Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/3137392e36332e38332e302f32342d3234203d3e20323731353536.roa
File:                     3137392e36332e38332e302f32342d3234203d3e20323731353536.roa (raw, json)
Hash identifier:          8nOnb9YiyWVAaNWnTydX1T/MA42E0ylEt8b83ee7zIE=
Subject key identifier:   7D:B8:31:A8:6A:A7:B2:EA:C3:3E:38:FD:39:F3:D2:BF:30:CA:10:68
Certificate issuer:       /CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
Certificate serial:       185BDF23C3E867F36C5248CE556DC95110EC36A8
Authority key identifier: C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/3137392e36332e38332e302f32342d3234203d3e20323731353536.roa
Signing time:             Wed 03 Apr 2024 18:58:26 +0000
ROA not before:           Wed 03 Apr 2024 18:53:26 +0000
ROA not after:            Wed 02 Apr 2025 18:58:26 +0000
asID:                     271556
IP address blocks:        179.63.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5b:df:23:c3:e8:67:f3:6c:52:48:ce:55:6d:c9:51:10:ec:36:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9957CD229D4E9BB85F11780704835FC3E2E08E3
        Validity
            Not Before: Apr  3 18:53:26 2024 GMT
            Not After : Apr  2 18:58:26 2025 GMT
        Subject: CN=7DB831A86AA7B2EAC33E38FD39F3D2BF30CA1068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:d6:6c:98:3f:2d:e8:cc:87:dc:54:5e:67:
                    06:c3:ac:ca:bf:c4:23:ad:07:33:b1:48:00:da:2a:
                    a1:9b:28:1e:6a:b7:d6:a2:73:16:49:99:b0:9a:dd:
                    37:3a:7d:84:34:a8:2a:b5:e9:78:59:57:e4:ee:b9:
                    98:d7:b5:2f:83:ce:be:03:04:8b:25:f8:73:e9:ce:
                    f9:dd:d4:1e:1d:34:46:75:34:e5:43:0e:b5:9f:3a:
                    94:e5:d9:33:18:3c:7c:94:f2:25:d6:0f:fc:31:b5:
                    1c:01:71:4f:fc:b2:7f:30:36:97:13:a7:ae:66:31:
                    e5:ce:58:3f:62:59:48:a0:c4:72:d8:84:16:21:26:
                    75:88:a2:70:72:ff:69:1d:76:e7:49:71:63:e6:77:
                    30:23:44:b0:16:42:8d:82:ca:d0:e1:de:81:95:1a:
                    0f:34:81:ef:ca:04:0d:3e:f0:87:99:8d:01:82:12:
                    d6:68:cf:88:f6:db:00:25:5f:6e:f0:0a:dc:33:06:
                    76:14:7c:1d:c4:90:c3:c9:51:54:52:18:61:9c:69:
                    1b:54:73:5d:23:35:5a:c5:20:ac:ab:93:62:9f:46:
                    a3:ec:b8:93:c4:09:f9:e6:f2:6b:59:7c:25:f5:f8:
                    12:0a:09:1b:4e:2b:51:2d:ed:77:b3:66:7b:37:26:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B8:31:A8:6A:A7:B2:EA:C3:3E:38:FD:39:F3:D2:BF:30:CA:10:68
            X509v3 Authority Key Identifier:
                keyid:C9:95:7C:D2:29:D4:E9:BB:85:F1:17:80:70:48:35:FC:3E:2E:08:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9957CD229D4E9BB85F11780704835FC3E2E08E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/1/3137392e36332e38332e302f32342d3234203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7d:c6:47:eb:2f:91:47:f3:17:c4:55:0e:8d:75:d6:66:d0:
         5d:94:e3:12:92:6d:37:11:69:fe:11:94:fa:6d:f1:2b:9a:d8:
         49:30:c1:37:ae:d8:12:b9:ea:41:2e:4b:45:83:2e:68:30:c4:
         39:32:e0:78:02:1f:e3:7e:2d:c4:82:15:38:f2:f7:b2:2a:93:
         8e:a1:cc:fd:5f:37:7e:a3:2e:a1:ec:f5:c3:f3:ce:c3:a1:ab:
         55:ff:fe:f7:e2:d6:3b:b0:81:b9:c2:32:12:33:44:2a:43:7b:
         bb:1e:ce:7b:30:6e:05:33:73:6b:ac:03:db:f3:e9:aa:cf:5c:
         61:f4:b4:73:3d:ea:c3:e4:a9:30:af:95:f4:5d:34:a4:3a:be:
         03:f1:ef:80:2e:92:69:77:42:5b:20:bd:c0:f4:e9:4a:37:a9:
         e2:f7:48:0f:16:b7:8a:8b:59:b6:5b:5e:b6:2b:dd:5b:0d:27:
         52:74:81:f8:9b:c8:e3:b1:7d:2a:dd:18:81:bb:8b:f6:82:a9:
         16:66:3a:9c:b2:1d:d2:c5:8a:9e:e0:7f:8d:07:58:9a:f0:30:
         02:71:aa:e1:c6:ae:81:29:42:f6:1e:5d:3e:18:29:ef:5f:7e:
         23:2b:1a:b3:55:07:8c:f0:46:0d:98:85:57:7e:ae:20:db:e9:
         07:98:bf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org