Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3234203d3e203532363339.roa
File:                     3137392e39362e3137362e302f32312d3234203d3e203532363339.roa (raw, json)
Hash identifier:          jZxSSZtiztPUZa3iOOIl48sunM77xrCnFH2bycHsktA=
Subject key identifier:   9D:CD:F5:43:16:B0:F2:5F:32:C9:7F:9C:50:83:6B:F1:23:14:42:D9
Certificate issuer:       /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial:       72617D84514BBBD05F663FD9ADA18E224D2065B2
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3234203d3e203532363339.roa
Signing time:             Mon 20 Nov 2023 17:08:57 +0000
ROA not before:           Mon 20 Nov 2023 17:03:57 +0000
ROA not after:            Mon 18 Nov 2024 17:08:57 +0000
asID:                     52639
IP address blocks:        179.96.176.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:61:7d:84:51:4b:bb:d0:5f:66:3f:d9:ad:a1:8e:22:4d:20:65:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
        Validity
            Not Before: Nov 20 17:03:57 2023 GMT
            Not After : Nov 18 17:08:57 2024 GMT
        Subject: CN=9DCDF54316B0F25F32C97F9C50836BF1231442D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6e:2e:da:dc:82:d2:82:63:bc:74:9b:b5:fb:
                    c6:d3:8a:e4:f3:5d:ed:57:f9:0a:12:88:e2:67:95:
                    fd:1c:3e:72:da:3a:9c:b0:35:67:83:d5:45:a7:76:
                    9a:8a:07:43:52:f1:e8:9a:23:8a:54:db:ce:86:2d:
                    97:a0:91:41:b1:b3:7e:a2:0b:9b:30:5b:69:c9:c4:
                    23:a0:1a:15:38:0a:95:e6:ca:ac:f5:f0:8f:e2:43:
                    2c:4b:36:30:04:99:93:9a:51:4b:05:48:a4:a5:b7:
                    8d:32:18:34:36:25:b2:6a:c0:e8:4a:ec:47:32:5a:
                    13:4a:28:37:bc:81:d3:07:82:08:43:8e:65:b6:94:
                    83:9b:07:55:5c:33:30:55:b6:ba:b8:9a:f9:0f:01:
                    32:28:c9:04:1c:7e:01:e2:bf:2b:6b:72:12:32:f9:
                    c0:73:9f:70:9b:fd:a9:68:0f:63:73:57:b6:35:d1:
                    a1:b0:01:03:64:32:e2:d8:7f:4a:7e:22:e8:64:31:
                    41:e7:07:9f:70:0b:02:15:13:93:a4:6c:d9:ee:23:
                    e8:ae:c8:d1:c1:9f:3f:a4:4f:50:8c:47:ac:16:ed:
                    ac:f0:fb:bb:29:1b:ae:99:fe:fc:0c:93:56:23:73:
                    ec:eb:c9:68:03:5f:39:39:d3:51:f3:db:4a:b4:4d:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CD:F5:43:16:B0:F2:5F:32:C9:7F:9C:50:83:6B:F1:23:14:42:D9
            X509v3 Authority Key Identifier:
                keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/3137392e39362e3137362e302f32312d3234203d3e203532363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:65:ba:82:84:2a:fb:a0:2b:62:f9:df:15:ec:80:53:ae:e9:
         26:48:34:66:88:7b:04:65:c0:3f:73:8f:3d:41:63:3f:4a:91:
         5a:f5:2b:a4:7e:6b:9c:f6:29:c2:aa:f8:a9:0a:57:bf:e2:f2:
         fd:b0:07:63:fe:15:2a:b7:47:0b:f7:67:de:ca:2f:99:6c:a3:
         23:1e:22:63:fb:48:a2:1e:3b:68:55:8a:2e:4a:95:97:c3:0d:
         a7:81:a9:9b:3e:d0:fb:aa:05:36:d6:8c:55:10:9f:e0:71:cd:
         51:f1:e0:55:72:46:c9:06:6c:89:1b:f4:7c:62:31:50:a7:eb:
         8e:9a:b0:86:9a:87:34:87:da:fb:8b:f3:b1:db:b4:3a:6b:d9:
         95:56:bb:9d:03:88:d7:01:e8:e9:33:f4:8a:60:fe:30:72:56:
         5f:40:bb:17:73:31:e9:9f:29:ed:6f:cd:78:0c:41:c9:74:c0:
         f3:37:3d:27:54:c4:6a:ae:e4:80:1c:23:1d:21:4a:23:3c:91:
         bc:4a:b1:3a:b1:09:fc:07:01:9f:d5:67:7a:dc:fb:85:ab:ec:
         69:32:a6:f7:1b:75:1a:d9:30:e8:2f:2a:17:28:dc:40:14:c1:
         75:e2:da:64:55:bc:65:e1:13:18:3a:cc:4f:d8:5d:be:9e:cd:
         d4:e2:d2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:45 2024 by rpki-client on console-ams.rpki-client.org