Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/3137392e3130392e38382e302f32312d3231203d3e20323633323830.roa
File:                     3137392e3130392e38382e302f32312d3231203d3e20323633323830.roa (raw, json)
Hash identifier:          XD6cmmGangQa577BP18MufIxptLAzacm7ljeW6FcUis=
Subject key identifier:   0B:FA:E4:A1:D2:C9:FE:08:F6:7C:68:36:AA:47:5B:0E:9F:CA:94:4D
Certificate issuer:       /CN=BDF79EFB23D70999B2F88388D7AC7018CCF52374
Certificate serial:       24E7E10A1354431278C9C86DB5AE6BE7CA90A0B0
Authority key identifier: BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/3137392e3130392e38382e302f32312d3231203d3e20323633323830.roa
Signing time:             Thu 19 Oct 2023 13:27:53 +0000
ROA not before:           Thu 19 Oct 2023 13:22:53 +0000
ROA not after:            Thu 17 Oct 2024 13:27:53 +0000
asID:                     263280
IP address blocks:        179.109.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e7:e1:0a:13:54:43:12:78:c9:c8:6d:b5:ae:6b:e7:ca:90:a0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF79EFB23D70999B2F88388D7AC7018CCF52374
        Validity
            Not Before: Oct 19 13:22:53 2023 GMT
            Not After : Oct 17 13:27:53 2024 GMT
        Subject: CN=0BFAE4A1D2C9FE08F67C6836AA475B0E9FCA944D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:eb:84:89:f0:81:23:ae:44:3d:ab:c3:3b:
                    06:b5:df:c2:52:2b:83:5d:eb:a6:fb:6c:c7:9b:97:
                    11:4c:bd:b7:65:cb:0e:79:91:df:04:64:a9:b3:65:
                    12:d4:07:c8:a7:df:58:2e:ee:11:9b:0c:a2:ef:0d:
                    6e:b5:98:b3:e7:5e:fb:11:8f:3a:8a:bd:a6:f1:b2:
                    6f:21:b9:51:c9:d8:1d:2e:d1:a5:b5:6b:b5:43:3f:
                    39:ad:90:7d:32:a5:b5:91:ec:a6:8b:a8:71:95:19:
                    8d:06:7d:f5:53:8e:3e:97:32:19:ca:75:66:28:15:
                    6b:b4:0d:87:8b:1a:f7:9e:82:bd:1a:71:02:5c:8d:
                    f5:9a:8a:33:cc:d6:de:60:66:72:56:46:f9:93:8a:
                    db:b0:0c:fd:c5:91:c3:b1:46:e1:55:53:78:e3:bd:
                    33:02:9e:1e:b3:99:7c:7b:14:66:b7:fe:da:d6:55:
                    1f:68:35:c2:15:93:9b:3b:5d:26:e8:3d:ae:dc:42:
                    ee:da:33:65:c0:f9:08:f6:b2:ef:2c:63:84:d2:3c:
                    b4:d5:ce:ea:1f:ac:f8:64:7f:86:bc:e9:1a:1b:11:
                    79:71:a5:d9:83:5a:19:53:9d:a7:36:4a:d2:f9:80:
                    da:a1:4f:d5:85:21:37:21:e6:f7:6e:34:40:ca:17:
                    11:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FA:E4:A1:D2:C9:FE:08:F6:7C:68:36:AA:47:5B:0E:9F:CA:94:4D
            X509v3 Authority Key Identifier:
                keyid:BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/3137392e3130392e38382e302f32312d3231203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:4e:3f:39:cf:22:76:50:e4:ca:c5:4f:33:8f:af:45:27:08:
         84:cb:56:d9:25:f9:ba:2c:7a:e8:fd:62:d9:a7:1e:22:97:85:
         fb:a4:4f:97:40:8f:c4:b0:ab:fb:76:7f:1e:c7:47:80:de:77:
         77:b4:2d:70:d2:ef:c1:a0:b1:f9:9b:83:ea:4d:b9:b3:17:ed:
         ff:5e:b8:c9:1b:b3:f8:ec:9b:4f:d4:2d:47:ab:ab:f7:5d:67:
         3f:c7:9c:4e:d1:8d:7e:b5:22:c3:89:d9:b4:bb:47:04:22:ea:
         8c:7e:9c:f1:05:55:1d:fd:00:c0:ed:1f:97:63:7b:e7:61:45:
         af:77:97:4c:8e:b8:26:f9:03:f7:14:8a:40:6b:77:77:65:05:
         10:fd:29:1c:e1:8e:39:b3:bb:72:84:21:47:f4:39:2b:87:3f:
         54:86:81:10:74:45:62:cd:d0:a2:e0:f6:69:6e:7a:68:11:ce:
         92:1a:bd:d8:5b:92:56:88:fb:2f:79:3b:d1:89:97:c4:70:4c:
         dd:0c:cf:06:77:fb:e5:c8:e8:b8:ef:be:4d:bd:ff:a8:ea:d5:
         9f:72:01:79:40:0d:03:12:b1:98:33:ce:bd:dc:5d:78:3b:07:
         fd:f0:11:34:99:99:b5:ab:ca:38:63:6f:aa:a6:25:c7:d0:c0:
         46:16:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org