Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa
File:                     3137392e3132372e38302e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          fTb8Fd8+PZdF4IVIwQs1Qas/HFZnrJoBiTPn4pK2IFU=
Subject key identifier:   FD:3B:C3:BC:DF:71:23:5E:4D:44:27:25:83:5A:F3:D0:21:7E:12:94
Certificate issuer:       /CN=18351F1F584DF1964127BF7A96A3BBD25F1990EC
Certificate serial:       2D47ABF536A16DBF6019AD1FA9FE2C974A5A2BFD
Authority key identifier: 18:35:1F:1F:58:4D:F1:96:41:27:BF:7A:96:A3:BB:D2:5F:19:90:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa
Signing time:             Wed 25 May 2022 19:00:00 +0000
ROA not before:           Wed 25 May 2022 18:55:00 +0000
ROA not after:            Thu 25 May 2023 19:00:00 +0000
asID:                     28292
IP address blocks:        179.127.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:47:ab:f5:36:a1:6d:bf:60:19:ad:1f:a9:fe:2c:97:4a:5a:2b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18351F1F584DF1964127BF7A96A3BBD25F1990EC
        Validity
            Not Before: May 25 18:55:00 2022 GMT
            Not After : May 25 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:c0:12:b7:11:58:eb:b3:88:b5:5e:d2:79:
                    6b:de:04:aa:45:c5:78:71:7f:e7:c6:d0:57:54:a4:
                    02:c1:90:c2:99:8f:35:c6:78:25:13:cc:e5:22:b4:
                    a2:1b:28:25:74:52:5b:dd:b7:35:f2:90:7a:05:7b:
                    44:f1:3d:bc:34:76:56:23:46:fa:0e:98:99:ee:b2:
                    c0:8d:eb:61:ff:04:8d:9a:fb:87:83:79:a0:66:93:
                    51:7f:c0:5e:ce:5b:2e:56:1c:58:4a:38:e7:b9:95:
                    70:86:a9:4a:5b:48:78:e2:a4:6a:a9:6f:7b:2e:41:
                    23:fe:67:54:52:69:00:e1:a1:8e:b3:65:eb:10:38:
                    73:7b:fd:ed:a0:dc:90:9c:97:db:d9:5b:00:64:99:
                    f3:c0:4b:73:15:5b:0d:a0:19:08:ae:f3:fc:7b:f9:
                    da:6a:39:44:41:6d:fb:0d:22:77:37:42:d9:23:14:
                    72:d6:a9:62:50:44:fc:30:80:38:c2:3f:3a:83:37:
                    f8:0b:bd:e1:c1:00:1e:20:71:cf:58:fd:80:00:7a:
                    34:7f:50:3d:c0:c3:2f:11:18:a2:d4:2c:84:b3:b2:
                    9b:16:43:12:8a:15:62:85:58:1d:5c:4e:7a:b5:c6:
                    20:71:4b:e2:24:80:c8:c2:fa:04:ec:cc:fd:2a:65:
                    9b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3B:C3:BC:DF:71:23:5E:4D:44:27:25:83:5A:F3:D0:21:7E:12:94
            X509v3 Authority Key Identifier:
                keyid:18:35:1F:1F:58:4D:F1:96:41:27:BF:7A:96:A3:BB:D2:5F:19:90:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:b1:85:5d:30:e7:aa:6d:e4:56:2e:7e:e9:45:35:b0:d2:5a:
         7a:a7:64:14:e5:b2:e7:00:53:ca:9f:79:a6:d6:de:db:e8:0a:
         66:c4:b0:13:61:53:fc:8b:b1:bd:f1:90:0c:35:f1:a3:2c:94:
         6b:ad:c0:f2:fe:a8:c3:32:11:b7:21:05:16:98:3b:03:3e:7b:
         bf:36:23:4b:5e:45:92:c7:67:4c:1d:a5:7b:ab:6b:6e:a2:a2:
         7b:35:43:3c:73:62:e0:0f:46:ca:bd:34:b9:d6:ca:a3:47:3f:
         4e:59:e4:5a:3e:ab:60:20:1f:96:31:7e:7c:b2:78:bc:62:f0:
         6b:ae:5e:a1:40:87:cb:df:77:a7:6d:30:6a:52:18:c8:c1:5e:
         6f:11:0c:ad:7c:cd:e3:3b:29:42:71:de:01:c9:ac:88:47:08:
         a3:a7:df:fa:3e:b9:92:03:9f:60:bb:e3:8f:9c:bb:86:69:82:
         9e:7b:62:c4:7c:d0:94:ad:41:0c:d7:49:26:46:b6:3f:12:76:
         88:e6:4a:d7:7c:c5:79:ae:de:3f:fd:02:58:9c:97:61:72:ab:
         ad:21:e5:2a:f3:97:b0:dc:9f:91:23:f0:db:af:54:2c:6a:1a:
         41:f9:d7:f2:9f:19:4c:5d:24:47:18:7b:ab:0a:f7:12:5d:69:
         b0:45:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org