Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/3137392e36332e38312e302f32342d3234203d3e20323731353536.roa
File:                     3137392e36332e38312e302f32342d3234203d3e20323731353536.roa (raw, json)
Hash identifier:          88ccYRF7WDb3DQLLsBpAl0EDAtx5FWU3eYkkIwhNpbE=
Subject key identifier:   DA:9E:17:CC:31:F4:03:55:4B:D0:F1:EE:51:8F:35:07:65:DE:E6:BE
Certificate issuer:       /CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
Certificate serial:       44088498D7933ACE7487510A6483D145DACCE501
Authority key identifier: C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/3137392e36332e38312e302f32342d3234203d3e20323731353536.roa
Signing time:             Wed 03 Apr 2024 18:58:28 +0000
ROA not before:           Wed 03 Apr 2024 18:53:28 +0000
ROA not after:            Wed 02 Apr 2025 18:58:28 +0000
asID:                     271556
IP address blocks:        179.63.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:08:84:98:d7:93:3a:ce:74:87:51:0a:64:83:d1:45:da:cc:e5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
        Validity
            Not Before: Apr  3 18:53:28 2024 GMT
            Not After : Apr  2 18:58:28 2025 GMT
        Subject: CN=DA9E17CC31F403554BD0F1EE518F350765DEE6BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d9:04:be:6b:cf:28:a9:dd:c0:4f:42:0a:a3:
                    f0:41:4c:cb:91:47:5d:75:70:ba:7b:12:8c:06:82:
                    12:ea:d9:aa:1a:5b:16:f4:26:0c:8f:25:71:82:cf:
                    42:6f:4f:5a:27:9c:82:85:9f:1f:95:0d:bc:90:ad:
                    4b:04:db:7a:04:71:9c:77:47:7d:6d:28:88:4f:6e:
                    fc:3f:27:58:01:e3:a1:e2:68:5b:bf:49:67:81:14:
                    77:e0:f8:66:b2:25:ad:e2:07:cc:1c:ea:b2:86:3c:
                    57:ca:09:b6:6a:73:25:db:84:90:e5:23:c7:49:8a:
                    17:9a:be:d4:51:12:9b:2e:79:ee:af:e4:bc:42:c1:
                    95:11:65:55:78:aa:92:9d:fc:c4:99:89:11:b1:10:
                    39:2b:a7:f6:a1:7a:cd:e1:db:4f:3b:3e:b0:81:fb:
                    29:e4:4c:a0:f2:e9:4e:9a:bc:c9:f4:14:76:fd:f8:
                    d0:ea:53:1b:e2:d0:f1:b7:64:25:65:4a:04:2a:52:
                    89:b6:26:8e:d2:89:69:9d:20:f2:45:11:f8:2b:a0:
                    57:32:09:c8:df:84:d0:2f:a2:8f:65:e1:1d:04:21:
                    91:f8:eb:1b:28:eb:c1:83:bc:36:4f:78:56:b9:1f:
                    a9:58:5e:55:54:41:17:0e:05:3e:96:80:4b:11:89:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9E:17:CC:31:F4:03:55:4B:D0:F1:EE:51:8F:35:07:65:DE:E6:BE
            X509v3 Authority Key Identifier:
                keyid:C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/3137392e36332e38312e302f32342d3234203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:d2:fc:9b:ea:d5:55:64:65:2f:99:40:28:2f:45:e5:1d:
         57:a5:58:46:47:ef:0f:9a:ab:c5:4f:92:f3:f0:47:c5:b3:c2:
         e9:80:12:2f:b8:3c:d8:00:d4:d5:52:69:35:44:16:c9:38:08:
         2f:c7:87:96:a2:8d:8b:21:21:11:5f:70:20:49:73:22:64:8e:
         86:44:47:16:b7:62:df:7e:a7:00:03:7d:28:07:2f:30:89:fe:
         00:19:4c:4f:8f:4d:a6:ba:0a:59:fe:00:38:2c:fc:61:b1:af:
         e2:dd:fc:c0:6b:cf:87:5e:88:4b:ec:8d:f6:ce:db:5c:8e:fc:
         3e:25:29:5e:b8:a8:ed:89:3e:0c:b3:10:69:67:35:62:99:66:
         69:0e:a2:bc:8a:80:63:83:7e:00:bd:e2:b7:18:11:1d:a9:84:
         7c:2f:d2:7a:2d:b9:cc:51:23:4a:4b:6d:d9:79:aa:5f:51:9f:
         b0:11:b9:c5:68:8a:95:cc:2e:c5:ba:b6:23:21:aa:13:dc:d0:
         c7:c8:2f:56:a9:93:63:8d:0c:99:80:b6:00:e2:5b:55:65:ff:
         43:bb:21:81:3e:21:44:7b:45:00:08:98:ad:48:b6:fb:d5:a2:
         e8:d7:10:8d:87:b1:f5:e4:77:41:70:32:09:74:20:08:cf:a2:
         ae:4d:3b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org