Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38362e302f32342d3234203d3e20323732363737.roa
File:                     3137392e36332e38362e302f32342d3234203d3e20323732363737.roa (raw, json)
Hash identifier:          GTqbTuFzieCzdXxi+K2a2OE24H8qhxBfjlDJ2u3s7Yg=
Subject key identifier:   CD:6C:7B:A9:07:B5:04:3F:E8:80:0B:EA:73:A0:88:95:A3:29:DC:7B
Certificate issuer:       /CN=0504345023EFC15C3D01D89B97881FD18D235AA8
Certificate serial:       3DAA8C220343D40F3ADC216A50AF79F5FF183069
Authority key identifier: 05:04:34:50:23:EF:C1:5C:3D:01:D8:9B:97:88:1F:D1:8D:23:5A:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0504345023EFC15C3D01D89B97881FD18D235AA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38362e302f32342d3234203d3e20323732363737.roa
Signing time:             Thu 22 Feb 2024 20:56:20 +0000
ROA not before:           Thu 22 Feb 2024 20:51:20 +0000
ROA not after:            Thu 20 Feb 2025 20:56:20 +0000
asID:                     272677
IP address blocks:        179.63.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:aa:8c:22:03:43:d4:0f:3a:dc:21:6a:50:af:79:f5:ff:18:30:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0504345023EFC15C3D01D89B97881FD18D235AA8
        Validity
            Not Before: Feb 22 20:51:20 2024 GMT
            Not After : Feb 20 20:56:20 2025 GMT
        Subject: CN=CD6C7BA907B5043FE8800BEA73A08895A329DC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:b9:7e:df:f1:60:3e:6e:a7:7b:4d:8b:50:
                    c5:c2:bf:f6:4d:cd:ab:0f:5f:aa:dc:6a:67:a7:d2:
                    d1:ef:7e:3b:5f:78:32:dc:a4:fc:ba:6e:d8:6f:47:
                    8a:3e:96:e5:64:76:2a:76:ba:0a:1e:fa:45:f9:33:
                    7a:d0:37:5f:2b:e0:d3:aa:26:b0:a2:51:ca:92:f7:
                    8f:23:00:a0:ac:cf:19:3c:5e:93:50:c9:29:36:9b:
                    64:9b:27:f7:53:a1:dc:4a:c9:47:a8:04:23:d8:1d:
                    c2:33:70:d1:84:55:5b:cd:7f:97:3c:fc:ff:77:47:
                    7e:3a:dc:14:71:e3:f8:d6:40:1d:a5:a6:f9:ae:36:
                    e9:f4:b2:b8:d7:5e:0d:01:7c:e9:2a:22:12:5c:17:
                    21:5f:50:23:83:77:7b:b4:3d:14:fc:fa:cf:60:87:
                    f6:3c:d6:f4:f6:94:d1:df:5e:c0:5c:47:63:3d:03:
                    3d:25:38:75:71:28:2a:12:75:1b:7b:38:e1:85:5a:
                    45:bc:bf:a8:71:64:fc:28:ef:52:b5:53:72:56:68:
                    0f:9b:04:60:53:5c:51:67:9b:95:06:c5:77:cd:91:
                    13:ad:05:24:74:ca:73:69:1b:61:4f:9e:92:4a:39:
                    ed:da:ec:87:c4:80:c2:93:88:5f:29:e5:c8:3f:b6:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6C:7B:A9:07:B5:04:3F:E8:80:0B:EA:73:A0:88:95:A3:29:DC:7B
            X509v3 Authority Key Identifier:
                keyid:05:04:34:50:23:EF:C1:5C:3D:01:D8:9B:97:88:1F:D1:8D:23:5A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/0504345023EFC15C3D01D89B97881FD18D235AA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0504345023EFC15C3D01D89B97881FD18D235AA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/3137392e36332e38362e302f32342d3234203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:74:46:bf:16:2c:e9:59:04:2e:ed:72:b7:c6:63:db:86:
         2b:45:23:d0:3a:66:3d:86:55:5a:96:5d:0f:c7:ec:6d:7c:c0:
         46:f9:9c:7b:e8:2c:3c:fb:69:87:7a:61:1a:03:32:18:eb:b8:
         1a:48:a4:56:a7:b9:f7:95:74:83:74:32:0f:31:53:58:c4:e7:
         b9:44:7a:5b:2c:a1:19:59:81:76:e8:71:09:10:4e:90:85:32:
         46:1a:be:73:66:4d:13:94:0d:aa:dc:61:a8:d3:ee:c7:a5:60:
         b5:66:83:b6:a5:2f:dd:03:68:a5:8b:60:71:05:76:0d:b3:c6:
         d4:fe:11:ee:44:6a:1b:54:bf:b7:31:c7:0c:7e:74:1e:cd:56:
         f7:b5:7a:6a:c9:2b:81:39:36:d9:55:71:f9:0b:8e:6b:e7:42:
         15:57:eb:17:89:7a:7a:9f:c3:89:b9:ac:ed:2c:ca:8d:b6:41:
         b8:63:c3:78:0b:81:90:b2:da:78:4b:74:43:51:63:e8:8d:03:
         ac:2d:25:19:de:4e:a4:2f:8f:64:d1:2c:1e:6d:6e:e4:f1:07:
         88:80:95:da:7c:d8:f1:66:91:01:09:4a:94:8d:a8:f9:04:3f:
         62:78:d1:02:bd:bb:f6:45:d4:7d:cc:99:06:51:04:4a:9a:fa:
         e3:d3:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org