Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3230382e302f32312d3231203d3e20323633303833.roa
File:                     3137392e3130362e3230382e302f32312d3231203d3e20323633303833.roa (raw, json)
Hash identifier:          sum8YGNEV7YURQa0WrEvEHEyIArowG8h/+5m8Plj0Cg=
Subject key identifier:   E8:A9:E4:8A:FF:EA:3E:53:0C:F9:AA:47:E6:FD:A1:2B:01:0D:F4:42
Certificate issuer:       /CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
Certificate serial:       59F11FA234BF0006AA32D0B4459B2C22CFDB529D
Authority key identifier: 14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3230382e302f32312d3231203d3e20323633303833.roa
Signing time:             Wed 25 Jan 2023 19:44:18 +0000
ROA not before:           Wed 25 Jan 2023 19:39:18 +0000
ROA not after:            Wed 24 Jan 2024 19:44:18 +0000
asID:                     263083
IP address blocks:        179.106.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f1:1f:a2:34:bf:00:06:aa:32:d0:b4:45:9b:2c:22:cf:db:52:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
        Validity
            Not Before: Jan 25 19:39:18 2023 GMT
            Not After : Jan 24 19:44:18 2024 GMT
        Subject: CN=E8A9E48AFFEA3E530CF9AA47E6FDA12B010DF442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:7e:60:51:29:d3:06:92:02:4b:d2:ab:d0:
                    6b:4a:20:40:81:34:1d:fb:ac:da:cc:33:3e:27:67:
                    7d:02:a1:ae:85:ff:3f:3d:8b:2a:ce:e4:01:bf:dd:
                    f7:0f:ce:b2:9d:2b:c6:f5:7c:a3:3f:c3:2e:0d:33:
                    6e:a5:f3:50:99:31:6f:68:f8:2f:e3:89:b7:13:5f:
                    d7:26:fa:34:97:05:ff:6b:ba:34:22:b8:10:2c:03:
                    c4:51:47:0e:84:da:9d:22:ef:73:b4:04:86:8d:61:
                    52:99:94:e9:7b:c3:6d:39:e1:3b:f0:7b:87:c3:93:
                    9b:25:64:91:2a:4d:e6:07:eb:e1:a4:37:22:f7:c5:
                    e7:dc:dd:ff:3f:3a:96:66:5b:82:73:8b:95:78:7a:
                    fe:9d:6a:46:8d:fa:cf:5e:92:ee:78:8a:63:c6:bb:
                    ff:bb:de:90:ea:13:69:97:de:14:e0:52:a8:e6:57:
                    8d:8b:e1:83:07:01:48:e2:2d:2f:fe:a0:28:ef:a0:
                    25:ef:a6:b9:6b:5b:de:3c:ff:26:2d:c1:61:c3:40:
                    fc:67:28:03:62:41:ec:53:a6:d0:16:aa:e6:1a:3d:
                    0c:4d:8b:42:8b:dc:45:06:fd:73:d1:58:db:5d:e2:
                    76:28:2f:86:2a:8f:85:21:a6:46:22:15:19:46:21:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A9:E4:8A:FF:EA:3E:53:0C:F9:AA:47:E6:FD:A1:2B:01:0D:F4:42
            X509v3 Authority Key Identifier:
                keyid:14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3137392e3130362e3230382e302f32312d3231203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c1:46:92:78:65:88:c1:e4:b2:c2:21:8b:f0:0f:b5:d2:f8:6b:
         68:ba:33:32:c3:63:66:82:f7:2b:50:1b:5c:3a:34:c9:3a:d4:
         bb:b4:33:a0:0c:b9:67:30:65:97:67:9e:3d:10:b5:11:3b:fe:
         5c:66:c9:c1:2c:b9:9f:90:7b:2c:d6:3f:76:5f:12:ef:d5:b0:
         73:7a:1c:28:ed:52:94:b2:62:b4:95:a1:07:3f:01:dc:21:0e:
         35:dd:23:80:74:6c:6b:ac:e5:61:ff:42:4a:d2:9f:fa:66:6f:
         25:96:72:ad:7f:fa:32:cf:17:32:23:e6:66:fb:27:d3:81:33:
         19:dd:cb:19:2b:3a:32:aa:d4:ef:a4:99:ad:82:f6:37:8f:b5:
         c9:52:f7:67:7f:a6:c3:be:0f:2d:90:e1:b0:49:bd:ba:1f:cf:
         6e:80:e8:f6:71:89:65:23:a9:ee:59:9f:bb:aa:15:d3:81:9b:
         9b:ee:18:d6:12:96:c6:96:b5:72:6d:06:20:2a:85:b7:52:04:
         17:6d:ac:b6:3f:bc:0f:96:03:f5:54:71:bf:ab:e2:a3:98:8a:
         d5:36:6d:71:b0:8f:9a:43:b7:59:92:07:11:bd:77:c2:37:b9:
         6e:41:8b:a4:5f:90:89:8e:13:02:a0:5c:a1:33:b1:f3:96:1e:
         f6:c1:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org