Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0/3137392e36332e31332e302f32342d3234203d3e20323731353937.roa
File:                     3137392e36332e31332e302f32342d3234203d3e20323731353937.roa (raw, json)
Hash identifier:          KxGjG26K8eb5fP1FfBf69DR/a4RV/PYsLDiD3GTeuK8=
Subject key identifier:   05:86:54:31:00:64:1B:37:C2:12:72:98:75:D8:18:E3:A8:D1:98:DE
Certificate issuer:       /CN=98437F0FE77FDF7A20AD9D0D24200BE51BE10147
Certificate serial:       7907F91960CEBAC39CF81146F389A02ADDEA44D3
Authority key identifier: 98:43:7F:0F:E7:7F:DF:7A:20:AD:9D:0D:24:20:0B:E5:1B:E1:01:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98437F0FE77FDF7A20AD9D0D24200BE51BE10147.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0/3137392e36332e31332e302f32342d3234203d3e20323731353937.roa
Signing time:             Thu 23 Nov 2023 18:59:25 +0000
ROA not before:           Thu 23 Nov 2023 18:54:25 +0000
ROA not after:            Thu 21 Nov 2024 18:59:25 +0000
asID:                     271597
IP address blocks:        179.63.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:07:f9:19:60:ce:ba:c3:9c:f8:11:46:f3:89:a0:2a:dd:ea:44:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98437F0FE77FDF7A20AD9D0D24200BE51BE10147
        Validity
            Not Before: Nov 23 18:54:25 2023 GMT
            Not After : Nov 21 18:59:25 2024 GMT
        Subject: CN=0586543100641B37C212729875D818E3A8D198DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:a1:ac:ff:26:d3:aa:31:43:5e:92:fe:0b:
                    0b:6f:58:30:4b:18:d1:80:2c:11:d3:bf:6a:f7:d0:
                    63:fe:4b:f4:2b:eb:1c:c5:9b:ce:5e:98:d8:e3:7c:
                    63:3c:dc:a2:3b:41:eb:4f:69:b2:17:e0:99:a7:46:
                    b4:f3:4a:ef:7e:5b:10:13:ad:d3:01:0c:b5:a2:3d:
                    94:78:47:ab:ca:7c:f7:a5:c5:39:40:3a:a9:9d:36:
                    94:16:e3:0d:b6:cd:ad:b8:93:57:ae:0b:b9:90:e3:
                    9e:39:f1:38:43:c7:69:35:ad:38:9f:2c:85:76:e5:
                    a4:89:cf:f9:f4:cb:96:7d:33:b8:46:c6:9d:5a:7d:
                    89:03:5a:19:0e:b8:c4:41:ae:d3:b5:48:20:3b:ff:
                    42:ff:05:66:29:71:6b:54:52:e7:9f:b7:b2:33:50:
                    85:a4:30:83:0a:04:16:5f:fc:0a:ad:a2:f1:59:5b:
                    4f:89:92:27:e7:41:8a:9d:a7:af:d5:c5:50:32:11:
                    70:84:21:07:36:7a:fb:c4:08:07:c8:cb:a1:7e:25:
                    18:a2:9c:0b:c3:49:b0:03:6c:b7:bc:20:2a:d5:81:
                    ba:56:14:3f:a5:12:bc:ca:e9:13:45:25:0c:b0:56:
                    95:db:66:a8:ff:5e:91:06:17:bc:93:93:d8:fe:ac:
                    6f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:86:54:31:00:64:1B:37:C2:12:72:98:75:D8:18:E3:A8:D1:98:DE
            X509v3 Authority Key Identifier:
                keyid:98:43:7F:0F:E7:7F:DF:7A:20:AD:9D:0D:24:20:0B:E5:1B:E1:01:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0/98437F0FE77FDF7A20AD9D0D24200BE51BE10147.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98437F0FE77FDF7A20AD9D0D24200BE51BE10147.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0/3137392e36332e31332e302f32342d3234203d3e20323731353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:f3:34:85:d3:a6:0c:da:db:1b:d1:75:46:18:e5:d0:13:fa:
         17:c2:44:ae:c6:60:d8:00:db:45:ca:f5:dd:d5:f5:3c:da:32:
         75:4d:1a:8b:72:42:bd:4b:c3:f5:fb:11:88:be:b7:bc:f5:86:
         fb:06:d9:77:c6:bf:65:16:6e:b4:6b:31:f4:b0:ad:94:7e:13:
         4f:a0:42:76:2e:5a:cb:8f:32:bf:cf:1c:e1:70:d3:66:ce:71:
         f6:a8:a3:e9:82:ab:d2:7f:1d:a8:1a:46:5d:c9:e0:c5:b2:d4:
         d4:0e:98:f5:45:40:ab:12:4a:67:2b:ab:73:87:b9:21:6d:12:
         f8:4a:9c:e3:75:aa:b8:0a:02:01:6b:86:61:da:95:03:91:e0:
         a0:36:de:15:b5:c6:c4:5e:f0:73:30:a1:c4:f6:a9:4e:82:8e:
         e3:0d:ba:a6:2d:60:bc:7c:e2:88:20:b6:4d:5c:cd:75:2e:5e:
         ec:e2:38:6e:c6:43:9a:8f:be:7e:a4:de:81:0a:76:8d:b8:0d:
         80:d3:1e:1e:de:46:11:0f:04:f2:5b:7d:a5:16:11:87:4e:09:
         2b:81:34:ab:48:4c:23:4b:f6:94:59:47:a5:87:93:aa:0f:54:
         9f:de:73:c5:f7:44:39:35:3f:4e:a6:a3:a1:e7:bf:f7:13:e1:
         5f:e8:3c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org