Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137392e3130362e3132382e302f32302d3230203d3e20323632343431.roa
File:                     3137392e3130362e3132382e302f32302d3230203d3e20323632343431.roa (raw, json)
Hash identifier:          f19dEPkb9aQsgKQSU80+D9VIbvBZ4y0mSKKNluBbB50=
Subject key identifier:   BE:F5:61:0E:95:4A:62:37:F5:4E:2D:D4:70:A4:46:44:2E:6F:63:2B
Certificate issuer:       /CN=678F46772FCBBCB74F32E1F308389D268F55A45F
Certificate serial:       0D3FA693C4D9B44D1DCED97668811A658E1C53BA
Authority key identifier: 67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/678F46772FCBBCB74F32E1F308389D268F55A45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137392e3130362e3132382e302f32302d3230203d3e20323632343431.roa
Signing time:             Wed 28 Feb 2024 13:17:31 +0000
ROA not before:           Wed 28 Feb 2024 13:12:31 +0000
ROA not after:            Wed 26 Feb 2025 13:17:31 +0000
asID:                     262441
IP address blocks:        179.106.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3f:a6:93:c4:d9:b4:4d:1d:ce:d9:76:68:81:1a:65:8e:1c:53:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678F46772FCBBCB74F32E1F308389D268F55A45F
        Validity
            Not Before: Feb 28 13:12:31 2024 GMT
            Not After : Feb 26 13:17:31 2025 GMT
        Subject: CN=BEF5610E954A6237F54E2DD470A446442E6F632B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:51:60:1c:d2:15:ae:43:5b:30:7b:cd:f1:
                    36:58:9b:94:c9:2b:ce:ab:02:59:1b:2d:e6:6e:1b:
                    a2:83:1b:1d:a0:c8:92:1f:89:11:80:0c:8c:70:c1:
                    c7:1d:1f:e5:5d:e7:c8:7f:fa:f5:cb:86:ef:b0:9f:
                    33:d9:c2:38:99:d7:15:c1:03:a1:fe:16:01:7d:c1:
                    f9:f9:cc:6a:14:31:70:13:ba:a8:0e:e0:c4:30:c6:
                    69:e7:4b:70:f9:3b:f5:20:9a:36:37:4b:a6:28:17:
                    53:0b:7f:50:d7:2c:4c:44:7e:35:71:48:62:d9:e1:
                    6d:ee:39:c4:7c:c4:4a:09:27:e4:a5:e1:68:28:6c:
                    a1:3c:63:0b:b6:70:c2:77:5d:9e:f0:95:22:9e:49:
                    06:74:c5:2c:39:03:81:90:17:0a:49:44:55:2a:17:
                    10:a9:ab:0e:bc:84:60:3e:6b:6f:5f:b9:d5:80:0f:
                    c6:e5:ff:3e:36:22:6b:a9:d7:0e:0f:10:7c:d8:8b:
                    36:b4:4d:42:ac:3c:90:f9:00:af:08:b4:20:a0:82:
                    d7:7d:b1:fe:69:05:63:dd:62:54:09:a5:8b:e3:4d:
                    69:8a:06:16:b5:f9:da:c7:52:90:e3:ae:95:ab:02:
                    75:ca:a6:54:c6:97:7f:87:01:4d:9e:bf:ea:42:21:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F5:61:0E:95:4A:62:37:F5:4E:2D:D4:70:A4:46:44:2E:6F:63:2B
            X509v3 Authority Key Identifier:
                keyid:67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/678F46772FCBBCB74F32E1F308389D268F55A45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/678F46772FCBBCB74F32E1F308389D268F55A45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/3137392e3130362e3132382e302f32302d3230203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:31:58:1f:ed:16:21:46:33:a0:10:fe:34:ed:d4:f9:2a:a6:
         55:e7:a4:24:cb:c9:3a:c6:7b:4c:7e:d3:21:6f:95:f3:19:e9:
         c0:67:ed:78:ba:53:d1:2a:ca:2e:9d:56:e9:ac:16:c1:40:b9:
         e6:aa:cf:b4:d2:34:59:32:65:da:dc:d3:4c:7d:d3:f2:8d:5e:
         f8:1f:6d:5a:e8:f5:b5:ca:ed:68:71:76:54:ef:7c:90:21:e7:
         da:0b:e3:f2:ed:5e:45:a1:69:c4:bd:49:8f:48:79:a6:0c:96:
         e8:31:7e:cc:63:ce:c7:ed:e9:ff:b9:fa:0f:25:23:78:92:28:
         d5:25:ca:3b:18:c6:7c:69:df:f2:c4:fe:ac:b4:96:4e:44:ad:
         ff:d2:73:02:0f:94:e6:d0:f6:1d:74:78:6f:34:c6:ed:53:09:
         b5:b5:02:d5:02:55:c6:f1:d2:cc:35:d4:5c:4f:03:67:00:d1:
         72:27:a8:2e:37:3e:f3:2a:5b:89:12:f7:1c:12:d2:45:e6:b0:
         c9:bf:75:4a:1d:67:8e:87:e6:81:cd:1b:a5:bc:e5:ac:6c:44:
         59:95:78:6e:bf:1c:ad:bc:4a:5a:bb:39:86:b0:18:47:80:03:
         dd:fb:ea:30:de:95:93:a5:22:0f:3c:cb:f0:6d:8b:cb:51:78:
         1e:a1:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org