Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/3137392e34322e3130302e302f32322d3332203d3e20323731313438.roa
File:                     3137392e34322e3130302e302f32322d3332203d3e20323731313438.roa (raw, json)
Hash identifier:          eRfSnRElalFaLMrAAEblufNw1JY0GPrZdCkIujYH1mo=
Subject key identifier:   E6:88:BA:70:46:F9:D4:D3:8E:3D:8F:34:74:60:43:D2:1B:9B:C3:A4
Certificate issuer:       /CN=DF563158661BF15D74E352702AFF21D97D2FBCCD
Certificate serial:       1C09CC4BA403F5C47B8B8521CE35483295DB95CF
Authority key identifier: DF:56:31:58:66:1B:F1:5D:74:E3:52:70:2A:FF:21:D9:7D:2F:BC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/3137392e34322e3130302e302f32322d3332203d3e20323731313438.roa
Signing time:             Thu 18 Jan 2024 12:45:21 +0000
ROA not before:           Thu 18 Jan 2024 12:40:21 +0000
ROA not after:            Thu 16 Jan 2025 12:45:21 +0000
asID:                     271148
IP address blocks:        179.42.100.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:09:cc:4b:a4:03:f5:c4:7b:8b:85:21:ce:35:48:32:95:db:95:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF563158661BF15D74E352702AFF21D97D2FBCCD
        Validity
            Not Before: Jan 18 12:40:21 2024 GMT
            Not After : Jan 16 12:45:21 2025 GMT
        Subject: CN=E688BA7046F9D4D38E3D8F34746043D21B9BC3A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:46:78:86:6d:7a:9f:e7:d1:9f:19:5d:f5:
                    29:fb:88:fd:6e:1a:0a:df:3d:92:57:fd:c6:38:5e:
                    ac:3c:f4:e9:78:de:80:db:d9:08:68:42:3c:7c:ea:
                    23:47:67:70:e7:8b:2f:b2:18:e7:36:0a:06:f1:7c:
                    fa:a1:7d:72:38:fe:56:92:97:34:8f:27:13:6e:26:
                    df:b6:c6:35:53:e8:58:da:d5:fd:26:de:4c:dc:06:
                    30:7d:5a:13:6c:bf:f3:f6:57:1c:85:e8:65:4f:71:
                    9b:51:4c:ac:6c:94:e7:e3:14:83:4f:1c:ad:0f:6f:
                    69:5d:1a:5e:04:19:a6:91:c8:77:4e:2e:6b:9e:72:
                    a0:44:34:92:50:b2:55:19:6e:e2:3d:75:00:ab:ab:
                    f2:59:e4:76:55:98:8a:f9:e2:0b:71:44:8f:f9:86:
                    0a:01:0a:7a:96:42:e1:b8:2c:2e:9d:19:ee:0d:04:
                    6e:e7:11:40:d2:52:6a:ae:08:64:b3:9d:6f:dd:bf:
                    94:a4:82:ea:7f:5b:87:ab:f2:3d:31:38:f6:d8:bc:
                    88:c7:35:73:b4:75:e2:b3:62:95:51:e6:90:14:ee:
                    d7:d9:7c:e3:69:60:dc:07:95:42:bf:91:79:16:5b:
                    8a:f4:b8:15:06:bc:a7:36:40:a1:67:ad:54:a2:63:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:88:BA:70:46:F9:D4:D3:8E:3D:8F:34:74:60:43:D2:1B:9B:C3:A4
            X509v3 Authority Key Identifier:
                keyid:DF:56:31:58:66:1B:F1:5D:74:E3:52:70:2A:FF:21:D9:7D:2F:BC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/3137392e34322e3130302e302f32322d3332203d3e20323731313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:4d:44:a8:fe:f9:46:d3:3c:3b:70:9d:bf:35:6e:79:14:03:
         51:b8:7a:e3:26:0d:23:18:3e:2c:cf:6e:f3:8d:82:68:9b:1f:
         af:18:9d:fc:38:f2:f6:75:5d:7f:d1:fe:69:5b:2c:28:de:1a:
         46:34:aa:cf:b9:86:ac:50:a5:9d:66:28:37:66:1b:66:be:bb:
         8f:5f:5b:df:2b:3c:ad:2f:20:9e:7b:19:d7:89:a8:2e:d6:1e:
         d5:a3:91:21:d0:bd:4a:13:9b:41:4e:48:af:22:11:54:3f:1e:
         df:4d:5b:92:29:59:ba:29:f1:c9:0d:5e:2f:d2:16:58:10:d0:
         de:e4:82:30:ae:d7:e2:00:bb:97:65:75:fa:ac:a4:07:eb:44:
         66:62:d4:11:32:62:d2:8d:c7:3f:60:3f:f1:0a:ce:fc:20:9f:
         d8:77:0e:08:f5:c6:23:4a:e8:0f:cf:c7:46:66:c4:35:a1:eb:
         3c:21:fc:ef:5b:b3:9f:9d:ff:9a:19:3c:ae:98:f2:84:0c:f9:
         69:49:46:6b:1e:d0:70:db:f2:71:4c:69:35:ab:34:d1:85:7e:
         ab:1c:07:d2:5b:c1:4b:fb:aa:ce:e6:fa:88:e0:b2:2e:f2:e5:
         da:bf:25:32:cf:21:a0:b5:c7:d3:13:43:6e:70:8c:f3:b3:69:
         64:01:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:43 2024 by rpki-client on console-ams.rpki-client.org