Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36302e302f32322d3234203d3e20323731353830.roa
File:                     3137392e36332e36302e302f32322d3234203d3e20323731353830.roa (raw, json)
Hash identifier:          zqmWrnICatwYIi3gVXcSZri6TYgMBu0B2ZmRdNr/VZw=
Subject key identifier:   64:80:91:A6:92:64:1B:AB:71:09:46:F3:61:55:DB:10:62:01:2A:86
Certificate issuer:       /CN=AD87A287E8D5A0CC9C97FF9E29E020E467C52AD8
Certificate serial:       33C02A8519B23E9574B870415BB24D93BAC918C2
Authority key identifier: AD:87:A2:87:E8:D5:A0:CC:9C:97:FF:9E:29:E0:20:E4:67:C5:2A:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD87A287E8D5A0CC9C97FF9E29E020E467C52AD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36302e302f32322d3234203d3e20323731353830.roa
Signing time:             Thu 04 Jan 2024 20:21:44 +0000
ROA not before:           Thu 04 Jan 2024 20:16:44 +0000
ROA not after:            Thu 02 Jan 2025 20:21:44 +0000
asID:                     271580
IP address blocks:        179.63.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c0:2a:85:19:b2:3e:95:74:b8:70:41:5b:b2:4d:93:ba:c9:18:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD87A287E8D5A0CC9C97FF9E29E020E467C52AD8
        Validity
            Not Before: Jan  4 20:16:44 2024 GMT
            Not After : Jan  2 20:21:44 2025 GMT
        Subject: CN=648091A692641BAB710946F36155DB1062012A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:5c:81:f2:c6:3e:c0:7b:11:07:de:67:30:
                    a4:cb:f9:8a:e8:0d:ac:a3:7d:fb:5f:35:99:f5:8b:
                    ef:b0:49:a8:b3:1a:fc:b8:63:fd:3c:d8:9c:32:41:
                    c2:46:24:7a:e4:42:8f:d1:84:1a:f1:86:a4:fd:e5:
                    7c:a1:e5:51:29:c6:54:5b:09:50:ab:9b:0b:5b:a9:
                    f5:e9:54:94:63:b2:0d:b1:0c:12:74:ba:9f:c4:a2:
                    f4:7c:40:51:b2:a5:b1:54:1f:39:05:13:e0:ac:52:
                    e5:7f:14:74:01:19:ac:5a:14:da:d1:cf:b8:33:8d:
                    00:f6:ec:e1:f1:5d:c8:6f:72:7e:53:b9:e8:61:f9:
                    08:9d:05:fa:ac:e7:e8:4a:b1:df:98:3c:73:21:fa:
                    5d:c0:dc:8f:e3:12:24:6e:07:e0:54:1a:e3:21:d3:
                    c3:a9:b1:1e:db:c8:e0:f7:d3:8c:89:75:f5:d7:32:
                    23:2a:41:24:e2:ce:60:08:a3:07:76:c4:f8:bb:1f:
                    92:53:41:cd:f2:c6:fe:e3:e2:89:b1:21:9b:fb:32:
                    c6:63:7d:20:84:cd:4f:5b:34:1f:21:38:41:82:b1:
                    ae:1b:02:4d:7e:59:02:67:f2:8f:23:68:c7:08:ab:
                    c7:e7:bb:7c:ed:9c:5b:7a:4f:de:ad:54:23:8b:a4:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:80:91:A6:92:64:1B:AB:71:09:46:F3:61:55:DB:10:62:01:2A:86
            X509v3 Authority Key Identifier:
                keyid:AD:87:A2:87:E8:D5:A0:CC:9C:97:FF:9E:29:E0:20:E4:67:C5:2A:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AD87A287E8D5A0CC9C97FF9E29E020E467C52AD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD87A287E8D5A0CC9C97FF9E29E020E467C52AD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36302e302f32322d3234203d3e20323731353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:a0:6f:57:5e:49:bc:eb:68:71:ed:79:43:67:c2:02:08:3b:
         5f:b8:39:a1:5b:3e:9a:ec:9b:3e:c1:66:db:c4:68:e0:92:42:
         2b:82:a2:76:40:90:62:72:16:9d:9c:95:b5:21:8e:0d:fb:06:
         3c:a7:1c:5c:88:f6:8c:27:63:fa:16:de:c1:81:68:05:b7:09:
         d8:dc:c0:17:2d:29:5f:6d:ca:12:29:7b:55:02:d7:61:66:fe:
         ab:de:ea:a2:ad:1d:0c:64:5c:ea:d1:26:db:49:a8:dd:c8:6a:
         5b:fe:df:6f:e9:d5:c8:0a:96:f3:8e:35:67:8e:d0:a7:73:c7:
         71:4a:aa:31:93:46:ad:34:b0:88:31:f6:d9:5f:d4:5b:8c:cd:
         c0:a3:53:46:3c:a3:7a:b7:d3:09:9c:a6:2e:57:5c:ea:d9:72:
         2a:57:b0:a9:84:b7:ea:88:ef:83:31:97:e7:10:c1:98:9a:79:
         c6:7f:6b:dc:7c:4d:6a:c1:4c:c7:c8:5d:93:4e:6e:57:f3:3e:
         0b:ae:0b:f5:ae:9e:9f:e1:16:02:8e:43:64:c4:52:aa:c8:f2:
         c3:6b:27:5a:1c:6a:47:d8:bb:73:46:91:cd:bc:ad:8f:2f:bf:
         c3:29:56:c2:7a:c1:12:35:da:f9:7b:32:a0:de:2b:47:f7:3b:
         10:50:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org