Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3234203d3e203238363536.roa
File:                     3137392e302e37322e302f32322d3234203d3e203238363536.roa (raw, json)
Hash identifier:          yegVLE2YVHU/j0yWE3C8uUxEYak5ri1qBBTRoHwDIjM=
Subject key identifier:   8C:16:E7:F3:1F:36:BE:34:64:C9:AB:4C:02:35:0F:2F:15:BF:24:C3
Certificate issuer:       /CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
Certificate serial:       380B83CC4D60B356DD2195274DDB24A4A9C451BD
Authority key identifier: 7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3234203d3e203238363536.roa
Signing time:             Mon 08 May 2023 11:47:43 +0000
ROA not before:           Mon 08 May 2023 11:42:43 +0000
ROA not after:            Mon 06 May 2024 11:47:43 +0000
asID:                     28656
IP address blocks:        179.0.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0b:83:cc:4d:60:b3:56:dd:21:95:27:4d:db:24:a4:a9:c4:51:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E3E133E801DA73CE14E16E83124A29A9EE74F22
        Validity
            Not Before: May  8 11:42:43 2023 GMT
            Not After : May  6 11:47:43 2024 GMT
        Subject: CN=8C16E7F31F36BE3464C9AB4C02350F2F15BF24C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:4c:2b:63:a0:1c:a7:4f:2f:bd:c4:ac:bd:
                    a3:f3:42:b1:aa:72:40:d7:43:a7:51:83:03:f2:23:
                    b4:79:82:5d:26:e5:b7:cc:8f:06:10:a4:3a:ca:ec:
                    64:1b:ad:61:a7:b2:e8:48:00:12:66:f8:b1:d8:f4:
                    34:b8:c7:01:bc:ff:bf:f0:50:8b:46:19:2e:12:3b:
                    5d:58:ca:e6:a2:f5:28:4f:1d:b7:70:d3:b5:37:9e:
                    ad:66:3a:e0:46:4f:55:57:59:96:40:f4:8d:c9:67:
                    d7:37:92:7f:b5:52:fb:3d:54:68:4e:1d:52:2f:f1:
                    51:ea:b4:9e:2a:48:ac:0c:68:07:bb:d7:eb:b9:76:
                    6b:f8:02:9a:86:31:c4:72:af:a6:e4:91:46:8b:50:
                    98:c6:dd:fe:9f:60:1f:d6:f1:f2:57:81:a0:e3:cd:
                    23:d6:27:c5:5d:8f:b3:e5:e7:0e:10:51:79:db:ef:
                    a7:68:6f:1a:d8:63:56:80:b2:ed:70:f1:4a:82:50:
                    6e:cc:99:9e:29:dc:4b:b3:04:2d:0d:2a:50:cc:fd:
                    7a:22:0d:a6:0e:fc:b6:54:bb:9c:d5:a7:0e:c3:59:
                    c4:f6:fb:7c:73:10:fc:cc:dd:2b:39:38:9f:27:bb:
                    7e:79:ca:0c:64:9a:c4:12:f1:05:8b:40:f3:48:7f:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:16:E7:F3:1F:36:BE:34:64:C9:AB:4C:02:35:0F:2F:15:BF:24:C3
            X509v3 Authority Key Identifier:
                keyid:7E:3E:13:3E:80:1D:A7:3C:E1:4E:16:E8:31:24:A2:9A:9E:E7:4F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E3E133E801DA73CE14E16E83124A29A9EE74F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:af:b1:78:cf:1c:09:ad:ee:b0:27:13:87:41:e0:d0:78:5e:
         3c:2e:08:b9:f5:c6:d8:c1:4e:78:36:36:25:af:2e:cc:4b:13:
         2f:1b:1a:57:ea:ae:55:52:be:11:42:85:9c:de:9d:04:3e:49:
         2f:08:5b:9d:95:fb:4f:00:76:74:e3:88:05:1e:c9:52:56:cc:
         4e:80:b5:84:72:fc:4f:1a:12:e4:ef:e2:93:9d:67:9f:30:fc:
         07:78:6f:43:8f:4e:a7:c2:52:2b:68:d8:d6:3f:1b:a7:93:db:
         a1:f4:69:f1:e0:02:f5:93:16:8c:30:a2:2d:1b:88:36:b8:ff:
         ac:d1:c6:30:95:92:e9:1c:fe:6b:2b:6d:19:c1:76:45:99:88:
         12:eb:3f:46:61:7b:c7:c8:15:ce:ef:e4:a0:ca:81:ef:6c:4b:
         86:4f:d5:85:3a:ce:ec:5d:db:c3:27:17:2e:3b:04:d3:5e:bb:
         2a:0c:8f:f3:7e:50:cf:ba:9a:ee:05:ee:81:b7:99:f0:af:2e:
         fe:09:9c:1a:62:de:31:10:2f:dd:78:21:f7:5e:d3:33:7b:c1:
         19:1f:c9:d5:a7:04:93:4d:20:48:dd:6e:31:63:d0:12:c3:1e:
         64:ac:30:0c:e2:1d:a7:b8:08:77:73:0f:a4:df:af:34:64:cd:
         49:d8:63:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org