Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/3137392e35312e3138382e302f32322d3232203d3e20323731323134.roa
File:                     3137392e35312e3138382e302f32322d3232203d3e20323731323134.roa (raw, json)
Hash identifier:          D9KlyQvY5isfuDXqanEtJGWOb06Hkm0bDOYhQhq88j0=
Subject key identifier:   BA:6D:BB:29:E2:1C:AC:1E:D4:F3:B5:43:29:B4:2F:46:F3:74:8A:ED
Certificate issuer:       /CN=C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD
Certificate serial:       0C1CD4BCAACF03BDFBC4A4CF83FB4999EC78AD2A
Authority key identifier: C3:89:A7:A9:38:C8:09:69:CD:8A:A4:2F:6D:CD:AA:BD:9E:5C:EB:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/3137392e35312e3138382e302f32322d3232203d3e20323731323134.roa
Signing time:             Wed 09 Nov 2022 13:07:16 +0000
ROA not before:           Wed 09 Nov 2022 13:02:16 +0000
ROA not after:            Wed 08 Nov 2023 13:07:16 +0000
asID:                     271214
IP address blocks:        179.51.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1c:d4:bc:aa:cf:03:bd:fb:c4:a4:cf:83:fb:49:99:ec:78:ad:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD
        Validity
            Not Before: Nov  9 13:02:16 2022 GMT
            Not After : Nov  8 13:07:16 2023 GMT
        Subject: CN=BA6DBB29E21CAC1ED4F3B54329B42F46F3748AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c3:59:56:c6:41:da:26:f2:43:fa:81:71:ee:
                    c3:2c:3a:ad:9c:04:e4:c0:fe:35:bb:1a:24:16:7e:
                    c8:04:6b:02:cc:37:02:62:08:55:85:ac:58:c7:62:
                    39:bf:57:8c:eb:1a:f7:33:0f:08:21:e8:ef:ca:4d:
                    c7:de:3b:1d:b0:75:25:10:f7:b8:80:b4:da:09:7f:
                    75:d8:11:2c:8f:fd:b8:63:c6:43:72:4d:29:56:92:
                    32:8d:e5:9d:f0:5e:54:e7:c6:fe:4f:ea:6f:df:81:
                    64:39:67:98:47:e4:66:01:f0:2d:ae:d4:86:a9:49:
                    fc:8f:d9:fc:e5:1e:a2:9d:24:ed:16:77:d1:f0:29:
                    52:a2:1e:e2:85:0f:f2:8c:2e:96:aa:69:13:2d:d5:
                    82:33:0d:76:83:e8:64:28:47:dc:59:fa:50:a1:be:
                    08:b5:3e:92:73:59:b7:a9:70:0f:df:e5:8d:ee:93:
                    d1:76:22:69:47:17:ef:5e:16:33:a7:b8:a1:76:90:
                    5c:d4:a9:43:2f:34:ec:34:67:21:f1:f3:60:ac:79:
                    45:85:21:13:2a:6c:0f:33:b4:b6:4b:fa:ad:42:c0:
                    b8:dd:d4:03:1c:37:10:12:99:fa:e6:aa:ca:07:48:
                    7d:7c:35:93:b1:87:7e:a4:df:9c:83:dd:f3:9d:2a:
                    c4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6D:BB:29:E2:1C:AC:1E:D4:F3:B5:43:29:B4:2F:46:F3:74:8A:ED
            X509v3 Authority Key Identifier:
                keyid:C3:89:A7:A9:38:C8:09:69:CD:8A:A4:2F:6D:CD:AA:BD:9E:5C:EB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/3137392e35312e3138382e302f32322d3232203d3e20323731323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:b6:bc:75:88:91:2a:06:b3:00:6b:13:4b:ec:55:af:2f:
         f0:32:1b:d1:74:24:e8:ba:3f:90:19:5c:67:ec:74:99:d6:11:
         b1:e6:97:ae:d6:91:33:2d:2e:c6:89:86:2f:9d:84:d9:ef:8e:
         19:33:1a:f1:92:6c:51:62:28:47:10:40:de:6c:d5:9f:26:a0:
         85:6a:53:fe:c2:7f:00:18:d9:b0:4d:16:47:7f:2a:cf:a2:90:
         b3:c3:1c:6d:19:0b:ef:20:f8:09:8c:8c:d7:d2:3c:33:4d:c4:
         63:43:74:27:00:16:f0:b7:fa:45:e2:9b:13:c3:8b:c7:d4:57:
         92:24:5d:a7:20:22:47:8d:1e:09:c8:6d:86:1b:9a:89:0d:48:
         f2:9b:44:32:b0:1d:e1:ef:59:8d:8b:f6:fe:3d:59:b1:c2:08:
         37:9e:a9:3c:3e:8f:08:d7:e6:b6:76:6e:ca:8c:dc:b8:e5:92:
         22:2a:26:96:22:50:43:df:4b:32:ea:18:26:1f:ae:b3:87:e6:
         78:2f:be:b7:35:fa:01:77:52:0d:45:7a:67:79:5d:68:88:cb:
         42:6e:3a:1e:19:0b:d4:f3:fe:a5:1a:55:35:3c:e7:5a:0f:bf:
         c5:7a:30:f8:79:b2:eb:34:06:b2:ba:7a:fc:72:af:c5:f3:0c:
         30:d5:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org