Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3234203d3e20323731373234.roa
File:                     3137392e3139312e3132382e302f32302d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          jEh0BICkj1lqzPnNeM8F5ou5zrnVrv+on6qc1h9VVrk=
Subject key identifier:   29:C1:90:50:D0:1F:93:31:36:70:E1:BE:A6:59:60:61:4C:3B:4E:13
Certificate issuer:       /CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
Certificate serial:       3CE8866B94F0F0145FE16C45CF9B33C9D1D15579
Authority key identifier: E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3234203d3e20323731373234.roa
Signing time:             Tue 28 Feb 2023 12:43:06 +0000
ROA not before:           Tue 28 Feb 2023 12:38:06 +0000
ROA not after:            Tue 27 Feb 2024 12:43:06 +0000
asID:                     271724
IP address blocks:        179.191.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e8:86:6b:94:f0:f0:14:5f:e1:6c:45:cf:9b:33:c9:d1:d1:55:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
        Validity
            Not Before: Feb 28 12:38:06 2023 GMT
            Not After : Feb 27 12:43:06 2024 GMT
        Subject: CN=29C19050D01F93313670E1BEA65960614C3B4E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:21:fc:bc:37:c4:1b:dd:8b:f6:46:7a:02:
                    5b:42:1e:77:2e:cc:a6:7e:5f:8f:47:c8:43:23:19:
                    c2:33:ec:9e:d2:d3:0e:0b:65:a2:a9:2a:7a:0d:79:
                    09:33:22:8d:b5:f4:4f:ed:51:37:13:cf:61:2f:dd:
                    5c:02:46:ff:4a:ab:33:cd:a8:7c:f4:4a:a4:f7:fc:
                    2d:bc:7a:7b:94:09:70:b5:98:59:69:5f:ff:f9:1c:
                    90:8b:6e:40:60:ba:6b:d7:eb:6b:af:3c:63:ae:4d:
                    d9:22:20:0e:24:a6:a6:c7:cf:e0:e1:bb:91:c1:94:
                    b3:42:53:86:cf:2e:33:7e:21:12:2b:41:67:b8:bc:
                    46:14:c7:ac:5b:01:be:84:2f:b3:7c:d5:68:28:83:
                    f9:39:08:34:8f:cf:86:eb:81:51:58:e2:6a:c8:68:
                    c4:5f:8b:52:64:8e:76:4b:87:d0:72:d1:27:94:e9:
                    77:23:54:ef:cd:f0:a8:93:4e:09:e8:69:e2:01:36:
                    05:ae:d5:f9:f4:9e:83:11:3b:e3:59:18:bd:e5:ed:
                    64:1e:46:65:39:87:4b:3f:5f:98:2b:57:27:d7:69:
                    b2:78:5c:81:82:85:4a:bf:ed:5c:df:42:c1:2c:7c:
                    06:7a:8a:6f:b4:27:ff:db:d5:9e:08:33:5b:5e:9f:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C1:90:50:D0:1F:93:31:36:70:E1:BE:A6:59:60:61:4C:3B:4E:13
            X509v3 Authority Key Identifier:
                keyid:E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137392e3139312e3132382e302f32302d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:86:2c:fb:2a:aa:ac:16:8e:55:a2:56:34:a8:99:f5:1d:
         42:24:b7:87:32:13:0f:48:c2:14:08:a3:d5:04:86:02:e9:9e:
         0b:32:86:2e:b9:5c:d1:1d:de:b7:ee:76:ec:6e:3f:7d:94:bf:
         94:99:ce:22:4f:64:1d:15:f8:1d:82:56:78:24:07:5e:59:85:
         54:4c:1c:27:85:c6:71:16:42:fe:67:3a:87:bb:ee:b8:51:61:
         9d:9e:b9:25:07:21:ca:2b:ae:80:ec:ab:90:32:6f:18:0e:67:
         dc:3d:88:6a:a2:c2:43:a3:76:18:b8:e5:bb:40:a3:80:dc:2d:
         05:0b:f9:0e:fe:10:38:25:3a:63:46:49:e4:9c:28:ee:cb:4b:
         b5:6a:3d:50:6d:2d:5a:95:50:8a:3b:4c:b5:32:8d:14:2b:d7:
         05:54:14:8c:f5:a5:92:e1:03:f2:7e:8b:9c:ac:f6:72:24:1e:
         6a:b2:15:c2:14:a2:cd:3b:52:91:bf:c1:a7:53:0c:f5:3b:c1:
         18:df:04:4d:8a:87:50:e2:24:ae:7b:1e:ad:47:6d:4b:2e:de:
         ed:53:d4:8c:2e:b2:e8:a2:8f:cb:8b:57:ea:d8:57:b2:67:d7:
         40:41:60:af:19:e5:c8:00:ec:de:53:54:98:2e:db:7d:8d:24:
         77:51:a5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org