Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/3137392e35312e3231362e302f32322d3234203d3e20323731323432.roa
File:                     3137392e35312e3231362e302f32322d3234203d3e20323731323432.roa (raw, json)
Hash identifier:          /itjZeozsvgqbgHKL3r6b4fDe608arC0UbH4Tb36Zdc=
Subject key identifier:   38:67:C8:AF:19:A5:71:4F:0F:FF:E9:91:42:6C:70:3B:6B:2F:31:94
Certificate issuer:       /CN=1CFFFE670163E5C26A8BC8CE9181519C22190820
Certificate serial:       636CCD6931824A339559F37AC42AA33A3E9E44DF
Authority key identifier: 1C:FF:FE:67:01:63:E5:C2:6A:8B:C8:CE:91:81:51:9C:22:19:08:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/3137392e35312e3231362e302f32322d3234203d3e20323731323432.roa
Signing time:             Thu 22 Feb 2024 17:43:16 +0000
ROA not before:           Thu 22 Feb 2024 17:38:16 +0000
ROA not after:            Thu 20 Feb 2025 17:43:16 +0000
asID:                     271242
IP address blocks:        179.51.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6c:cd:69:31:82:4a:33:95:59:f3:7a:c4:2a:a3:3a:3e:9e:44:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CFFFE670163E5C26A8BC8CE9181519C22190820
        Validity
            Not Before: Feb 22 17:38:16 2024 GMT
            Not After : Feb 20 17:43:16 2025 GMT
        Subject: CN=3867C8AF19A5714F0FFFE991426C703B6B2F3194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:1c:56:ad:c3:d3:c6:9c:25:1c:f8:8b:7c:
                    0a:3b:cc:7f:7c:61:b3:14:e5:b2:87:40:47:49:da:
                    3f:27:8b:85:ee:68:c3:b1:db:f0:77:59:7b:e6:09:
                    ec:ae:a9:fa:66:67:ac:66:d6:67:2a:6c:5b:45:6c:
                    a8:02:e1:2e:bd:8e:07:a9:ae:92:44:bc:9e:3f:36:
                    e1:e0:c5:07:f4:33:89:9f:c4:39:cd:01:3f:39:51:
                    04:64:25:3a:2d:24:12:14:5e:98:84:06:72:f4:01:
                    b5:a1:78:08:2c:72:fd:20:e3:b6:f4:73:43:67:cb:
                    bc:7c:41:61:2f:2b:ea:a9:a2:88:b2:aa:5b:60:9d:
                    24:a6:e6:ca:c0:c7:77:3e:f7:24:e0:db:52:da:ae:
                    df:6a:b7:64:8d:08:a5:b2:90:0a:57:39:06:a4:da:
                    cc:c7:fb:f0:21:e0:c9:bc:c0:89:1a:90:60:8d:f0:
                    07:ec:19:33:b3:ac:5c:07:eb:7e:57:a0:28:b1:d0:
                    bf:cf:c6:5d:da:5c:d5:4d:0c:e3:a6:04:5e:2c:e4:
                    26:a6:5c:a8:9f:38:48:7c:b1:fa:3f:01:dd:37:93:
                    8e:f0:39:d9:e7:00:fb:9e:d7:a5:00:37:6a:de:3a:
                    ee:18:11:1d:f5:f6:ba:7d:12:f0:98:68:c9:20:de:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:67:C8:AF:19:A5:71:4F:0F:FF:E9:91:42:6C:70:3B:6B:2F:31:94
            X509v3 Authority Key Identifier:
                keyid:1C:FF:FE:67:01:63:E5:C2:6A:8B:C8:CE:91:81:51:9C:22:19:08:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/3137392e35312e3231362e302f32322d3234203d3e20323731323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:af:50:e1:5f:ac:bb:38:55:da:75:6f:4b:26:26:a1:22:
         7f:62:44:2a:ea:b8:2b:c5:f3:ea:80:a1:51:7e:5a:b2:4a:f5:
         d6:8e:11:df:9e:9a:34:9f:78:58:29:86:f6:3b:b3:fa:d6:b8:
         34:9b:0f:c8:88:aa:92:70:ee:31:68:67:5e:97:09:a4:98:de:
         52:48:da:cc:26:43:c3:07:93:a1:cf:8c:e8:35:3f:01:3f:09:
         e7:c1:08:73:eb:ab:74:5e:5b:36:d7:a9:47:b5:e9:98:64:36:
         87:fb:9e:3e:19:0d:63:c9:63:ae:df:e1:7e:d2:2f:40:47:ef:
         b4:94:bc:27:7f:ec:7d:31:5d:1b:37:6b:fc:1e:5d:53:12:18:
         c5:8b:ac:cc:5b:73:55:49:08:fe:75:43:64:3d:0c:aa:fa:d8:
         0b:a2:fd:e0:bb:0d:ea:b5:5f:48:a6:28:b8:66:9c:80:4f:63:
         db:0a:25:5a:59:73:b7:b5:67:b0:4d:4a:0d:bc:94:0a:26:44:
         7d:8b:02:45:24:32:8a:de:97:f0:31:8b:20:b1:0d:67:20:17:
         b0:27:e9:e2:0f:55:a5:b3:25:1a:d1:1f:7c:5e:df:6d:5e:a0:
         c6:c8:e7:5a:a1:bc:15:3b:54:3d:89:91:fc:b0:cd:f0:4e:dc:
         26:48:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org