Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/3137392e39372e3131322e302f32312d3234203d3e203238363336.roa
File:                     3137392e39372e3131322e302f32312d3234203d3e203238363336.roa (raw, json)
Hash identifier:          0ZDGn/fu7+L9/CrUYAkc3ukLstOfBsG0AfU0r0vifKw=
Subject key identifier:   A1:4B:65:17:C0:55:68:29:DC:8C:50:1B:44:58:C8:F2:8F:A5:D5:9F
Certificate issuer:       /CN=A9F6427C32C617D9FC68BBA56D31A88E88DAFF54
Certificate serial:       4743D122B110A7E2F91DB64BF84824D0BF4A46BE
Authority key identifier: A9:F6:42:7C:32:C6:17:D9:FC:68:BB:A5:6D:31:A8:8E:88:DA:FF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/3137392e39372e3131322e302f32312d3234203d3e203238363336.roa
Signing time:             Thu 04 Apr 2024 08:55:06 +0000
ROA not before:           Thu 04 Apr 2024 08:50:06 +0000
ROA not after:            Thu 03 Apr 2025 08:55:06 +0000
asID:                     28636
IP address blocks:        179.97.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:43:d1:22:b1:10:a7:e2:f9:1d:b6:4b:f8:48:24:d0:bf:4a:46:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F6427C32C617D9FC68BBA56D31A88E88DAFF54
        Validity
            Not Before: Apr  4 08:50:06 2024 GMT
            Not After : Apr  3 08:55:06 2025 GMT
        Subject: CN=A14B6517C0556829DC8C501B4458C8F28FA5D59F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:fc:cb:92:df:31:ce:66:01:11:10:ae:12:
                    f7:2d:b1:60:8e:bd:d9:6b:bb:fe:58:c7:8b:56:17:
                    e7:63:e9:0d:80:81:21:15:03:25:55:63:df:f3:90:
                    0c:1c:1a:ab:72:e5:80:5a:f2:1d:d8:9d:0b:c1:91:
                    82:ce:51:a4:7b:0b:0c:b9:bd:1f:04:39:f9:3e:9b:
                    ea:fc:85:dd:97:b8:ec:ec:9e:23:4c:0b:2c:3c:1d:
                    d9:92:c0:d8:7e:ff:19:e6:c1:2f:4a:e7:09:6c:16:
                    f6:6b:8f:8c:38:c1:04:5c:48:ab:4a:a4:8a:03:d6:
                    dc:0b:80:55:04:f4:c1:39:a6:09:e8:5c:26:e1:8a:
                    32:7a:6d:e3:39:bb:22:14:f7:ca:33:d8:90:09:b0:
                    41:ab:84:e2:7b:55:3e:67:a5:5f:41:2a:fc:f3:48:
                    a8:46:9c:15:81:77:b6:c1:48:2b:58:60:80:0e:75:
                    a1:19:65:90:0f:92:51:f1:da:66:37:c8:50:54:95:
                    2f:36:db:b1:7d:90:a0:45:9c:1c:a2:28:d9:41:89:
                    06:4b:d1:ef:73:30:fa:be:64:80:cc:56:5c:7d:b9:
                    30:d3:ef:36:e7:88:a3:3c:0a:92:99:10:a3:4c:51:
                    56:fd:ae:43:bc:2a:b6:19:c9:6d:d3:ea:1b:92:15:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4B:65:17:C0:55:68:29:DC:8C:50:1B:44:58:C8:F2:8F:A5:D5:9F
            X509v3 Authority Key Identifier:
                keyid:A9:F6:42:7C:32:C6:17:D9:FC:68:BB:A5:6D:31:A8:8E:88:DA:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F6427C32C617D9FC68BBA56D31A88E88DAFF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/1/3137392e39372e3131322e302f32312d3234203d3e203238363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:97:1b:f7:29:a3:5f:b6:42:93:43:fd:c4:3c:08:ed:f8:
         e3:64:3e:f0:b3:d8:dd:28:95:8d:ea:b7:c0:08:43:a7:3d:27:
         1a:65:18:80:da:4a:d2:8a:a3:50:aa:c3:07:03:4d:18:e3:24:
         a3:4f:9c:80:b3:05:16:01:24:4a:87:1c:8b:66:79:08:e5:06:
         12:39:af:d7:8b:a9:a0:51:ec:d2:ec:47:e5:46:f1:7a:66:bb:
         81:ef:a0:9a:3a:2f:48:ac:7c:3a:a9:00:36:56:c6:e2:c4:96:
         ca:f3:6b:33:02:68:cd:f3:7f:81:02:ed:f3:24:71:5d:63:fe:
         8d:b4:2c:ad:77:a1:77:66:30:b8:24:cc:63:e0:fc:5c:7b:97:
         38:17:07:5e:e0:e5:ab:1b:c8:8c:b1:44:15:93:ce:f5:f0:79:
         02:5c:f1:69:5b:fd:23:5e:50:2b:c6:5c:bf:b1:4b:6d:3b:13:
         c0:e9:d5:cc:b0:47:b5:b3:70:1d:dd:bd:bc:d6:26:b1:cc:80:
         dd:38:ba:dc:79:53:61:1a:00:3b:07:ba:b4:0a:91:93:36:16:
         5f:4a:01:6e:c1:fc:bc:aa:4a:1d:25:52:0d:ad:b7:e7:78:d5:
         4a:ea:d2:ed:ef:9d:4b:b8:dd:46:45:df:f9:b7:c7:ec:77:8b:
         23:d4:77:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-ams.rpki-client.org