Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3230302e302f32312d3231203d3e20323633303833.roa
File:                     3137392e3130362e3230302e302f32312d3231203d3e20323633303833.roa (raw, json)
Hash identifier:          jDT1JUkVPAErPsq0I3f+gGIWbNSAQKb5fiac4xw/7oo=
Subject key identifier:   97:FB:C8:94:9B:68:7E:E8:5B:7D:CF:D9:46:6F:FC:D5:D8:40:17:4E
Certificate issuer:       /CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
Certificate serial:       22EFE928FDF11B87E960B7F087C9767AC9E49224
Authority key identifier: 14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3230302e302f32312d3231203d3e20323633303833.roa
Signing time:             Wed 25 Jan 2023 19:44:19 +0000
ROA not before:           Wed 25 Jan 2023 19:39:19 +0000
ROA not after:            Wed 24 Jan 2024 19:44:19 +0000
asID:                     263083
IP address blocks:        179.106.200.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ef:e9:28:fd:f1:1b:87:e9:60:b7:f0:87:c9:76:7a:c9:e4:92:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
        Validity
            Not Before: Jan 25 19:39:19 2023 GMT
            Not After : Jan 24 19:44:19 2024 GMT
        Subject: CN=97FBC8949B687EE85B7DCFD9466FFCD5D840174E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:a6:69:ef:92:84:14:99:c1:a9:30:3c:86:
                    f4:fe:3e:7d:8c:14:50:17:97:ce:ba:b5:7e:45:0a:
                    10:95:a0:91:27:b8:7c:9d:18:db:51:99:9f:dd:67:
                    b3:31:a7:9e:45:96:43:5e:ba:ce:b3:5a:9e:7a:99:
                    0c:8e:6b:31:08:0c:97:59:f8:d9:3f:11:f9:5b:cd:
                    87:15:49:dd:9d:da:24:b5:1f:00:b5:e1:98:ea:08:
                    f3:7b:5a:02:50:77:f6:05:80:e8:b5:0c:8e:76:cd:
                    92:2d:9d:eb:09:05:8c:ae:df:70:25:e1:6b:08:1f:
                    a0:f1:cc:9d:52:86:7d:d6:dd:d7:a7:09:0d:b5:da:
                    c4:b1:cc:67:9d:4c:20:68:e1:53:8a:4e:dc:12:23:
                    b2:39:dd:65:99:b6:05:c9:29:3f:db:41:41:a9:fd:
                    ea:31:be:cf:58:e8:62:80:6c:63:e0:d7:ef:4f:23:
                    37:0e:91:89:54:49:f0:8f:02:8d:dc:80:e5:78:19:
                    b4:6d:e8:a6:43:68:ed:03:cf:2f:63:95:37:61:ea:
                    a3:34:7c:83:76:6c:a4:5e:03:07:c3:31:a7:83:17:
                    5c:9c:69:4d:76:af:e4:aa:80:a6:74:90:04:4f:a3:
                    19:0c:e3:52:40:5a:15:f2:25:7a:7e:dd:f8:b1:b7:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FB:C8:94:9B:68:7E:E8:5B:7D:CF:D9:46:6F:FC:D5:D8:40:17:4E
            X509v3 Authority Key Identifier:
                keyid:14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3230302e302f32312d3231203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:f8:77:aa:36:fc:1a:f8:76:63:8f:f3:97:aa:07:1e:2b:4e:
         c6:f8:b7:78:e7:c5:f2:da:ed:bf:c1:9c:07:00:9f:07:87:16:
         72:8a:9b:e5:38:62:5e:59:e6:c4:90:1c:c7:5a:f4:dc:ae:23:
         77:a3:6d:47:74:c6:06:98:61:b0:cd:90:0b:1b:35:83:12:c6:
         d3:ca:9d:e4:29:4d:4f:c0:dd:93:34:94:68:c0:cf:28:40:de:
         e1:0d:9c:89:a5:a4:30:66:6e:fe:60:13:b5:59:9a:c1:cb:d7:
         5d:fa:3d:33:fc:89:ef:02:62:94:cb:83:94:8b:76:79:d7:68:
         bc:80:7e:e4:f7:7c:7d:5a:1b:54:3f:a4:13:1b:fe:05:fc:be:
         50:1c:4b:a5:a1:97:8f:f9:04:c4:c6:87:6f:ab:4f:fb:b1:7c:
         60:d0:9e:59:4e:ec:04:cb:8f:dd:1f:1a:6f:85:bb:29:bc:9d:
         f0:12:6d:7f:e4:59:3d:8e:90:06:d0:7f:82:10:46:4a:bf:e1:
         11:50:f2:06:4e:c3:af:96:01:80:d2:77:f6:14:98:11:db:cb:
         9f:25:00:4e:1c:98:7f:50:e3:16:b5:ac:b2:af:2b:33:c2:01:
         1c:8b:7b:7c:72:5a:72:42:18:73:da:ce:a8:ec:ee:06:f0:c2:
         25:01:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org