Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3234302e302f32302d3230203d3e203533303539.roa
File:                     3137392e39362e3234302e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          jPCS/6D2/9Li3o9tvLnyXlR1OH4PCcvVCfNjA63yQFI=
Subject key identifier:   01:C7:03:FE:3E:A3:D4:F6:24:70:34:9F:AE:68:BC:8A:5A:F1:9F:AD
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       29E98FFB0CCB1C040E261C430FCAD28ECB7949FA
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3234302e302f32302d3230203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:16 +0000
ROA not before:           Fri 03 Mar 2023 12:13:16 +0000
ROA not after:            Fri 01 Mar 2024 12:18:16 +0000
asID:                     53059
IP address blocks:        179.96.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e9:8f:fb:0c:cb:1c:04:0e:26:1c:43:0f:ca:d2:8e:cb:79:49:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:16 2023 GMT
            Not After : Mar  1 12:18:16 2024 GMT
        Subject: CN=01C703FE3EA3D4F62470349FAE68BC8A5AF19FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:43:70:ae:a6:8b:18:c7:9e:bd:1c:b2:07:
                    6b:0b:75:81:02:fe:18:56:1e:93:6e:1b:a9:cc:80:
                    40:5b:f4:25:95:36:68:5f:95:23:17:35:b2:7f:07:
                    de:c7:5d:0e:00:b2:cd:28:03:a2:6f:cd:48:34:00:
                    7b:83:c4:51:36:06:6c:b7:d7:c7:28:f4:8f:27:6f:
                    8e:d0:97:6b:99:71:02:2b:0b:f5:76:cf:9b:72:2a:
                    e7:7a:97:aa:67:3e:7a:03:79:a5:70:33:8e:8b:12:
                    db:05:1e:f2:79:92:dc:e5:b3:f5:25:da:dd:fd:ce:
                    a4:b4:1e:ba:0a:d9:2e:35:97:ba:96:11:07:0f:5f:
                    21:36:a1:60:99:8d:97:8f:57:20:82:65:b5:a8:1c:
                    1c:12:ae:79:66:76:b2:b9:72:e3:2c:22:82:1e:e9:
                    aa:45:ae:f4:15:f6:e9:82:bf:99:68:bc:a2:7b:fc:
                    a0:17:02:85:8b:ef:30:03:b0:de:fd:06:e7:75:dd:
                    9e:cc:b8:9f:d2:12:2c:17:44:a1:82:7a:d0:ed:9d:
                    fb:4b:64:e1:4e:85:9d:09:6a:e1:17:16:d1:c6:62:
                    0c:b6:16:f9:8a:c0:f8:fa:2d:0c:00:0e:75:1e:d6:
                    26:e5:f0:ce:06:62:d3:3b:3e:43:cc:1f:a7:7d:d8:
                    93:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C7:03:FE:3E:A3:D4:F6:24:70:34:9F:AE:68:BC:8A:5A:F1:9F:AD
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3234302e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:0e:07:73:9d:3a:2e:3b:8c:14:cf:f9:c9:b7:df:97:00:a4:
         13:e3:4c:3a:11:20:da:37:f8:f0:28:b2:40:34:f1:23:61:9a:
         a4:37:c0:a6:43:6f:a4:e2:8c:47:24:c9:24:e4:a4:45:c0:44:
         63:aa:ed:e9:2e:4f:a1:85:fa:22:65:17:bb:b1:48:df:19:55:
         e4:13:f2:f6:f9:0c:c9:c8:16:27:6e:c0:43:11:1d:35:7d:a3:
         9a:b3:6f:2a:09:76:2f:11:14:f6:36:32:9a:5e:6a:ff:10:f2:
         3e:dd:8b:0a:cc:14:7e:9f:95:cb:1c:f6:c9:fb:a7:8a:c8:5b:
         4a:cf:26:3c:86:00:42:f3:12:05:52:33:f7:ee:12:28:fe:3e:
         70:3d:22:62:82:d6:10:6d:b6:19:a6:e4:f6:a3:ab:55:9a:84:
         5d:76:74:b7:f7:06:53:2e:2b:ef:3b:f0:2b:93:db:ec:9f:8a:
         7d:47:3b:36:c6:12:f3:52:d6:b4:95:a1:87:a9:23:87:81:eb:
         eb:50:5e:00:8d:67:c6:17:e0:dd:87:c7:a3:a9:f3:42:f5:60:
         4c:c2:8b:c3:8c:41:de:92:54:ad:75:e6:d2:3c:2a:4b:b9:c6:
         52:12:80:11:6e:cc:01:c1:95:0d:47:44:cb:c3:da:29:1a:c1:
         b8:02:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org