Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32322d3234203d3e20323635303636.roa
File:                     3137392e3132352e32302e302f32322d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          vpGlfZT1ycvc3r5TyT7CtShl2u5Q5VgCSKBsuVlpcoE=
Subject key identifier:   FE:FE:78:FD:B7:0B:D4:5E:AE:66:DF:B7:79:DB:BD:E6:4F:5A:8E:FD
Certificate issuer:       /CN=6B7F9AA02EB21C2A9C3090165A06361CBE0662CC
Certificate serial:       4572A1BBD2A8F44278A07BF787FB2D73F4248058
Authority key identifier: 6B:7F:9A:A0:2E:B2:1C:2A:9C:30:90:16:5A:06:36:1C:BE:06:62:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32322d3234203d3e20323635303636.roa
Signing time:             Fri 11 Aug 2023 20:08:48 +0000
ROA not before:           Fri 11 Aug 2023 20:03:48 +0000
ROA not after:            Fri 09 Aug 2024 20:08:48 +0000
asID:                     265066
IP address blocks:        179.125.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:72:a1:bb:d2:a8:f4:42:78:a0:7b:f7:87:fb:2d:73:f4:24:80:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B7F9AA02EB21C2A9C3090165A06361CBE0662CC
        Validity
            Not Before: Aug 11 20:03:48 2023 GMT
            Not After : Aug  9 20:08:48 2024 GMT
        Subject: CN=FEFE78FDB70BD45EAE66DFB779DBBDE64F5A8EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:86:15:e5:c6:32:91:d1:20:d5:30:be:4c:
                    41:44:44:58:a4:07:a3:97:28:77:4b:78:a5:66:80:
                    4a:62:53:1e:ae:b4:d3:ea:48:07:ed:4e:44:a0:97:
                    e8:1d:f2:21:41:7f:26:30:dc:b3:fa:4a:65:84:65:
                    74:a3:5a:a4:77:ed:d4:b0:cc:56:cf:c9:37:0b:53:
                    25:b1:6e:87:44:a2:79:77:2d:4e:78:7f:48:b0:65:
                    84:2c:13:cf:f1:d7:32:e9:b0:43:16:45:cd:00:9b:
                    f0:67:6f:ee:66:44:55:41:4e:ab:91:73:4c:e0:14:
                    02:08:9c:43:e5:60:98:29:ee:09:3f:39:07:56:9a:
                    8f:44:ef:b5:49:4a:67:14:59:16:37:67:52:b0:5f:
                    e6:51:cb:52:52:38:6b:27:da:31:84:c6:a0:33:8f:
                    d0:20:50:61:3f:10:4b:c3:84:73:7f:9d:5a:aa:b4:
                    ec:64:cf:34:3b:e1:b5:ad:8e:07:73:18:77:94:9e:
                    44:9e:cb:fa:01:6b:22:a9:44:94:a2:2a:03:54:61:
                    17:95:c6:27:45:c2:ec:5a:df:f3:9e:92:56:18:81:
                    98:d8:4a:24:1d:13:ad:15:ec:6e:f5:ea:aa:0e:2b:
                    12:2b:c6:aa:0e:3c:18:af:df:47:0c:b5:c2:ff:f7:
                    5c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FE:78:FD:B7:0B:D4:5E:AE:66:DF:B7:79:DB:BD:E6:4F:5A:8E:FD
            X509v3 Authority Key Identifier:
                keyid:6B:7F:9A:A0:2E:B2:1C:2A:9C:30:90:16:5A:06:36:1C:BE:06:62:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6B7F9AA02EB21C2A9C3090165A06361CBE0662CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3137392e3132352e32302e302f32322d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:18:df:8d:2e:ed:ec:56:6b:4c:d9:3a:1f:38:a8:4b:06:f0:
         70:15:5c:03:39:e0:e4:44:8a:2d:09:fc:b2:41:23:be:8b:77:
         cc:3b:f2:dd:55:0b:28:a7:55:98:0b:cd:29:b9:8d:dd:06:29:
         f9:03:42:86:5f:61:6f:c5:02:72:03:87:07:33:b1:8b:4a:da:
         82:c7:b4:bc:c9:6f:19:a3:7f:ff:01:93:2d:bd:2d:82:fb:b0:
         a1:ad:ce:64:22:96:98:c1:d6:1b:d1:bb:a8:c0:d0:b8:24:de:
         a6:dd:77:64:1a:24:30:f7:f6:89:a0:73:7f:e5:eb:de:57:5a:
         90:0c:ec:ce:0d:2f:99:df:71:dc:13:0f:ce:87:6e:07:f5:85:
         a9:3d:99:7e:f6:57:67:1b:ad:af:57:84:16:0a:12:87:b5:cd:
         ab:7a:11:59:dd:e2:ef:6f:bd:eb:d3:bc:97:fc:30:80:70:61:
         b0:44:12:24:3d:18:f7:fe:0f:49:b4:1b:e2:c3:6b:07:55:13:
         71:99:e0:e9:fa:d2:80:d5:e5:27:a8:0f:5a:e0:92:80:c7:82:
         8d:92:1f:08:a0:93:96:08:8e:66:69:4c:31:35:5a:5b:7c:58:
         a0:77:ed:dc:de:ee:5c:c9:5d:b2:42:d7:64:4b:ee:5e:0b:b4:
         2d:02:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org