Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136312e302f32342d3234203d3e20323731363530.roa
File:                     3137392e36332e3136312e302f32342d3234203d3e20323731363530.roa (raw, json)
Hash identifier:          mZtez1OtSi5C8MZ0FfmfXDkAJc6ASnxuOpdBhYwUh0E=
Subject key identifier:   F9:D8:5C:C3:70:49:CF:73:D8:59:A5:55:86:57:06:52:D2:58:76:0F
Certificate issuer:       /CN=62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED
Certificate serial:       12225DA7E2249FFD57FD9C1B44A7C1987F2A5DD1
Authority key identifier: 62:E7:CA:E7:AA:D5:F2:C4:5D:76:2F:13:F5:53:A8:FF:38:D0:76:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136312e302f32342d3234203d3e20323731363530.roa
Signing time:             Tue 14 Nov 2023 19:22:59 +0000
ROA not before:           Tue 14 Nov 2023 19:17:59 +0000
ROA not after:            Tue 12 Nov 2024 19:22:59 +0000
asID:                     271650
IP address blocks:        179.63.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:22:5d:a7:e2:24:9f:fd:57:fd:9c:1b:44:a7:c1:98:7f:2a:5d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED
        Validity
            Not Before: Nov 14 19:17:59 2023 GMT
            Not After : Nov 12 19:22:59 2024 GMT
        Subject: CN=F9D85CC37049CF73D859A55586570652D258760F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:e8:fe:48:2d:ff:d8:48:81:54:29:a9:24:
                    00:07:7c:b3:01:e4:73:31:51:fa:3e:c7:5f:d0:52:
                    d0:a8:f8:c9:3a:2f:67:d2:a1:89:c2:bc:12:f5:b5:
                    cc:83:24:ce:d1:a4:a6:ff:64:ba:c7:f4:1a:cd:94:
                    f7:07:43:37:fe:55:71:06:3c:d1:34:c6:04:01:58:
                    4b:b1:79:93:f3:72:03:f1:6e:85:fd:98:79:f1:bc:
                    9a:9e:56:91:d4:e0:8d:a9:04:dc:79:c6:b3:80:23:
                    61:6d:3a:18:43:87:d3:2c:bf:7c:4e:d5:3a:62:e1:
                    a0:2d:13:73:cd:b2:80:92:eb:c6:f8:6a:f0:d4:81:
                    80:bd:43:7c:92:cf:c3:0e:69:6e:ca:8d:8a:44:78:
                    ff:db:91:7c:5f:91:73:ae:a1:65:4c:3e:9c:76:62:
                    b1:ba:be:72:93:77:f2:b1:1a:43:da:5d:5e:b7:61:
                    df:ef:35:f5:80:8b:47:44:03:4a:46:3c:81:94:61:
                    96:61:ee:95:77:10:83:0b:5e:95:a0:37:a2:59:81:
                    b4:51:8d:48:96:22:31:c7:97:9a:93:1f:f1:a0:42:
                    c0:a9:7f:cb:62:4f:ff:c4:41:b9:8a:48:cf:e8:87:
                    6a:cb:4b:22:43:55:e5:c7:85:76:b1:1a:de:38:6c:
                    23:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D8:5C:C3:70:49:CF:73:D8:59:A5:55:86:57:06:52:D2:58:76:0F
            X509v3 Authority Key Identifier:
                keyid:62:E7:CA:E7:AA:D5:F2:C4:5D:76:2F:13:F5:53:A8:FF:38:D0:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E7CAE7AAD5F2C45D762F13F553A8FF38D076ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/0/3137392e36332e3136312e302f32342d3234203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:a7:0e:d0:94:7f:92:d0:cc:68:cf:fa:90:d2:79:0b:6c:
         65:4b:99:ab:34:8c:fa:2f:ab:ba:fd:50:2a:f6:c7:b9:22:a2:
         8d:98:b4:43:5a:42:c7:44:d8:25:dc:2d:3c:ad:5d:df:84:19:
         a3:fe:30:50:bb:4f:ce:b5:31:55:68:ed:1f:93:da:d7:3a:0e:
         70:57:c9:d5:d9:35:4f:c1:e3:e4:fd:aa:3f:d2:cb:f5:ba:dc:
         12:05:ef:48:2e:58:89:6e:93:99:6d:1e:9c:15:35:78:f2:c3:
         e1:d6:95:36:a1:32:37:b0:30:ef:84:77:ba:52:f4:c1:29:94:
         68:11:ed:55:c1:c2:b9:69:62:91:46:a1:0f:1b:3a:d3:48:7f:
         69:75:37:d2:72:54:f1:96:41:dd:7a:a2:8f:a1:4a:87:e7:82:
         7b:02:ed:00:33:83:f5:76:c3:2e:05:1b:6e:93:e8:9a:b2:76:
         ca:05:1b:19:e6:85:71:3b:5d:75:07:c9:91:29:02:d0:b1:98:
         1d:1c:02:12:11:85:2d:84:7d:0c:b6:06:2d:21:2d:78:2e:d1:
         95:b3:bb:be:0a:b7:8a:95:f2:46:b4:ae:ed:05:a0:7a:2a:f9:
         db:47:6e:69:50:83:d7:2c:fd:e6:8a:c9:86:9c:38:af:0f:0e:
         e1:2e:38:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org