Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37392e302f32342d3234203d3e20323731333631.roa
File:                     3137392e302e37392e302f32342d3234203d3e20323731333631.roa (raw, json)
Hash identifier:          tGF0YZ73wTF0VNzDbxI5wzUhzmb+zbaIwjeYUekW9IA=
Subject key identifier:   E8:DB:90:00:7A:1E:82:88:CE:66:A9:BD:96:73:0B:26:5D:6A:94:8A
Certificate issuer:       /CN=DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37
Certificate serial:       3FBD6880031FDD4ABD16BE67855BE216250F6813
Authority key identifier: DC:F6:93:E9:82:F7:DF:6B:9F:DD:35:5A:47:A4:EC:82:DF:7A:CC:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37392e302f32342d3234203d3e20323731333631.roa
Signing time:             Mon 04 Mar 2024 13:33:51 +0000
ROA not before:           Mon 04 Mar 2024 13:28:51 +0000
ROA not after:            Mon 03 Mar 2025 13:33:51 +0000
asID:                     271361
IP address blocks:        179.0.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bd:68:80:03:1f:dd:4a:bd:16:be:67:85:5b:e2:16:25:0f:68:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37
        Validity
            Not Before: Mar  4 13:28:51 2024 GMT
            Not After : Mar  3 13:33:51 2025 GMT
        Subject: CN=E8DB90007A1E8288CE66A9BD96730B265D6A948A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:d6:a2:f3:f8:3e:5e:32:e3:fd:4f:03:30:
                    f9:90:39:1b:cf:fa:b2:81:04:cb:bb:4a:0e:7b:65:
                    0e:ff:f8:3a:d6:ab:88:81:af:f3:d0:d4:0f:de:1f:
                    27:4b:24:cf:cc:67:5b:dd:26:6e:86:9d:2f:9f:60:
                    50:df:25:e1:f1:52:9d:19:5d:ab:9d:c8:f5:b6:d7:
                    1c:4e:a3:07:63:65:07:0d:e8:41:4b:c8:17:d7:d0:
                    94:68:74:9e:cc:e6:c2:ab:a2:87:f2:2b:08:c1:23:
                    bd:58:1e:15:4c:32:f1:92:2d:c7:6d:75:2c:72:ae:
                    99:62:03:d9:92:26:6c:99:91:73:12:7d:d3:09:85:
                    4c:cc:cb:88:d1:16:45:63:82:81:2d:1c:f6:f1:2a:
                    8e:42:7e:d5:81:85:a5:31:16:aa:29:92:ab:2f:b8:
                    eb:ea:c9:b5:7e:23:eb:f0:82:8d:64:4c:7e:32:f1:
                    03:b7:28:11:ec:63:b8:69:dd:91:58:05:27:20:7a:
                    a0:43:ea:9a:c8:8f:14:00:88:bc:d8:49:36:8c:be:
                    7d:4d:b2:8a:65:be:0a:17:a7:dd:67:21:a9:81:6d:
                    b4:b4:74:fe:15:4d:0c:79:f7:7c:eb:dd:f5:08:85:
                    3b:0e:d3:e8:27:66:c3:8e:c7:16:66:25:bf:c6:89:
                    5e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DB:90:00:7A:1E:82:88:CE:66:A9:BD:96:73:0B:26:5D:6A:94:8A
            X509v3 Authority Key Identifier:
                keyid:DC:F6:93:E9:82:F7:DF:6B:9F:DD:35:5A:47:A4:EC:82:DF:7A:CC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37392e302f32342d3234203d3e20323731333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e1:7b:c4:25:61:a9:be:9a:ba:88:8e:81:69:ae:67:6f:12:
         ef:83:83:45:1f:f4:f4:8a:a8:d8:80:2f:71:b1:30:61:17:c1:
         e0:5d:8e:4b:7d:3b:a7:be:99:19:a9:44:a6:c6:e3:26:75:95:
         03:5e:da:48:7e:c6:38:2f:b5:51:63:0d:52:8a:14:9f:bd:0e:
         2b:78:4b:fc:4c:1b:ec:06:fb:4d:a7:76:45:a8:2a:e5:65:fc:
         5b:7b:54:4e:33:3d:ba:03:d5:a6:10:7e:aa:35:b9:c5:7e:d1:
         63:3b:b5:3e:5a:6b:e5:cf:76:8b:5f:ed:53:ca:33:5a:3f:96:
         37:33:d5:21:1a:5f:64:f1:db:51:4f:cc:e3:38:df:db:3b:be:
         8f:cf:2a:7d:5c:a9:82:cc:3c:ce:a9:bb:b6:48:54:62:75:e8:
         ff:11:ad:20:2c:20:d4:53:b4:5a:1a:ee:90:ed:9a:3b:b5:af:
         e8:e6:9b:27:71:3e:92:2c:27:85:b0:92:ca:38:b5:ae:fa:9d:
         56:ea:31:10:6e:5a:5f:5a:14:4e:81:18:dd:ee:bd:c4:86:af:
         8d:dc:69:ce:32:3c:4f:84:3c:40:22:eb:4c:13:58:c9:fd:6b:
         44:3a:a1:94:40:aa:d9:d3:32:a5:bc:4c:8f:1f:d6:dd:dd:6e:
         d7:4d:b6:e5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUP71ogAMf3Uq9Fr5nhVviFiUPaBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENGNjkzRTk4MkY3REY2QjlGREQzNTVBNDdBNEVDODJE
RjdBQ0MzNzAeFw0yNDAzMDQxMzI4NTFaFw0yNTAzMDMxMzMzNTFaMDMxMTAvBgNV
BAMTKEU4REI5MDAwN0ExRTgyODhDRTY2QTlCRDk2NzMwQjI2NUQ2QTk0OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hdai8/g+XjLj/U8DMPmQORvP
+rKBBMu7Sg57ZQ7/+DrWq4iBr/PQ1A/eHydLJM/MZ1vdJm6GnS+fYFDfJeHxUp0Z
XaudyPW21xxOowdjZQcN6EFLyBfX0JRodJ7M5sKroofyKwjBI71YHhVMMvGSLcdt
dSxyrpliA9mSJmyZkXMSfdMJhUzMy4jRFkVjgoEtHPbxKo5CftWBhaUxFqopkqsv
uOvqybV+I+vwgo1kTH4y8QO3KBHsY7hp3ZFYBScgeqBD6prIjxQAiLzYSTaMvn1N
soplvgoXp91nIamBbbS0dP4VTQx593zr3fUIhTsO0+gnZsOOxxZmJb/GiV6FAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU6NuQAHoegojOZqm9lnMLJl1qlIowHwYDVR0j
BBgwFoAU3PaT6YL332uf3TVaR6Tsgt96zDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFNaUF0ZkttZEtweE1uaFhOSzRjcnI4N1kxU2RVOG5yWUxZMlhMWFh3
MnYvMC9EQ0Y2OTNFOTgyRjdERjZCOUZERDM1NUE0N0E0RUM4MkRGN0FDQzM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDRjY5M0U5ODJGN0RGNkI5
RkREMzU1QTQ3QTRFQzgyREY3QUNDMzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBTWlBdGZLbWRLcHhNbmhYTks0Y3JyODdZMVNkVThucllMWTJYTFhYdzJ2LzAv
MzEzNzM5MmUzMDJlMzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMz
MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALMATzANBgkqhkiG9w0BAQsFAAOCAQEAsOF7xCVhqb6a
uoiOgWmuZ28S74ODRR/09Iqo2IAvcbEwYRfB4F2OS307p76ZGalEpsbjJnWVA17a
SH7GOC+1UWMNUooUn70OK3hL/Ewb7Ab7Tad2Ragq5WX8W3tUTjM9ugPVphB+qjW5
xX7RYzu1Plpr5c92i1/tU8ozWj+WNzPVIRpfZPHbUU/M4zjf2zu+j88qfVypgsw8
zqm7tkhUYnXo/xGtICwg1FO0WhrukO2aO7Wv6OabJ3E+kiwnhbCSyji1rvqdVuox
EG5aX1oUToEY3e69xIavjdxpzjI8T4Q8QCLrTBNYyf1rRDqhlECq2dMypbxMjx/W
3d1u10225Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org