Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa
File:                     3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa (raw, json)
Hash identifier:          3KE4y/Y3fP0Xt11OznAiEsUUVbiCgD6iwAeE1sta+54=
Subject key identifier:   B8:05:EE:7B:5D:B5:5E:B6:5D:53:AE:EF:0A:FA:41:55:00:89:2D:12
Certificate issuer:       /CN=BDF79EFB23D70999B2F88388D7AC7018CCF52374
Certificate serial:       241EE6E0B3D78244EE6F4E526C0E7331C6751733
Authority key identifier: BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa
Signing time:             Mon 04 Dec 2023 11:28:52 +0000
ROA not before:           Mon 04 Dec 2023 11:23:52 +0000
ROA not after:            Mon 02 Dec 2024 11:28:52 +0000
asID:                     263280
IP address blocks:        179.109.88.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1e:e6:e0:b3:d7:82:44:ee:6f:4e:52:6c:0e:73:31:c6:75:17:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF79EFB23D70999B2F88388D7AC7018CCF52374
        Validity
            Not Before: Dec  4 11:23:52 2023 GMT
            Not After : Dec  2 11:28:52 2024 GMT
        Subject: CN=B805EE7B5DB55EB65D53AEEF0AFA415500892D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:8a:23:ac:01:86:0e:cc:cd:a1:e6:24:08:
                    80:08:38:b1:b2:04:66:11:2b:e1:22:c7:83:41:c4:
                    f9:7b:cc:65:da:70:b7:f8:a6:dc:7a:fa:82:f0:ae:
                    57:61:6b:f5:92:d3:df:c0:e6:c6:89:1b:e3:d5:aa:
                    7d:b3:5f:1e:c3:08:5d:05:d2:31:98:6c:5d:1e:08:
                    6b:b9:c0:4c:04:fc:1c:1c:dc:ab:17:96:83:00:36:
                    36:1b:42:7f:8d:f6:54:74:36:85:a9:67:7b:de:53:
                    f9:50:de:e8:f8:cb:66:bb:2b:a8:ee:a0:70:ae:89:
                    1c:3b:1d:1c:86:7d:b3:b6:1a:c1:91:8a:ce:78:6a:
                    9d:ae:b2:4f:70:00:41:14:5b:5a:c6:26:a7:a5:95:
                    ef:ff:22:a1:3e:12:9b:b2:26:eb:f2:1f:07:a6:96:
                    9e:a3:43:bb:0d:b7:70:47:d8:4b:2e:52:69:23:14:
                    06:b4:16:02:c1:81:7d:7f:b5:7c:7d:59:36:03:f1:
                    ef:18:4e:f4:4c:78:78:a0:20:2f:7a:db:df:fd:41:
                    34:78:46:9b:3a:ed:d2:53:1b:f1:89:4c:f7:13:ed:
                    fc:1a:81:ad:d8:97:b7:80:ae:d7:ab:d7:bb:c6:e8:
                    64:1c:d3:bb:5a:a8:97:cc:27:87:12:50:e6:23:d9:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:05:EE:7B:5D:B5:5E:B6:5D:53:AE:EF:0A:FA:41:55:00:89:2D:12
            X509v3 Authority Key Identifier:
                keyid:BD:F7:9E:FB:23:D7:09:99:B2:F8:83:88:D7:AC:70:18:CC:F5:23:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF79EFB23D70999B2F88388D7AC7018CCF52374.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/3137392e3130392e38382e302f32312d3234203d3e20323633323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:cc:e0:5c:76:24:7f:88:0a:7d:4e:3d:bb:34:c4:f3:08:91:
         09:f5:8c:6d:98:8d:38:1c:20:e3:32:fd:d6:99:28:20:1e:ac:
         4b:f6:27:37:78:4a:eb:ef:e7:73:96:18:1f:32:a0:8e:b5:39:
         ae:7e:da:19:c0:f1:63:f0:49:a1:e3:ce:71:45:b1:f2:af:0d:
         4d:18:30:6a:49:03:d8:c6:e5:e6:9f:2a:e6:52:8c:f8:5b:ad:
         b9:cb:fe:b5:b2:c8:68:72:e5:b6:ec:fb:2c:34:73:9a:b5:54:
         11:d9:e4:1a:ee:74:c6:6b:29:55:ab:9c:23:a8:a5:7e:fd:74:
         b9:2d:a2:8e:8a:1a:83:40:c2:9f:ee:e3:cf:6e:f3:5f:8c:51:
         d9:9d:54:af:e3:1d:75:4d:d9:aa:57:b1:6f:13:db:12:7f:9d:
         3f:0b:25:6e:7c:0e:12:7e:7f:e1:48:ec:3f:e2:9f:a6:0c:cf:
         0e:d6:e0:45:2c:18:b6:5f:4a:b4:ac:c9:40:d3:70:fc:8a:fc:
         5d:f9:53:46:b2:b2:36:4d:e1:87:01:8d:ff:b1:4d:c4:36:0b:
         23:5d:c0:97:3d:8d:98:b4:e8:56:34:ea:70:1d:ab:c7:9f:5c:
         a2:39:80:0f:90:a7:73:40:17:82:44:d3:12:99:53:08:63:66:
         16:7b:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org