Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa
File:                     3137392e3132372e38302e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          23hKtxctIrRrgyecpDIKLD0XNPNg8ii/9vC5dZ1qyqs=
Subject key identifier:   8F:C1:59:C7:5E:F3:5B:B3:19:30:F2:81:81:9C:56:0A:F3:06:13:73
Certificate issuer:       /CN=8893F0FF2FC76BC29138372DA9E7EBAB17DAF056
Certificate serial:       0B37586838C49BFC4C92F63A1C837F6B790D0019
Authority key identifier: 88:93:F0:FF:2F:C7:6B:C2:91:38:37:2D:A9:E7:EB:AB:17:DA:F0:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa
Signing time:             Wed 17 Aug 2022 19:35:01 +0000
ROA not before:           Wed 17 Aug 2022 19:30:01 +0000
ROA not after:            Thu 17 Aug 2023 19:35:01 +0000
asID:                     28292
IP address blocks:        179.127.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:37:58:68:38:c4:9b:fc:4c:92:f6:3a:1c:83:7f:6b:79:0d:00:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8893F0FF2FC76BC29138372DA9E7EBAB17DAF056
        Validity
            Not Before: Aug 17 19:30:01 2022 GMT
            Not After : Aug 17 19:35:01 2023 GMT
        Subject: CN=3082010A0282010100D1C306CC703400F77A03AF742BDC654F342C0DB9BA7BA15EA1C70EC84E0CE96950DF4844E1B5ADF0448D3292D8C6B5DD355B4B8D74EEE6BB26B0324C9CFD7D628A9592864A5B2F3BECBB89DD167FA74E0B70AC5C6B25A5C3ACE00F5CAEA7982E273B2EB0548EE3E93318F0980C87E3D59CFD2BBC206F28CD96993ED5417F5E0B64AFA43F510DB789B829ACF5D8AC0CD5BCEFBA53B18E72E7C6FC20A7F7A5161D69327EC3BDA53E1EA8A4C4B8F0053482FF45D3020ADC66721913B37CC399EF4BC900F374CC6FFBFE3698D6FE954527EB97A1953CEA76DDB7783541F9086FCBB9010AFD664ABB830E1215FE78B29D88832E6EC7393D2F03432E5CDD2B5DAECC290203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:06:cc:70:34:00:f7:7a:03:af:74:2b:dc:
                    65:4f:34:2c:0d:b9:ba:7b:a1:5e:a1:c7:0e:c8:4e:
                    0c:e9:69:50:df:48:44:e1:b5:ad:f0:44:8d:32:92:
                    d8:c6:b5:dd:35:5b:4b:8d:74:ee:e6:bb:26:b0:32:
                    4c:9c:fd:7d:62:8a:95:92:86:4a:5b:2f:3b:ec:bb:
                    89:dd:16:7f:a7:4e:0b:70:ac:5c:6b:25:a5:c3:ac:
                    e0:0f:5c:ae:a7:98:2e:27:3b:2e:b0:54:8e:e3:e9:
                    33:18:f0:98:0c:87:e3:d5:9c:fd:2b:bc:20:6f:28:
                    cd:96:99:3e:d5:41:7f:5e:0b:64:af:a4:3f:51:0d:
                    b7:89:b8:29:ac:f5:d8:ac:0c:d5:bc:ef:ba:53:b1:
                    8e:72:e7:c6:fc:20:a7:f7:a5:16:1d:69:32:7e:c3:
                    bd:a5:3e:1e:a8:a4:c4:b8:f0:05:34:82:ff:45:d3:
                    02:0a:dc:66:72:19:13:b3:7c:c3:99:ef:4b:c9:00:
                    f3:74:cc:6f:fb:fe:36:98:d6:fe:95:45:27:eb:97:
                    a1:95:3c:ea:76:dd:b7:78:35:41:f9:08:6f:cb:b9:
                    01:0a:fd:66:4a:bb:83:0e:12:15:fe:78:b2:9d:88:
                    83:2e:6e:c7:39:3d:2f:03:43:2e:5c:dd:2b:5d:ae:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C1:59:C7:5E:F3:5B:B3:19:30:F2:81:81:9C:56:0A:F3:06:13:73
            X509v3 Authority Key Identifier:
                keyid:88:93:F0:FF:2F:C7:6B:C2:91:38:37:2D:A9:E7:EB:AB:17:DA:F0:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3137392e3132372e38302e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:bf:69:c5:2c:a9:d9:5f:7b:6a:bb:a9:36:e2:55:dd:3e:7c:
         4d:bd:09:36:b2:57:79:df:5e:17:d8:78:68:45:0a:df:cf:7b:
         ff:4b:bd:80:cb:bb:b2:18:93:8f:43:2c:89:46:c8:ff:ba:e1:
         6e:a7:aa:9a:27:af:e7:ae:4f:40:cb:15:95:fe:a4:75:b0:6a:
         e9:d9:56:58:9f:d5:9e:8f:65:77:0d:36:c6:6f:5c:de:26:c7:
         29:b3:b5:c9:f6:25:68:7d:03:4a:eb:5e:d2:c4:37:54:5a:3e:
         4a:78:44:b3:15:f3:25:57:bf:05:00:62:69:d8:1a:7d:27:88:
         0b:65:5e:91:b3:c2:28:64:cb:f8:ed:dd:cd:94:ca:48:22:a8:
         63:7d:e0:c8:32:ea:ff:8e:da:c0:64:fc:24:09:1b:d5:b7:a5:
         e7:0d:1f:60:a3:34:7a:cf:0e:be:ab:99:22:f1:c2:d8:9b:23:
         58:bd:fd:a7:11:0b:df:85:e9:40:e9:15:9f:41:78:3a:8b:9a:
         b5:53:5a:24:c6:b5:17:c1:18:0a:84:45:27:a4:0c:77:dd:92:
         3c:4f:33:30:e9:76:13:7d:56:0b:cc:10:b5:7a:ef:5e:a7:34:
         ba:23:36:2e:15:6f:3a:aa:27:04:84:0f:35:4e:60:56:59:c4:
         ae:03:05:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org