:6c:d1:b0:d2:3e:
                    c4:e4:13:73:94:e5:91:37:0c:18:89:78:ad:0d:de:
                    99:9f:2f:73:1f:d0:45:45:5a:ba:2b:0d:bc:fe:c7:
                    94:f0:bc:7c:7f:57:9b:12:b8:f9:8f:42:57:68:03:
                    13:05:c2:a3:bb:86:68:a4:b2:8b:6c:d0:95:05:55:
                    33:7f:f3:0f:0e:b2:aa:2c:eb:e6:d2:ad:3a:6f:9f:
                    3c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DC:CB:AC:AA:3D:5B:A3:28:25:D3:30:8A:4F:BE:7F:CF:DD:3C:63
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3139322e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:6e:35:b1:63:f7:fb:68:57:a1:0c:81:25:77:19:56:91:05:
         91:50:3c:40:c7:a5:55:73:af:1b:2c:aa:eb:3a:d4:15:c2:0d:
         84:d8:67:86:cb:ea:1d:1e:af:d0:15:03:c3:66:f0:76:9a:72:
         3d:90:ed:2a:46:d5:b0:0d:29:bb:84:3d:6f:f1:16:eb:95:21:
         28:9e:43:b7:20:cd:5e:40:82:fa:9b:ed:12:e2:cb:1e:70:78:
         29:bb:d3:c3:9f:0d:64:8f:84:9c:ce:06:fa:55:35:b7:45:78:
         e3:79:41:6f:25:74:14:f6:54:b8:f4:a2:2a:da:3e:4c:87:95:
         5d:e0:d4:b7:b1:03:c2:93:34:fc:30:5a:99:32:de:65:1c:17:
         5f:a0:cc:8c:5f:f7:1d:f9:71:55:b5:8b:ca:7b:e8:12:d5:dc:
         56:c6:f1:d9:03:15:57:87:62:91:91:36:78:6c:73:ce:1e:be:
         1a:77:bf:7a:3e:dd:9a:26:10:6f:00:c6:55:6e:7f:57:02:3a:
         6b:21:03:42:5d:48:30:b4:9b:99:56:6f:72:d9:e4:c3:54:97:
         70:29:40:19:f3:05:79:39:09:b6:b9:d8:13:b8:1d:a5:05:2e:
         9e:58:cc:04:27:36:de:97:f5:26:b6:8c:b3:68:56:0b:69:06:
         0e:9d:ed:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD9OAH4OSh+fzMLHGpYK+Ci1xnCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyMjM1NDA5OERBOUU4NDQ1QkFEMjQ0NDVGNTZDNTdF
RTYzOEUwRTAeFw0yMzAzMDMxMjEzMTRaFw0yNDAzMDExMjE4MTRaMDMxMTAvBgNV
BAMTKDFCRENDQkFDQUEzRDVCQTMyODI1RDMzMDhBNEZCRTdGQ0ZERDNDNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0O7aUt4hR0nGIZ1G/Om2x1HeQ
CuExkQ/CigQ8pM6+oZIgTEghJLiNKoNw6+VX1NxvUsw1tt/vYyQyo3jhPDnPAXrj
XPNVmOUna+XAjvVAQK03vqGi9npzIWEu8jHt1JOH7v8sjFqxnu6JVymb7KUQbuRW
G1GvvII+TaaZvx2Mvk7RgkV5I2DEowY6grdJ6ZlEYw55SAQeMXZd/IyLxl8qCefl
ZR7NFHQWH23SjRts0bDSPsTkE3OU5ZE3DBiJeK0N3pmfL3Mf0EVFWrorDbz+x5Tw
vHx/V5sSuPmPQldoAxMFwqO7hmiksots0JUFVTN/8w8Osqos6+bSrTpvnzwpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUG9zLrKo9W6MoJdMwik++f8/dPGMwHwYDVR0j
BBgwFoAUNiI1QJjanoRFutJERfVsV+5jjg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zNjIyMzU0MDk4REE5RTg0NDVCQUQyNDQ0NUY1NkM1N0VFNjM4RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MjIzNTQwOThEQTlFODQ0
NUJBRDI0NDQ1RjU2QzU3RUU2MzhFMEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzNzM5MmUzOTM2MmUzMTM5MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMz
MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDs2DAMA0GCSqGSIb3DQEBCwUAA4IBAQCNbjWxY/f7
aFehDIEldxlWkQWRUDxAx6VVc68bLKrrOtQVwg2E2GeGy+odHq/QFQPDZvB2mnI9
kO0qRtWwDSm7hD1v8RbrlSEonkO3IM1eQIL6m+0S4ssecHgpu9PDnw1kj4Sczgb6
VTW3RXjjeUFvJXQU9lS49KIq2j5Mh5Vd4NS3sQPCkzT8MFqZMt5lHBdfoMyMX/cd
+XFVtYvKe+gS1dxWxvHZAxVXh2KRkTZ4bHPOHr4ad796Pt2aJhBvAMZVbn9XAjpr
IQNCXUgwtJuZVm9y2eTDVJdwKUAZ8wV5OQm2udgTuB2lBS6eWMwEJzbel/Umtoyz
aFYLaQYOne0p
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org