Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137392e302f32342d3234203d3e20323731343636.roa
File:                     3230312e34392e3137392e302f32342d3234203d3e20323731343636.roa (raw, json)
Hash identifier:          CGFP2zyzp9Iyn6lxvsy2wPFYpi+XzRwFUSue3HB5dR4=
Subject key identifier:   98:1E:20:59:26:42:93:AC:DB:17:C2:B8:19:43:2D:95:49:6B:0F:D7
Certificate issuer:       /CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
Certificate serial:       0CBD9A1D738E79ACC1561182AC18FA3E3F05533D
Authority key identifier: 00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137392e302f32342d3234203d3e20323731343636.roa
Signing time:             Wed 28 Feb 2024 20:15:49 +0000
ROA not before:           Wed 28 Feb 2024 20:10:49 +0000
ROA not after:            Wed 26 Feb 2025 20:15:49 +0000
asID:                     271466
IP address blocks:        201.49.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:bd:9a:1d:73:8e:79:ac:c1:56:11:82:ac:18:fa:3e:3f:05:53:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
        Validity
            Not Before: Feb 28 20:10:49 2024 GMT
            Not After : Feb 26 20:15:49 2025 GMT
        Subject: CN=981E2059264293ACDB17C2B819432D95496B0FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:a0:49:a6:40:5f:c3:fd:56:68:19:50:b2:
                    c5:08:da:41:cb:f9:35:5e:e4:59:20:e3:64:d6:ab:
                    34:9f:9b:85:49:a0:e3:f5:a4:2a:11:34:5e:a6:88:
                    10:50:65:24:4c:c9:3f:50:1c:0b:dc:0c:e9:c2:2c:
                    f6:56:a0:8e:d0:05:79:62:d8:c6:bd:a9:06:80:72:
                    73:67:e1:26:94:1e:4a:39:0c:e4:3f:81:01:b0:60:
                    da:89:f3:7f:1a:51:20:9c:70:8c:7d:23:86:f2:c9:
                    c1:f1:45:7e:91:cb:b0:7b:23:16:92:da:15:ee:21:
                    29:22:bd:78:8e:9c:84:2f:90:a9:e5:a9:9a:86:8e:
                    96:a1:31:6c:83:2d:4c:69:74:58:74:96:2a:83:9d:
                    c5:45:dc:ad:5a:5c:cc:b3:39:bc:22:00:68:dd:41:
                    21:bc:23:1e:7a:9c:62:ba:3e:56:d9:fb:a4:4f:d7:
                    9b:52:17:ad:f4:63:3c:fd:75:27:13:cd:b6:e1:b3:
                    7c:bc:e4:b6:df:79:b3:a6:77:26:0c:bf:18:97:03:
                    94:1c:3c:8f:f1:32:7b:c1:a3:41:88:56:29:c9:af:
                    87:ae:82:cf:69:63:87:2f:4c:3a:75:ca:3a:af:4e:
                    b6:42:bf:72:52:ca:96:20:64:e5:ea:53:20:88:6a:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1E:20:59:26:42:93:AC:DB:17:C2:B8:19:43:2D:95:49:6B:0F:D7
            X509v3 Authority Key Identifier:
                keyid:00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137392e302f32342d3234203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:48:6e:50:bc:c7:f0:25:89:df:9e:d5:1a:01:00:73:bd:f5:
         6a:ab:53:76:a7:72:80:09:5c:15:d6:b7:dd:1e:1d:3d:b3:bf:
         46:3c:b6:26:0e:ad:09:ab:6e:63:56:40:84:73:69:85:87:d5:
         8d:8a:61:39:9c:d8:dc:74:bb:78:ff:17:1f:bc:c9:a1:06:4d:
         b9:72:25:80:c8:49:4c:bb:10:ac:9b:fd:be:8a:41:ab:73:7e:
         0a:73:48:e6:43:6f:4e:80:b0:d2:21:11:14:c8:3a:12:cd:9f:
         e6:a4:0f:f8:b8:92:03:75:99:d9:b8:3e:12:fc:e8:b7:e1:e9:
         38:37:70:ee:f6:65:b9:81:54:7f:87:66:ed:78:92:74:f6:1f:
         95:d7:e5:5a:db:f3:9c:52:3d:b5:29:07:13:53:8b:e3:dd:3a:
         8d:0f:8e:92:4f:6c:51:d9:ed:76:7a:25:a2:c0:03:3f:b0:f8:
         ad:d6:f2:ee:da:42:1e:ed:97:1e:1f:06:ff:8e:51:40:da:d5:
         7a:bf:2a:f9:da:b4:3e:aa:b7:6f:5c:61:a7:c5:66:c2:5a:0b:
         29:99:fe:ea:3c:be:87:0f:2d:9c:a2:9a:c9:28:13:39:bf:47:
         72:a0:c7:fd:0c:91:24:73:b2:90:85:2d:25:f0:20:86:f4:c6:
         00:4c:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org