Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa
File:                     3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          ilr/ezFFOI0PdjIuSZVGaif8etLzFhMHn9Z+s9tRnMc=
Subject key identifier:   6A:CF:83:52:4B:6B:8A:F1:FC:01:78:49:76:8F:9C:5A:96:79:42:1F
Certificate issuer:       /CN=BA1DB4956D8F5EFAF0970F171D6763A286633C4F
Certificate serial:       344CAB2C7DDD192DBA55E9E218AB1C25DF38F4BC
Authority key identifier: BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa
Signing time:             Thu 24 Aug 2023 20:00:00 +0000
ROA not before:           Thu 24 Aug 2023 19:55:00 +0000
ROA not after:            Thu 22 Aug 2024 20:00:00 +0000
asID:                     262903
IP address blocks:        179.109.56.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4c:ab:2c:7d:dd:19:2d:ba:55:e9:e2:18:ab:1c:25:df:38:f4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1DB4956D8F5EFAF0970F171D6763A286633C4F
        Validity
            Not Before: Aug 24 19:55:00 2023 GMT
            Not After : Aug 22 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:67:0c:28:0c:21:cf:9b:8c:75:5d:e5:20:
                    80:ed:89:d0:69:dd:2e:5e:33:ec:48:af:af:58:db:
                    37:e6:78:13:3d:2e:49:97:47:5a:1b:22:d8:7c:43:
                    06:f6:39:f0:dd:f2:95:87:a8:aa:17:74:4e:18:e7:
                    88:d0:43:3a:08:38:88:0c:1c:29:5d:2a:d7:dc:5c:
                    f6:ed:c6:3b:31:61:75:33:c1:f1:b3:ef:5c:ea:47:
                    af:5b:ea:dd:a3:f4:0d:5f:59:e0:bd:85:ad:41:1f:
                    fd:b1:0c:14:de:b8:ee:48:9a:dc:68:3e:37:92:67:
                    7d:a3:6a:be:f1:0e:c5:59:ef:0a:ca:8f:a6:1c:c1:
                    c8:75:8f:70:cd:db:a4:81:ab:b1:b6:76:50:ee:76:
                    c4:9b:c2:0a:23:96:71:b9:72:89:a7:c6:9a:b2:12:
                    ed:23:e0:67:53:a5:07:a7:da:ac:5d:11:6c:7d:7f:
                    66:74:10:1a:09:9f:e6:5b:19:53:23:6a:f3:2a:38:
                    a8:67:3c:58:e8:e3:14:dd:8d:e3:67:2e:4b:c3:d4:
                    c8:1c:3a:6f:fa:36:dd:88:e6:b5:6b:d5:46:28:29:
                    2a:6a:32:d6:e9:e4:ae:56:91:43:1a:80:12:56:d3:
                    b5:f6:b0:d7:7a:2e:d4:d6:98:d2:1e:7b:21:98:c6:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CF:83:52:4B:6B:8A:F1:FC:01:78:49:76:8F:9C:5A:96:79:42:1F
            X509v3 Authority Key Identifier:
                keyid:BA:1D:B4:95:6D:8F:5E:FA:F0:97:0F:17:1D:67:63:A2:86:63:3C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA1DB4956D8F5EFAF0970F171D6763A286633C4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/0/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:3a:65:11:a2:82:cd:fa:89:cf:1b:d9:b2:d3:a7:02:fa:96:
         f1:8f:16:47:2c:19:bf:f3:55:aa:cb:ff:94:01:12:05:6f:9f:
         19:51:26:a6:4e:5c:4b:ed:4e:e5:ac:66:e7:a5:5d:ec:8d:06:
         5c:10:10:4e:fc:44:f0:5b:8c:a8:0e:bc:fc:84:6f:09:29:0e:
         56:33:ee:8f:d7:18:e7:19:58:15:bd:42:c3:0d:69:55:e9:20:
         58:f2:ba:60:1d:55:5d:9c:ec:9a:a1:88:d9:68:38:14:43:16:
         de:16:82:e2:e6:a0:c3:7f:56:bf:0f:5a:07:c1:23:b1:ce:76:
         41:ce:1f:97:98:90:7a:a2:9d:22:bc:de:cd:54:a0:8f:d1:f3:
         35:fc:61:79:bf:56:54:75:a8:17:75:4a:94:9c:88:55:06:7d:
         a4:8a:c9:f4:94:78:8b:1a:32:6e:16:d1:09:1d:a5:a8:58:a4:
         5f:ba:5f:cc:c2:ba:45:e1:5b:71:c9:2f:8d:68:32:57:e9:2d:
         77:bd:46:14:7e:06:c2:d2:be:bd:51:57:98:d0:87:8c:ee:a6:
         0f:5b:41:e4:43:50:8c:0f:e8:26:a8:d0:ee:9a:77:06:53:77:
         c6:21:51:4b:83:00:27:6b:d2:b8:3f:8a:4b:ce:7a:dc:ce:ce:
         ca:a9:c4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org