Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32342d3234203d3e20323731363530.roa
File:                     3137392e36332e3136302e302f32342d3234203d3e20323731363530.roa (raw, json)
Hash identifier:          eg/xbX3m6sykG9PDPXUOt5TAuueLqjAObPF3Mjl4XOk=
Subject key identifier:   8A:FD:3F:41:42:F0:E5:52:2F:70:D7:46:97:51:BF:A0:38:F5:57:82
Certificate issuer:       /CN=62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED
Certificate serial:       13623960D348470C450333EDCB085430CC4E28F5
Authority key identifier: 62:E7:CA:E7:AA:D5:F2:C4:5D:76:2F:13:F5:53:A8:FF:38:D0:76:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32342d3234203d3e20323731363530.roa
Signing time:             Tue 14 Nov 2023 19:22:56 +0000
ROA not before:           Tue 14 Nov 2023 19:17:56 +0000
ROA not after:            Tue 12 Nov 2024 19:22:56 +0000
asID:                     271650
IP address blocks:        179.63.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:62:39:60:d3:48:47:0c:45:03:33:ed:cb:08:54:30:cc:4e:28:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED
        Validity
            Not Before: Nov 14 19:17:56 2023 GMT
            Not After : Nov 12 19:22:56 2024 GMT
        Subject: CN=8AFD3F4142F0E5522F70D7469751BFA038F55782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:e4:95:1b:14:33:41:3a:ef:2b:ae:00:01:
                    57:fa:b8:d6:1e:00:71:df:1d:02:0c:e6:7d:ab:d5:
                    d8:9f:c1:b8:25:16:8e:d2:8d:01:71:f0:dc:e2:9a:
                    6b:19:95:41:e9:35:9e:1d:92:84:a3:a9:14:66:54:
                    c4:8e:04:cb:13:b6:3a:e3:5e:b9:28:8b:fd:c6:a8:
                    cc:80:ba:8e:d6:3a:5e:7b:2b:c0:38:67:13:67:67:
                    87:6a:14:6d:7b:b0:c1:de:3a:72:3d:d4:41:01:fc:
                    98:d7:26:c0:99:55:00:e8:10:b6:69:b2:eb:50:0f:
                    14:7b:c5:94:7e:f8:63:1c:aa:f4:1e:94:98:6d:88:
                    69:c2:49:61:5a:41:d9:bc:46:fe:9b:a6:83:16:2c:
                    0a:28:ac:57:69:cf:8f:aa:d7:0a:1a:ef:96:80:1d:
                    90:9e:15:85:d5:fc:ba:3a:53:f9:2f:55:ca:fe:34:
                    95:3c:17:57:5b:ea:59:2d:9a:23:f7:e0:9a:f2:9e:
                    0d:72:50:b1:68:d8:b1:89:38:27:f7:cc:a3:f4:c6:
                    44:cb:e3:26:a5:2a:6b:66:c8:4f:82:31:20:00:16:
                    93:e2:84:54:96:53:d2:33:8c:1e:47:1d:22:7a:ca:
                    24:94:bf:72:a7:a0:1d:2e:1d:1b:92:bb:8e:31:c5:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FD:3F:41:42:F0:E5:52:2F:70:D7:46:97:51:BF:A0:38:F5:57:82
            X509v3 Authority Key Identifier:
                keyid:62:E7:CA:E7:AA:D5:F2:C4:5D:76:2F:13:F5:53:A8:FF:38:D0:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136302e302f32342d3234203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:b7:2f:f5:09:56:b1:04:d3:61:b6:fd:15:a0:a5:b5:d0:
         e1:2a:85:ec:96:39:01:54:aa:3b:52:87:44:ad:5c:17:92:45:
         cd:51:a7:de:da:02:9d:0c:66:d1:5c:22:94:cd:1f:a2:32:f6:
         ff:05:a7:74:a3:ab:28:40:59:24:42:bc:a2:f5:96:e0:9e:00:
         81:18:7c:2c:fb:67:6e:22:54:4c:b1:d1:66:cf:2c:6d:a8:b7:
         b0:95:7f:9d:67:8e:de:17:d5:2d:7b:5a:31:09:43:21:fc:7b:
         73:e5:a5:75:56:5c:f1:6c:ef:19:ae:b0:2a:45:8e:ed:cb:57:
         b2:b8:79:5d:38:55:7e:81:75:5b:43:5b:03:7f:d6:44:6c:11:
         43:2f:6f:d7:9c:37:17:a1:ec:1c:16:9d:44:2f:15:ea:df:77:
         b3:10:ea:85:82:b8:56:37:54:59:1b:cf:79:5d:3a:3b:93:02:
         f0:d6:3d:1c:89:b8:e1:79:ef:a6:22:92:10:23:6f:53:91:dd:
         0d:f5:a5:3a:9f:51:70:0a:75:7e:2d:1d:bd:c5:2e:3c:c2:3d:
         2f:84:1b:71:0c:59:aa:57:5d:f4:c9:73:ff:bf:04:0b:07:cd:
         4d:83:ae:4a:ba:79:90:ff:0c:de:5a:bb:64:78:4d:3f:9e:e3:
         6f:f8:55:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org