Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36332e302f32342d3234203d3e20323731353830.roa
File:                     3137392e36332e36332e302f32342d3234203d3e20323731353830.roa (raw, json)
Hash identifier:          d3kbTHpzOJ3K62kOfIheRTtIyfAY6YNRzpKK+E6dlJw=
Subject key identifier:   AC:D8:44:81:92:49:25:09:43:91:86:4C:DF:43:E6:21:D5:F4:09:9E
Certificate issuer:       /CN=F33BCBFC144255AA76CBEBEA3A97556863B8E89A
Certificate serial:       0DDD01B54EAE2E47F01E2CB19B3C550C09B4060B
Authority key identifier: F3:3B:CB:FC:14:42:55:AA:76:CB:EB:EA:3A:97:55:68:63:B8:E8:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F33BCBFC144255AA76CBEBEA3A97556863B8E89A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36332e302f32342d3234203d3e20323731353830.roa
Signing time:             Mon 08 Aug 2022 11:24:55 +0000
ROA not before:           Mon 08 Aug 2022 11:19:55 +0000
ROA not after:            Mon 07 Aug 2023 11:24:55 +0000
asID:                     271580
IP address blocks:        179.63.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:dd:01:b5:4e:ae:2e:47:f0:1e:2c:b1:9b:3c:55:0c:09:b4:06:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33BCBFC144255AA76CBEBEA3A97556863B8E89A
        Validity
            Not Before: Aug  8 11:19:55 2022 GMT
            Not After : Aug  7 11:24:55 2023 GMT
        Subject: CN=ACD84481924925094391864CDF43E621D5F4099E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:08:d3:d3:d4:28:de:bb:e5:29:84:c0:44:
                    db:5e:b5:3e:6a:ac:b4:99:e6:1f:c3:bf:5d:ca:72:
                    4d:45:f2:83:8a:94:d3:05:e4:e8:9d:d0:07:b7:17:
                    3f:4a:65:96:d3:9a:8c:6c:00:38:62:85:8f:ee:22:
                    fb:0e:b8:9b:d6:fb:34:64:91:85:e2:09:33:71:58:
                    de:0c:01:32:9f:46:7a:50:90:d1:22:43:f6:34:7e:
                    1e:64:c4:fa:8d:b5:b2:8e:61:d6:3d:83:80:44:f7:
                    64:e0:92:29:72:4b:bc:62:ae:45:d0:35:88:4c:0e:
                    53:63:b3:fc:1f:08:18:54:c7:0e:e7:5a:85:4b:cd:
                    a2:f9:a2:d3:2c:f2:24:c6:e6:b6:3b:8e:5a:6c:1d:
                    3d:81:32:b9:b3:66:11:89:4c:8d:2a:99:4f:7f:2e:
                    d0:5d:02:2e:a4:52:d5:fb:a9:42:a9:6b:f1:89:d3:
                    ed:6a:5a:b7:d7:27:95:06:f9:ef:2e:a9:d0:9d:a0:
                    0e:ed:7b:e6:ce:a3:cf:72:c7:46:4a:e1:7d:f7:1c:
                    67:e2:4c:a8:eb:f2:e7:e3:92:88:f4:07:db:de:7f:
                    60:d3:ec:eb:2a:b0:4f:f9:d7:23:b6:43:3b:3f:35:
                    53:bf:ce:1d:15:4d:7b:01:fd:2e:1e:e9:b3:3d:4a:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D8:44:81:92:49:25:09:43:91:86:4C:DF:43:E6:21:D5:F4:09:9E
            X509v3 Authority Key Identifier:
                keyid:F3:3B:CB:FC:14:42:55:AA:76:CB:EB:EA:3A:97:55:68:63:B8:E8:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/F33BCBFC144255AA76CBEBEA3A97556863B8E89A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F33BCBFC144255AA76CBEBEA3A97556863B8E89A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/3137392e36332e36332e302f32342d3234203d3e20323731353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:0f:3b:cf:db:d6:87:6d:cf:1c:51:20:b2:47:e8:35:6f:06:
         b0:c2:c7:0d:3b:06:20:90:ec:84:ff:48:3a:ec:ed:57:12:90:
         e3:df:eb:e1:ea:c3:74:cd:1c:a2:d6:14:ac:43:65:d6:c6:a0:
         95:61:19:4d:07:90:da:f5:47:c2:52:91:ab:8a:da:a1:58:80:
         1b:86:76:6a:ac:0c:c0:f5:bc:cc:07:a9:b8:46:05:e1:0a:5a:
         20:6d:94:bc:14:c3:fe:fe:42:44:77:11:61:24:28:7c:04:3e:
         6a:73:30:45:c0:f0:95:12:dc:42:91:18:8f:b6:11:60:70:60:
         ed:91:48:cc:89:2b:f9:9a:a9:9a:11:92:a9:d0:58:48:d5:7f:
         e6:9b:80:3e:87:fe:77:2c:5f:11:48:df:98:5f:37:34:bf:ef:
         fb:43:2d:f3:90:9e:55:5e:26:5b:9c:07:fd:db:ff:8a:1d:58:
         d2:16:2a:b6:76:71:3b:11:83:2a:a7:5d:cd:51:19:13:2f:33:
         99:b2:b2:65:3c:80:44:97:4a:6e:a9:fc:f9:72:04:a5:a8:00:
         fc:73:bd:89:df:f6:56:b0:78:32:d5:b7:6b:13:3a:6f:0a:c3:
         32:3f:6a:2a:82:19:9b:92:e7:dd:fa:19:45:cf:05:57:ca:6c:
         ee:91:69:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org