Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/3137392e36332e3133362e302f32332d3332203d3e20323731353631.roa
File:                     3137392e36332e3133362e302f32332d3332203d3e20323731353631.roa (raw, json)
Hash identifier:          yCyhMgzT0AkvmxB76fSP0lZrmACZlHEbC1mvO6p/SyA=
Subject key identifier:   11:C8:96:AA:75:C3:CA:BF:F4:A2:3D:C7:EA:43:06:05:16:B9:72:61
Certificate issuer:       /CN=708F064BF344A2F78B8AB54D553811C27DBF477C
Certificate serial:       64EBC70A8E6696494B4C932D21AEBC546EC6EABC
Authority key identifier: 70:8F:06:4B:F3:44:A2:F7:8B:8A:B5:4D:55:38:11:C2:7D:BF:47:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/708F064BF344A2F78B8AB54D553811C27DBF477C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/3137392e36332e3133362e302f32332d3332203d3e20323731353631.roa
Signing time:             Fri 05 Apr 2024 03:30:42 +0000
ROA not before:           Fri 05 Apr 2024 03:25:42 +0000
ROA not after:            Fri 04 Apr 2025 03:30:42 +0000
asID:                     271561
IP address blocks:        179.63.136.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:eb:c7:0a:8e:66:96:49:4b:4c:93:2d:21:ae:bc:54:6e:c6:ea:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708F064BF344A2F78B8AB54D553811C27DBF477C
        Validity
            Not Before: Apr  5 03:25:42 2024 GMT
            Not After : Apr  4 03:30:42 2025 GMT
        Subject: CN=11C896AA75C3CABFF4A23DC7EA43060516B97261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:77:02:f1:4f:51:3c:5c:dc:12:06:15:2f:
                    4d:2d:8c:ab:33:ad:bf:e0:3c:c7:94:87:8f:38:fa:
                    15:80:b7:7a:8c:1e:a3:84:c5:0e:65:a8:e8:e4:28:
                    c5:0b:ba:3d:9e:28:d6:78:09:1d:2f:57:14:20:e1:
                    7e:68:69:06:c6:e5:80:f2:a1:14:cb:9e:5d:77:f6:
                    e1:cb:a0:ef:fb:9f:20:87:1a:74:5c:78:80:9a:8f:
                    dd:d6:3c:8b:5b:76:36:e7:80:3f:1a:df:d7:93:77:
                    6b:fb:c1:17:59:49:a6:f9:8a:f8:0c:18:85:b2:d8:
                    2b:0e:7c:b6:4b:fe:52:0a:9b:59:c2:b3:e1:92:38:
                    c4:4a:17:6c:ef:a5:5a:d8:2c:68:c9:24:88:dc:e9:
                    b8:bb:a5:1b:dc:55:09:26:9f:42:d1:54:72:38:0b:
                    ab:57:11:b2:c4:96:e1:a5:c6:1d:30:06:e0:85:bc:
                    db:75:4a:ec:42:6c:14:90:9d:5a:66:04:ca:5e:49:
                    6c:10:45:1b:94:b5:6f:e9:a5:62:59:d8:04:84:d7:
                    91:34:a0:fd:49:c7:6b:c4:90:b8:e7:79:1a:c7:8b:
                    36:28:c7:5a:31:c8:0a:85:19:68:b6:87:ed:53:9c:
                    a4:d8:ca:af:35:42:57:52:ec:ea:1a:e7:34:cf:e6:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C8:96:AA:75:C3:CA:BF:F4:A2:3D:C7:EA:43:06:05:16:B9:72:61
            X509v3 Authority Key Identifier:
                keyid:70:8F:06:4B:F3:44:A2:F7:8B:8A:B5:4D:55:38:11:C2:7D:BF:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/708F064BF344A2F78B8AB54D553811C27DBF477C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/708F064BF344A2F78B8AB54D553811C27DBF477C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7S5oA7gWhenZZDoUT9g8oBFvDgCFpzoLAhBXsaVYnrB/1/3137392e36332e3133362e302f32332d3332203d3e20323731353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:b4:05:84:06:7a:de:31:31:70:dc:e6:d2:b2:01:fb:58:37:
         28:83:19:97:d4:17:75:62:eb:a1:89:f3:d7:fe:51:8d:5a:8f:
         ec:c3:b1:fe:91:89:11:e0:63:9c:95:dc:f1:a5:45:07:de:42:
         4a:ff:86:45:12:d1:a1:1e:23:b8:ee:d3:8f:07:5e:97:7a:8b:
         e0:87:ee:e4:96:46:39:cb:eb:8f:9d:59:99:31:a5:97:b9:f2:
         9b:9b:a3:90:cb:0c:e0:7e:1b:65:2a:43:71:7f:b1:06:db:72:
         b7:fe:d9:cc:d4:03:c1:2c:05:9a:f9:15:21:fe:dd:87:ff:c7:
         95:fd:0e:37:53:e6:27:9b:59:4e:89:fd:af:e6:1d:a1:32:60:
         37:c0:7f:33:5b:bc:ac:ce:97:c6:f9:0e:ca:a4:0c:58:13:9e:
         e8:22:93:c3:ef:9f:6b:2b:7d:d4:fa:a0:e4:6a:6c:35:fe:b3:
         cd:b9:46:cc:ee:05:09:d8:6c:0b:80:25:1b:75:7e:2f:b1:f7:
         a8:72:d1:d1:14:92:7d:ac:a2:78:8c:bd:66:13:1b:a5:bf:d5:
         bc:24:08:6b:b7:fc:33:ea:f1:0c:b6:6f:ff:0f:62:fe:59:99:
         2d:2e:db:ab:c0:0b:cc:e4:73:0d:9c:24:7c:22:96:ce:c2:c6:
         ca:b1:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org