Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa
File:                     3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          J5lnSMQNLJ/HLuWQNAVy/qx6EhnfSeMVsOspgNQ3fCI=
Subject key identifier:   AD:80:FC:90:A0:27:46:77:2E:13:EC:B1:73:43:66:93:D4:50:19:17
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       3F71D24FB7A93C28336423430EC5A6EF85FE36F2
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:50 +0000
ROA not before:           Wed 21 Dec 2022 17:11:50 +0000
ROA not after:            Wed 20 Dec 2023 17:16:50 +0000
asID:                     28146
IP address blocks:        179.127.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:71:d2:4f:b7:a9:3c:28:33:64:23:43:0e:c5:a6:ef:85:fe:36:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:50 2022 GMT
            Not After : Dec 20 17:16:50 2023 GMT
        Subject: CN=AD80FC90A02746772E13ECB173436693D4501917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:0e:bc:be:60:1e:06:c2:9c:7f:3e:30:fd:
                    08:0f:17:89:5e:cb:ca:36:23:fa:35:83:1e:44:5d:
                    a4:64:c8:cb:a8:67:76:f6:69:ae:1f:68:e8:2f:12:
                    fd:92:b2:05:99:c0:75:87:bc:da:8a:0b:ec:0a:b9:
                    81:5a:9d:10:b4:43:e3:59:69:83:3b:0c:63:19:64:
                    5b:44:fc:63:93:d8:6a:8b:15:55:2a:f9:66:74:9d:
                    cc:7d:c4:94:b1:d5:ef:d0:ef:12:16:a5:e2:9a:4f:
                    23:5d:cc:d7:1a:a7:9c:40:81:fb:68:b7:a9:82:0a:
                    a2:5d:75:7b:53:66:9f:5d:80:12:54:4a:2e:fa:fe:
                    65:0d:5c:15:25:0e:2a:2a:ff:b1:d4:79:d5:24:eb:
                    06:1a:ca:ae:ba:29:35:21:74:c5:cb:b3:75:8a:28:
                    4f:1b:4d:ae:07:fc:1f:99:69:fe:ea:ff:00:47:80:
                    08:a6:90:ba:bf:5f:02:19:87:1e:09:e6:53:6c:ce:
                    15:7a:72:f4:82:be:32:75:b1:0a:9b:0c:cb:ed:3e:
                    8d:3d:24:4e:c9:da:58:21:d0:8c:b9:e0:a0:49:b8:
                    63:e3:01:72:7c:7a:d1:e9:c6:c5:90:7a:6b:65:ea:
                    a2:2c:92:90:87:75:17:92:f2:e5:83:ac:57:01:89:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:80:FC:90:A0:27:46:77:2E:13:EC:B1:73:43:66:93:D4:50:19:17
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3137392e3132372e3132382e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:5a:40:e8:3b:54:d7:93:b9:2d:2a:40:68:21:4d:07:f3:49:
         9f:98:5e:df:ea:71:86:d2:72:60:31:0c:c7:27:7c:9f:93:29:
         cf:9e:f0:4a:ca:2a:1f:79:6b:1d:4e:21:0b:ce:95:7f:e3:a7:
         b7:21:e3:e1:19:33:34:48:e9:b9:07:71:4d:25:a7:f8:d1:45:
         bf:d6:c6:1a:7e:89:64:19:20:ee:02:da:86:ab:aa:a0:14:03:
         ad:67:cd:c7:13:bc:2c:06:96:04:8e:97:7d:21:94:bb:0b:8f:
         79:52:32:d5:45:94:17:ad:2c:df:50:ea:76:cb:4a:1c:5b:fa:
         79:2d:a5:9a:27:87:93:f6:bc:e1:a4:7b:63:c2:5b:bb:44:a6:
         9a:06:bd:a4:bd:2a:f7:4c:8e:de:e5:ad:3c:fe:09:86:1c:b1:
         f4:33:2a:52:c2:00:7d:6e:f3:81:5d:32:bf:67:23:99:2f:d8:
         2a:b6:ec:e8:b4:a1:92:c0:08:c3:df:0c:16:53:f2:f0:c1:4a:
         ab:99:18:70:79:a4:86:1c:3f:cc:99:dc:dd:b2:27:b7:93:53:
         90:36:ba:44:b7:f3:5b:6e:dc:83:2f:33:a7:38:29:df:25:a2:
         40:f9:7e:1a:ef:ab:b0:bd:18:4d:6d:4f:7e:34:e5:3d:11:ba:
         9b:15:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org