Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/3137392e34382e34382e302f32322d3234203d3e20323731323430.roa
File:                     3137392e34382e34382e302f32322d3234203d3e20323731323430.roa (raw, json)
Hash identifier:          0sqbIwqFj+PZR4dAGix2u5yVUMN0T0AJG9s2qMlMYm8=
Subject key identifier:   CF:16:2D:9E:EC:91:98:D8:FA:7B:E0:25:AD:45:3F:26:1C:B8:8D:52
Certificate issuer:       /CN=8559016835EC22243929486F6B477BAEFB162FDC
Certificate serial:       19EAF4D6B3C70B478103A13FE89FF54519AB82A7
Authority key identifier: 85:59:01:68:35:EC:22:24:39:29:48:6F:6B:47:7B:AE:FB:16:2F:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8559016835EC22243929486F6B477BAEFB162FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/3137392e34382e34382e302f32322d3234203d3e20323731323430.roa
Signing time:             Wed 03 Apr 2024 18:59:47 +0000
ROA not before:           Wed 03 Apr 2024 18:54:47 +0000
ROA not after:            Wed 02 Apr 2025 18:59:47 +0000
asID:                     271240
IP address blocks:        179.48.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ea:f4:d6:b3:c7:0b:47:81:03:a1:3f:e8:9f:f5:45:19:ab:82:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8559016835EC22243929486F6B477BAEFB162FDC
        Validity
            Not Before: Apr  3 18:54:47 2024 GMT
            Not After : Apr  2 18:59:47 2025 GMT
        Subject: CN=CF162D9EEC9198D8FA7BE025AD453F261CB88D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8e:f2:64:1b:d0:6b:02:28:1d:93:5c:02:c1:
                    8c:d3:98:6b:7a:b1:96:24:fe:19:05:57:3d:57:4e:
                    3c:0c:ba:77:75:ce:98:19:6b:a4:df:bc:64:62:68:
                    4c:00:3c:72:6b:13:cb:d0:b2:f5:c4:51:5d:46:5e:
                    9e:8b:a1:c9:c8:96:31:c4:95:df:09:ec:33:e1:3d:
                    9c:a2:f6:2b:dd:38:76:aa:86:20:c8:65:b6:86:a3:
                    9f:51:df:65:ec:fc:79:3c:3d:98:db:f2:24:1f:a7:
                    a0:56:8b:11:3b:49:f3:6b:1c:39:8e:11:65:53:6e:
                    cd:1d:82:2a:f9:34:6d:d2:9d:5b:97:c1:5b:b3:70:
                    8f:c1:0d:74:f7:a0:33:ee:cd:1e:ef:27:4e:af:d7:
                    e6:45:64:0f:77:3d:92:fb:6b:53:ea:b4:8f:73:d2:
                    5c:b3:20:37:ee:cd:5c:19:57:92:fc:cb:03:7e:5d:
                    df:eb:72:d4:35:1d:39:b7:ac:17:be:8a:f4:b9:52:
                    bf:ea:06:45:ce:e4:f7:cb:b2:e9:81:49:fc:c9:8c:
                    31:f2:2d:f3:15:31:9c:04:43:a2:e8:1f:bd:b7:ff:
                    c1:5d:06:a8:55:fc:86:a1:de:6f:18:f6:d9:e0:3a:
                    6b:f4:64:4b:00:a2:b6:a8:c8:d8:fb:ee:09:e5:c1:
                    8b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:16:2D:9E:EC:91:98:D8:FA:7B:E0:25:AD:45:3F:26:1C:B8:8D:52
            X509v3 Authority Key Identifier:
                keyid:85:59:01:68:35:EC:22:24:39:29:48:6F:6B:47:7B:AE:FB:16:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/8559016835EC22243929486F6B477BAEFB162FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8559016835EC22243929486F6B477BAEFB162FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/1/3137392e34382e34382e302f32322d3234203d3e20323731323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:cd:e3:b7:7b:08:5e:c8:71:7f:76:08:7e:b4:09:1f:8a:b0:
         47:26:c2:fe:0c:3d:d9:f2:fa:76:c1:d4:1e:3f:fa:9f:16:7e:
         fa:41:ea:ef:9b:ec:30:57:0b:79:21:50:20:b0:ea:96:cc:73:
         07:d0:07:ce:ee:d0:22:f9:85:6d:60:09:3d:4b:98:1f:ac:9d:
         81:88:51:fb:a4:d1:5f:89:a4:b8:af:7c:9f:0f:f4:ee:ba:bb:
         56:f8:a5:66:35:5c:5a:8d:57:91:f2:e4:9c:1a:52:d5:53:37:
         c6:1d:40:51:59:72:90:68:34:8a:63:fd:8f:7c:79:71:02:6c:
         15:f0:1a:2f:28:ca:8c:5e:9c:5a:a6:aa:3d:15:8c:81:a8:75:
         eb:e4:ab:80:b8:b3:87:d8:dd:37:5a:e3:b5:19:a2:52:1f:72:
         d6:fa:ca:69:c9:aa:f9:21:6d:c3:bd:97:1b:e1:4f:5e:ee:36:
         9e:5c:ae:15:d3:70:bf:02:17:90:69:b3:02:ad:5c:87:6a:ce:
         c4:96:5c:34:f2:2d:92:39:11:7b:8d:1c:d9:0b:b5:88:7e:d1:
         be:1c:64:98:46:fd:ef:a2:9e:72:90:31:17:db:19:d3:f0:00:
         32:9c:cb:b5:30:39:b6:ca:51:2d:c0:db:5e:98:d2:0b:fd:7d:
         f4:48:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org