Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/3137392e302e3130382e302f32342d3234203d3e20323731363334.roa
File:                     3137392e302e3130382e302f32342d3234203d3e20323731363334.roa (raw, json)
Hash identifier:          ipEOuw2Ah+8DhErcsPp81OePJ8UYAs0M/7KUW9iyEm4=
Subject key identifier:   B2:AF:52:B0:F3:46:43:FD:1C:5E:06:18:9C:0A:9A:BD:94:AD:47:DC
Certificate issuer:       /CN=41B69B9869149DD24C9F54616D903C5DAD7FC73E
Certificate serial:       26E5ED0761C32EEAB06A2590379C71C6C2B40809
Authority key identifier: 41:B6:9B:98:69:14:9D:D2:4C:9F:54:61:6D:90:3C:5D:AD:7F:C7:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41B69B9869149DD24C9F54616D903C5DAD7FC73E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/3137392e302e3130382e302f32342d3234203d3e20323731363334.roa
Signing time:             Tue 30 May 2023 13:23:50 +0000
ROA not before:           Tue 30 May 2023 13:18:50 +0000
ROA not after:            Tue 28 May 2024 13:23:50 +0000
asID:                     271634
IP address blocks:        179.0.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e5:ed:07:61:c3:2e:ea:b0:6a:25:90:37:9c:71:c6:c2:b4:08:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B69B9869149DD24C9F54616D903C5DAD7FC73E
        Validity
            Not Before: May 30 13:18:50 2023 GMT
            Not After : May 28 13:23:50 2024 GMT
        Subject: CN=B2AF52B0F34643FD1C5E06189C0A9ABD94AD47DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:b7:8e:d9:2b:d8:5a:06:a0:d4:ab:b2:47:
                    5d:d6:46:ea:ad:c5:39:52:7a:de:d7:38:16:a0:0a:
                    be:55:06:50:06:b0:f3:70:7d:82:a9:5c:63:37:4a:
                    d4:e8:a7:c5:cf:7c:a6:7b:af:bd:aa:5f:51:ad:03:
                    c7:59:c2:ea:fd:3d:49:6a:4b:50:4b:24:4d:1b:52:
                    36:9f:4e:38:e9:d5:0d:5b:88:c7:27:0c:3e:99:93:
                    2f:e0:fe:80:d4:c6:d5:c7:4c:0d:4a:6b:79:3b:14:
                    cc:77:2a:0a:96:da:64:47:71:0c:36:14:71:ce:6c:
                    7c:38:f5:ed:36:f8:34:9b:05:73:c4:10:63:cc:e8:
                    a3:bf:12:2e:30:21:3f:15:5b:cd:8c:1b:b5:b6:eb:
                    de:73:af:81:41:19:bf:70:73:22:35:d0:00:de:8b:
                    92:24:16:e6:2f:3c:87:fc:91:5e:b9:49:df:6c:97:
                    97:cb:51:c7:5a:ed:7f:8d:09:d9:6a:b5:13:60:22:
                    28:9f:e8:48:10:26:b7:59:63:be:e3:82:17:06:7e:
                    73:4a:a7:5e:82:2e:52:de:0c:70:8d:74:bd:e7:65:
                    ce:63:f9:ba:e7:aa:5a:d8:1e:af:1e:1c:d4:e0:7f:
                    7b:1e:a4:35:04:cb:d4:e8:91:37:dc:25:91:be:56:
                    40:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AF:52:B0:F3:46:43:FD:1C:5E:06:18:9C:0A:9A:BD:94:AD:47:DC
            X509v3 Authority Key Identifier:
                keyid:41:B6:9B:98:69:14:9D:D2:4C:9F:54:61:6D:90:3C:5D:AD:7F:C7:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/41B69B9869149DD24C9F54616D903C5DAD7FC73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41B69B9869149DD24C9F54616D903C5DAD7FC73E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uoZxjRFpYCN1ewfL5qj294HjPebhQejiR9dnXb6oe2d/0/3137392e302e3130382e302f32342d3234203d3e20323731363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:df:fb:b4:4d:35:9d:c5:9f:63:f1:5c:6b:98:85:55:84:8b:
         48:6a:c6:d6:28:8a:ae:3a:c0:02:ad:1a:3c:68:09:19:50:9b:
         be:b8:32:ff:33:c9:86:0f:74:6d:e5:6d:85:b7:78:5d:74:91:
         8b:57:02:4a:8f:da:9a:53:58:2a:74:eb:33:ae:84:b5:5d:4e:
         5b:d1:50:c8:c9:ed:56:1e:55:44:b0:b9:9c:cb:d5:8d:6d:54:
         50:98:67:b4:d2:0c:c0:25:23:5c:c3:94:0b:61:12:12:21:36:
         b0:b0:3a:06:f7:e9:99:aa:9f:f3:b6:e2:9c:3b:e3:18:63:1a:
         ad:41:ba:c6:78:10:28:68:45:85:a8:ff:48:25:96:bd:93:87:
         54:bb:53:f1:9f:1d:68:8f:2e:57:46:58:dd:9c:82:fe:35:a5:
         ff:a5:4e:56:4e:9f:16:23:ba:68:24:96:81:a0:a4:bb:88:ee:
         34:71:ba:f8:1a:24:e7:6a:2e:4a:1a:d2:11:b6:25:12:da:d9:
         42:13:9d:f3:d5:02:0b:d4:b6:b6:d7:24:60:9a:f4:c3:c9:65:
         70:e0:2e:5c:2a:bc:96:bf:4f:4f:c8:a5:63:75:16:97:2a:84:
         aa:0f:f9:41:22:46:a5:af:d2:ff:2e:8a:ca:2a:77:bc:0a:ff:
         98:37:ea:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org