Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/3137392e34382e32302e302f32342d3234203d3e20323731303633.roa
File:                     3137392e34382e32302e302f32342d3234203d3e20323731303633.roa (raw, json)
Hash identifier:          BVXhNSzCmPYIQMWVConDSWe2o6u9g9ZHyNs285GmxV8=
Subject key identifier:   3D:91:9B:A0:D9:EE:4D:74:F1:2A:0A:13:69:E0:63:94:53:94:AF:5E
Certificate issuer:       /CN=B7308D854D4BE5121F93D850679F0E7402EB7388
Certificate serial:       239CE60F68AC08D8711932685EA21424D56158DB
Authority key identifier: B7:30:8D:85:4D:4B:E5:12:1F:93:D8:50:67:9F:0E:74:02:EB:73:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7308D854D4BE5121F93D850679F0E7402EB7388.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/3137392e34382e32302e302f32342d3234203d3e20323731303633.roa
Signing time:             Mon 31 Jul 2023 18:31:16 +0000
ROA not before:           Mon 31 Jul 2023 18:26:16 +0000
ROA not after:            Mon 29 Jul 2024 18:31:16 +0000
asID:                     271063
IP address blocks:        179.48.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9c:e6:0f:68:ac:08:d8:71:19:32:68:5e:a2:14:24:d5:61:58:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7308D854D4BE5121F93D850679F0E7402EB7388
        Validity
            Not Before: Jul 31 18:26:16 2023 GMT
            Not After : Jul 29 18:31:16 2024 GMT
        Subject: CN=3D919BA0D9EE4D74F12A0A1369E063945394AF5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ad:d5:78:33:9d:24:e6:5c:c0:2b:24:1f:43:
                    30:79:c1:b8:ad:be:c5:f1:e5:2d:93:85:cb:a2:50:
                    10:25:7c:c2:cf:60:c9:47:cb:bb:da:45:94:f0:9a:
                    b5:73:99:5b:07:44:07:55:41:73:c2:20:9b:29:8c:
                    42:27:eb:c1:29:84:a7:4f:1c:68:ed:f3:b3:40:90:
                    90:a0:42:4d:da:39:87:82:36:ab:55:46:89:9d:51:
                    11:91:16:6f:06:22:77:a5:cd:87:07:64:50:c5:9c:
                    89:bf:68:00:d0:19:cc:36:a4:a5:2d:0a:66:bc:91:
                    1b:d5:69:86:27:29:65:65:93:49:32:a8:19:8c:e2:
                    67:0c:22:17:17:08:b3:61:fb:d5:5d:3e:72:7e:12:
                    9c:a6:4c:b0:94:9c:b8:a5:47:a6:ad:95:e2:57:0a:
                    44:f0:b6:61:99:ba:61:89:34:f4:4b:54:f9:0d:ad:
                    73:47:eb:b9:9a:df:6c:51:e5:3c:e8:13:e3:52:eb:
                    8f:9d:9d:56:bf:ea:bc:0a:e4:e5:06:e3:70:a6:82:
                    ab:64:f8:e8:65:2e:93:df:a1:0f:e2:cd:26:85:ca:
                    e7:a6:19:f8:e0:3b:95:d0:5c:88:45:2e:27:d8:d3:
                    c0:39:96:ed:29:28:2b:8b:90:8b:09:c5:0e:bc:5c:
                    22:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:91:9B:A0:D9:EE:4D:74:F1:2A:0A:13:69:E0:63:94:53:94:AF:5E
            X509v3 Authority Key Identifier:
                keyid:B7:30:8D:85:4D:4B:E5:12:1F:93:D8:50:67:9F:0E:74:02:EB:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/B7308D854D4BE5121F93D850679F0E7402EB7388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7308D854D4BE5121F93D850679F0E7402EB7388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6AfQ9wrUnNxmTaqFnPFgrXNGy4dFUoDsCF1B8aGQkUrK/0/3137392e34382e32302e302f32342d3234203d3e20323731303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:0b:3c:cf:04:2a:17:06:33:08:60:36:3b:e6:b8:9b:59:a6:
         e1:75:a1:bb:4b:16:2d:ee:76:58:00:09:a4:fb:e0:ec:0f:08:
         ad:21:df:44:24:a3:29:1b:70:e7:89:c5:4e:23:1e:ed:23:32:
         ee:70:4a:8e:0c:ee:5e:63:ba:8c:a9:4c:b4:b4:55:a5:2e:50:
         3e:e1:8f:4f:24:48:4b:da:cd:77:71:0f:98:6e:3d:6d:16:ea:
         7b:7e:6f:53:b8:68:0a:43:87:35:24:42:50:f5:21:46:a1:72:
         98:f8:ae:9f:dd:cd:98:66:ec:6c:d3:51:ec:52:c8:b9:85:f4:
         e5:30:bf:59:a6:ed:8a:62:55:51:85:b2:8b:e4:d7:e3:2d:47:
         61:63:a8:e4:a9:d5:7e:00:36:26:bc:28:4a:c5:23:0e:13:e3:
         2d:db:15:58:78:29:46:b5:83:79:d3:66:ba:5c:a8:52:84:42:
         8c:51:4d:de:b9:b0:60:b5:aa:4a:c4:ea:16:17:4f:6b:f0:ed:
         85:20:25:04:91:76:9a:7a:1b:2f:0f:8c:9d:ef:e7:6c:6a:49:
         9c:d9:b0:bf:1a:5c:81:04:1e:5a:fd:a3:4e:a3:2b:a2:4a:10:
         10:56:7c:5e:43:e4:4f:a1:e4:62:a4:c9:24:58:85:b4:bd:f6:
         06:5e:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org