Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/3137392e35312e3139312e302f32342d3234203d3e20323731323134.roa
File:                     3137392e35312e3139312e302f32342d3234203d3e20323731323134.roa (raw, json)
Hash identifier:          g0QyyDaOhNl++z8AI/AMGL7DN2n6hQN7y16xpFBv0eY=
Subject key identifier:   EF:EB:77:40:EA:9E:57:1F:40:C2:74:D6:DA:7A:27:FB:98:2C:E8:FB
Certificate issuer:       /CN=C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD
Certificate serial:       1250F909B75535CE4A3505E0C519CA76315C29D8
Authority key identifier: C3:89:A7:A9:38:C8:09:69:CD:8A:A4:2F:6D:CD:AA:BD:9E:5C:EB:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/3137392e35312e3139312e302f32342d3234203d3e20323731323134.roa
Signing time:             Wed 09 Nov 2022 13:07:29 +0000
ROA not before:           Wed 09 Nov 2022 13:02:29 +0000
ROA not after:            Wed 08 Nov 2023 13:07:29 +0000
asID:                     271214
IP address blocks:        179.51.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:50:f9:09:b7:55:35:ce:4a:35:05:e0:c5:19:ca:76:31:5c:29:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD
        Validity
            Not Before: Nov  9 13:02:29 2022 GMT
            Not After : Nov  8 13:07:29 2023 GMT
        Subject: CN=EFEB7740EA9E571F40C274D6DA7A27FB982CE8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b0:d5:80:44:40:fe:c1:d6:7a:08:6a:a2:8c:
                    4c:e7:bf:54:1f:64:0c:39:55:23:0a:2c:0e:c4:91:
                    9e:cd:fe:c0:fe:63:29:da:a5:90:f4:c4:76:f1:a4:
                    27:f1:0f:6f:9c:3c:08:a9:35:fc:d4:2b:30:ae:41:
                    d4:17:cb:11:22:e4:dd:aa:8c:6c:19:77:dd:8d:65:
                    e3:a7:71:fa:e8:82:5d:79:a0:9a:17:47:a3:39:d6:
                    f0:61:b8:81:ab:59:f5:49:6e:a9:8b:22:f9:6e:3c:
                    f9:54:fc:7b:23:93:61:ca:0e:5a:e9:a9:62:6a:de:
                    ad:f6:ce:21:0a:f0:ae:03:b4:65:22:92:f4:fe:83:
                    cf:98:e4:bf:fd:43:99:43:49:22:cf:42:71:e6:a0:
                    7c:3f:06:a2:ab:77:56:21:06:a7:1b:8e:18:a8:51:
                    7e:fe:4b:45:e8:e5:37:2d:b5:99:11:47:1f:d3:9f:
                    aa:49:85:0e:b0:dc:7c:a0:4f:65:02:fb:55:f0:87:
                    8f:f3:64:49:62:6b:61:77:7e:79:61:e4:da:20:50:
                    dd:9a:4a:a9:28:24:90:f4:8b:9b:b8:13:40:dd:b9:
                    1d:5e:94:a3:3d:55:fe:c3:64:11:13:f4:a3:6b:35:
                    d2:d0:19:a4:3f:de:5b:ce:46:ce:74:d3:83:56:09:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EB:77:40:EA:9E:57:1F:40:C2:74:D6:DA:7A:27:FB:98:2C:E8:FB
            X509v3 Authority Key Identifier:
                keyid:C3:89:A7:A9:38:C8:09:69:CD:8A:A4:2F:6D:CD:AA:BD:9E:5C:EB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/3137392e35312e3139312e302f32342d3234203d3e20323731323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:19:e8:29:77:1c:39:7c:75:ad:9f:ef:76:0a:0f:37:99:d4:
         2c:b4:89:a6:97:a6:5f:07:d3:38:3a:aa:25:c6:72:80:a0:05:
         df:39:4a:48:20:8e:7a:89:b1:c0:7c:01:b1:d0:86:dc:05:30:
         6d:1f:c2:63:43:7a:c3:b8:83:1e:24:5d:4d:a6:b4:66:09:4d:
         17:d3:2a:3d:eb:2f:3f:c9:5a:71:d0:a0:5d:89:5a:86:d9:a1:
         8b:0a:be:56:56:56:9e:2d:01:b5:9f:a1:32:ac:c3:75:99:c0:
         01:47:8a:46:a3:f8:1a:c0:db:16:fe:ad:27:d8:3d:81:62:18:
         2b:f9:4e:30:33:06:e1:25:f1:07:f0:16:e1:66:a9:c3:89:e3:
         70:09:48:ae:b6:d2:1c:11:83:30:f0:39:c5:82:ab:93:b3:db:
         ba:c6:8c:c7:10:e5:e0:75:05:a5:46:8c:c5:95:3b:8d:eb:cd:
         bb:da:db:24:ee:c9:8b:0e:e7:f3:bc:9b:1c:42:f4:f7:78:ab:
         b9:c7:27:a6:64:b2:ff:cf:e2:f7:33:be:47:60:3b:a9:52:04:
         75:60:e9:14:8f:d9:3a:41:1f:5f:cc:64:6c:b6:0b:44:e8:6f:
         2f:89:50:3c:f8:5f:5e:9a:69:3e:04:9a:6a:bc:6d:74:9c:a4:
         d2:83:aa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org