Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/3137392e3132342e3133332e302f32342d3234203d3e203631393137.roa
File:                     3137392e3132342e3133332e302f32342d3234203d3e203631393137.roa (raw, json)
Hash identifier:          FS+FlhqTQ0vdhxriHnFYXCjsFaYkESMjuYU94z1wqSE=
Subject key identifier:   0A:09:AC:71:06:26:FB:DB:75:50:93:96:0F:53:28:B6:AA:4B:B6:EC
Certificate issuer:       /CN=BA58EA98FCDCC73FCA332747FF11D3A152683827
Certificate serial:       211E168147F3F95897E73C91C33ADB348EE81771
Authority key identifier: BA:58:EA:98:FC:DC:C7:3F:CA:33:27:47:FF:11:D3:A1:52:68:38:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA58EA98FCDCC73FCA332747FF11D3A152683827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/3137392e3132342e3133332e302f32342d3234203d3e203631393137.roa
Signing time:             Wed 22 Nov 2023 20:23:47 +0000
ROA not before:           Wed 22 Nov 2023 20:18:47 +0000
ROA not after:            Wed 20 Nov 2024 20:23:47 +0000
asID:                     61917
IP address blocks:        179.124.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1e:16:81:47:f3:f9:58:97:e7:3c:91:c3:3a:db:34:8e:e8:17:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA58EA98FCDCC73FCA332747FF11D3A152683827
        Validity
            Not Before: Nov 22 20:18:47 2023 GMT
            Not After : Nov 20 20:23:47 2024 GMT
        Subject: CN=0A09AC710626FBDB755093960F5328B6AA4BB6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:7d:17:81:ee:6e:3b:50:c0:e2:f2:68:49:
                    ca:ee:d1:07:d6:03:6c:a8:19:92:c0:ec:65:21:22:
                    65:3d:2e:e5:e5:c8:cc:29:c2:27:bf:4e:ea:4c:8a:
                    57:91:de:e8:f0:8f:ba:4b:dd:b6:a9:dd:66:f0:f0:
                    49:5b:78:0d:15:2c:70:ba:b1:b2:29:f7:48:84:bb:
                    cd:c4:48:0b:71:6b:f9:b5:06:bf:c5:7a:2e:66:da:
                    b5:b8:fc:ae:d8:a1:42:03:b5:1f:56:4b:cf:8f:99:
                    ff:61:4e:e9:93:7f:39:d0:2e:d9:96:27:fb:0e:75:
                    c7:97:c9:ec:1f:b6:c3:e2:db:86:70:19:82:7f:89:
                    5a:2b:32:1b:32:21:c6:8f:13:b8:dd:4d:44:7d:19:
                    eb:fb:c0:32:91:e0:a9:3a:52:7a:27:31:16:4a:a0:
                    b0:dc:94:cb:2a:4c:ba:4d:e7:7f:4c:6a:1a:6d:13:
                    06:d6:bb:be:0b:bc:cf:4d:7f:2c:c8:c5:ef:15:26:
                    fd:3a:b1:a4:7c:2c:71:43:60:c5:c9:e2:19:74:ad:
                    c5:14:76:7a:8f:dc:0c:ac:90:65:89:44:42:47:b7:
                    87:f8:05:e2:aa:9b:26:f2:e1:35:d0:80:41:b6:1f:
                    56:6f:5d:a1:8a:66:a1:b5:bf:9e:78:4e:c0:bf:b1:
                    99:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:09:AC:71:06:26:FB:DB:75:50:93:96:0F:53:28:B6:AA:4B:B6:EC
            X509v3 Authority Key Identifier:
                keyid:BA:58:EA:98:FC:DC:C7:3F:CA:33:27:47:FF:11:D3:A1:52:68:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/BA58EA98FCDCC73FCA332747FF11D3A152683827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA58EA98FCDCC73FCA332747FF11D3A152683827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7egdyqc89ySd94aR86fRN5ZJFGLnrU8EELw5mHsvkmB9/0/3137392e3132342e3133332e302f32342d3234203d3e203631393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:76:f6:60:fd:88:46:83:ef:40:9b:9e:cf:db:cb:37:7e:df:
         8c:86:0a:38:94:63:97:f5:1b:5d:20:df:aa:bd:7b:a0:4e:ea:
         e6:d9:37:e6:04:56:18:c2:f6:93:5b:bc:3a:16:65:14:ca:03:
         30:2b:ea:cd:db:e5:79:6f:5c:a1:d3:eb:67:c2:37:5d:b7:e7:
         c6:24:9d:91:aa:b3:01:aa:2f:f0:dc:4c:02:ce:4a:d9:c4:06:
         40:7d:86:63:35:ba:86:a2:68:ed:11:b0:20:32:dc:ab:04:bf:
         62:94:07:74:a7:ab:ae:ef:ae:cf:fa:e6:c9:a3:06:7c:bd:18:
         a4:4e:88:48:7e:70:c9:32:e6:13:13:1b:4e:67:f5:70:a1:b7:
         15:65:a1:39:29:4a:fb:ab:b2:25:72:53:03:8d:58:ed:5f:7f:
         9d:61:c5:ee:62:09:49:9a:25:1f:d7:39:ff:ec:80:38:a7:b5:
         cd:0d:39:8f:c3:01:a8:76:5c:22:ce:d5:b2:90:d2:5e:f6:ff:
         2c:9b:ff:ba:e1:5f:20:64:56:39:f3:10:40:6f:13:fb:09:05:
         95:8d:18:dd:6a:dd:d0:f2:56:b4:a2:94:31:bd:56:62:79:a7:
         d6:ac:90:19:54:92:c1:cf:6a:93:cb:c3:ab:e1:b4:73:75:11:
         fe:43:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org