Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32302d3234203d3e20323632373430.roa
File:                     3137392e39372e33322e302f32302d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          VxKwA7R/Xasj+5swcYsZ5/Q6Nu0uJOBl0ZTkPRaUXak=
Subject key identifier:   10:E0:C4:8F:E4:D3:75:0D:65:50:F7:72:34:77:5A:0C:24:0D:80:59
Certificate issuer:       /CN=94E9EBE9869C286286ECD79575BCB63D45B3F9D5
Certificate serial:       7C03DE36C229652DADF04B4C4B98C59C7EDED0B2
Authority key identifier: 94:E9:EB:E9:86:9C:28:62:86:EC:D7:95:75:BC:B6:3D:45:B3:F9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E9EBE9869C286286ECD79575BCB63D45B3F9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32302d3234203d3e20323632373430.roa
Signing time:             Mon 11 Apr 2022 00:18:10 +0000
ROA not before:           Mon 11 Apr 2022 00:13:10 +0000
ROA not after:            Mon 10 Apr 2023 00:18:10 +0000
asID:                     262740
IP address blocks:        179.97.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:03:de:36:c2:29:65:2d:ad:f0:4b:4c:4b:98:c5:9c:7e:de:d0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E9EBE9869C286286ECD79575BCB63D45B3F9D5
        Validity
            Not Before: Apr 11 00:13:10 2022 GMT
            Not After : Apr 10 00:18:10 2023 GMT
        Subject: CN=10E0C48FE4D3750D6550F77234775A0C240D8059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:7d:a9:72:a1:25:fe:9b:57:2a:d3:16:51:
                    fc:a3:1d:30:2b:e4:0d:66:be:a1:c3:04:a3:40:0d:
                    54:aa:c0:e1:45:06:f0:67:20:ec:e6:1f:3d:01:04:
                    ef:fe:ad:bc:8e:f5:e4:57:80:b2:38:9b:2b:a6:6b:
                    51:ab:3a:49:e9:16:c7:f6:c9:6a:12:20:22:04:eb:
                    09:63:4f:54:4d:d2:69:e3:bd:5f:b3:fa:98:fc:54:
                    ca:e9:95:ec:0d:c2:2b:75:8a:97:bf:67:8c:46:9f:
                    f9:f1:34:d6:c5:32:9b:e2:ea:8e:e8:1c:8e:4e:69:
                    6d:4b:25:b7:b4:f5:18:e7:f0:c8:ff:3e:bb:0c:61:
                    ec:57:dc:97:94:31:a1:29:51:9e:4a:89:fe:6f:43:
                    f1:ee:97:c0:03:d3:7f:f1:65:5e:9c:ba:1c:2e:a9:
                    c1:26:02:3e:3f:d8:3d:47:f1:8c:97:5b:37:03:ee:
                    c6:62:f9:fd:23:4d:15:8f:71:75:2e:fb:22:63:e9:
                    11:2e:bd:3c:8c:59:bf:51:6a:58:a7:59:11:25:d2:
                    b7:de:10:29:2d:0e:9a:8b:8f:d3:91:00:f3:29:19:
                    11:ee:36:d0:b2:a8:b7:91:65:b3:74:85:76:49:44:
                    7c:9b:7e:54:fe:4d:0a:63:07:4e:30:06:3f:4e:55:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E0:C4:8F:E4:D3:75:0D:65:50:F7:72:34:77:5A:0C:24:0D:80:59
            X509v3 Authority Key Identifier:
                keyid:94:E9:EB:E9:86:9C:28:62:86:EC:D7:95:75:BC:B6:3D:45:B3:F9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/94E9EBE9869C286286ECD79575BCB63D45B3F9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E9EBE9869C286286ECD79575BCB63D45B3F9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3137392e39372e33322e302f32302d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:20:ec:01:e0:b1:93:7f:e4:a6:31:2f:6d:76:eb:63:ce:03:
         66:0a:1e:2a:a8:ea:1f:dc:94:5c:f8:0c:04:55:32:88:51:24:
         ed:fa:dc:4f:1e:c3:c4:ad:3d:29:51:cb:bd:a6:dc:5f:88:e0:
         fa:61:9e:ad:5b:38:14:43:e6:f1:4a:33:18:0a:72:3f:96:1e:
         5d:2c:72:09:55:42:2f:e7:da:c9:00:2f:47:04:c9:a8:8b:96:
         19:1a:c8:f8:a7:a0:43:79:eb:66:cf:1f:c7:79:30:d2:a4:ff:
         40:d9:92:5c:af:74:db:64:a3:38:ad:b6:31:d2:c1:b8:e0:78:
         4b:1e:0e:4f:7a:34:ee:cb:6e:17:6d:15:f6:fb:4a:d6:55:6d:
         82:53:e3:03:92:74:61:e8:5c:f3:f3:7b:39:1c:d6:f8:fb:3a:
         4b:a3:e0:0f:4d:a7:f9:a1:29:07:02:d9:fa:c3:ec:2b:48:c3:
         1a:97:8a:ce:a5:36:18:70:bd:ce:bb:e7:11:b3:49:01:95:60:
         71:8f:a7:fd:8e:6e:81:9b:54:e2:74:c9:cf:53:ed:ee:d2:24:
         db:81:a6:97:51:b3:9b:55:57:dc:19:39:80:50:53:e1:f7:8d:
         e3:ed:3a:24:26:e9:b4:c2:9d:b3:82:c6:fc:eb:79:3f:2a:5a:
         cc:87:bc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org