Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa
File:                     3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa (raw, json)
Hash identifier:          t3EpRKFHJrhlUhWYPmeT9vUH1N5PgTlIDPv+xWOrN0w=
Subject key identifier:   E1:4E:1A:2B:AC:2F:5C:0E:74:05:C8:02:6F:F6:F0:86:18:D8:9A:5E
Certificate issuer:       /CN=967EAC98B729C911A753A351D688123490AD5ACB
Certificate serial:       4FA567F814D11F2E35CB8AFA17F3D29E1868174A
Authority key identifier: 96:7E:AC:98:B7:29:C9:11:A7:53:A3:51:D6:88:12:34:90:AD:5A:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/967EAC98B729C911A753A351D688123490AD5ACB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa
Signing time:             Tue 09 Jan 2024 12:18:52 +0000
ROA not before:           Tue 09 Jan 2024 12:13:52 +0000
ROA not after:            Tue 07 Jan 2025 12:18:52 +0000
asID:                     271101
IP address blocks:        179.48.216.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a5:67:f8:14:d1:1f:2e:35:cb:8a:fa:17:f3:d2:9e:18:68:17:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967EAC98B729C911A753A351D688123490AD5ACB
        Validity
            Not Before: Jan  9 12:13:52 2024 GMT
            Not After : Jan  7 12:18:52 2025 GMT
        Subject: CN=E14E1A2BAC2F5C0E7405C8026FF6F08618D89A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:27:c3:04:a9:fb:e7:b5:e0:30:72:9d:68:4b:
                    73:65:56:02:37:df:31:41:a5:20:b3:d2:ff:cc:92:
                    c0:32:5a:39:4f:1a:c8:55:f5:9d:8a:14:3b:e5:05:
                    25:da:6f:be:58:51:00:8c:90:79:64:55:c1:df:39:
                    6e:2a:98:97:b2:51:52:6c:37:3c:ee:73:3a:30:55:
                    91:b9:99:86:26:72:3a:a1:85:7d:af:dd:47:cd:4f:
                    1e:39:e4:04:65:af:0c:76:92:9c:27:c4:04:0f:13:
                    24:a5:f8:4c:6c:c4:d6:e6:59:29:70:5b:0e:04:2d:
                    1e:b0:e5:d9:82:a7:5d:f6:08:1f:c1:73:bd:c9:42:
                    97:d1:17:98:a2:0a:11:58:98:b2:de:f2:e0:d8:48:
                    80:72:99:94:ff:2d:a9:77:ed:35:fe:65:30:fb:3c:
                    70:1d:8e:1f:36:38:ec:17:86:13:6f:52:46:4e:50:
                    c5:13:1b:ae:b0:49:b3:db:93:9b:2f:94:29:f4:de:
                    96:0d:f9:59:1e:cd:1f:a8:b6:a1:29:ef:02:04:d2:
                    32:a2:9f:35:80:a8:bf:88:42:4d:04:0f:83:81:2d:
                    1e:13:87:2a:4a:a2:d9:27:bd:d1:79:69:7c:37:44:
                    89:82:f1:c4:1c:bf:9a:37:0f:74:b9:5e:cc:b3:46:
                    d0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4E:1A:2B:AC:2F:5C:0E:74:05:C8:02:6F:F6:F0:86:18:D8:9A:5E
            X509v3 Authority Key Identifier:
                keyid:96:7E:AC:98:B7:29:C9:11:A7:53:A3:51:D6:88:12:34:90:AD:5A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/967EAC98B729C911A753A351D688123490AD5ACB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/967EAC98B729C911A753A351D688123490AD5ACB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:72:6c:62:d9:c4:ce:84:13:ec:b8:c3:0c:94:71:2f:17:
         4f:c0:7c:64:d3:fc:c2:1d:0d:ee:d5:78:e0:86:92:65:5c:0a:
         94:b5:42:61:4b:7e:ec:ed:73:73:29:43:d1:9d:55:00:7f:74:
         a2:79:ab:95:92:1d:85:fe:54:f1:dd:e3:b3:f6:38:f0:67:d0:
         ea:08:7f:96:51:f0:6a:a5:49:76:ee:4b:7b:b7:fe:1f:c4:ad:
         74:93:88:4e:32:b3:b6:74:d8:88:75:f0:3d:ab:c5:1e:81:d2:
         23:26:eb:5c:74:a4:6f:06:41:cc:aa:45:be:1f:5c:a6:4d:f6:
         55:94:4e:21:c7:73:a4:8c:1e:de:ce:fe:df:d5:e7:9e:b7:60:
         09:88:b7:f6:35:a6:47:34:68:a4:a4:2f:51:4e:69:b8:84:89:
         14:91:fe:fa:e0:19:ca:cb:1d:9d:eb:74:22:7d:37:58:60:0b:
         42:44:cb:2a:26:f6:04:bb:bc:57:e6:1e:08:63:e7:84:a8:e5:
         69:49:0d:20:f5:4e:8f:3e:8b:8d:38:ac:24:52:b0:04:af:ba:
         d6:72:82:0d:0d:b5:90:c2:82:4e:e3:a8:a7:00:e7:3a:f4:54:
         d5:40:a9:fd:c0:39:f7:cb:40:c1:a0:44:ea:7e:14:2e:21:96:
         10:a2:25:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org