Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e20323633303039.roa
File:                     3137392e3130392e3132382e302f31392d3234203d3e20323633303039.roa (raw, json)
Hash identifier:          /Kue5Yk68opk/BdfYr1nbBCvMSIPDSJdNSWsl9Vz1fA=
Subject key identifier:   2D:12:B4:47:36:CA:B2:3A:1D:C2:64:48:36:04:98:87:9B:F9:72:63
Certificate issuer:       /CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
Certificate serial:       162E4CF712B3D5847934D9E461E8654C1261717B
Authority key identifier: EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e20323633303039.roa
Signing time:             Wed 21 Feb 2024 15:38:13 +0000
ROA not before:           Wed 21 Feb 2024 15:33:13 +0000
ROA not after:            Fri 21 Feb 2025 15:38:13 +0000
asID:                     263009
IP address blocks:        179.109.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2e:4c:f7:12:b3:d5:84:79:34:d9:e4:61:e8:65:4c:12:61:71:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
        Validity
            Not Before: Feb 21 15:33:13 2024 GMT
            Not After : Feb 21 15:38:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:1e:68:44:45:32:76:12:1d:75:34:81:ea:
                    e1:6d:cf:af:d5:b8:75:34:1c:4c:bd:95:bf:08:03:
                    3d:67:02:34:26:6c:56:f0:00:3a:00:63:a3:b5:cf:
                    d0:e8:43:fa:97:b0:69:b3:e2:0f:fe:d8:e1:cc:60:
                    50:49:9e:6b:d9:86:0b:84:0b:e6:95:eb:7d:4c:fe:
                    dd:89:c8:f4:1a:97:a1:55:20:54:1d:3f:31:f7:e4:
                    ba:11:87:e4:b6:bf:fa:86:af:38:13:b2:40:f7:06:
                    21:81:89:43:3c:e8:89:cc:a4:6b:1e:5c:6a:b2:fa:
                    9b:47:7a:fb:c1:23:b4:98:1f:d1:ad:0c:2d:c6:fb:
                    85:d5:a8:c8:43:51:dc:bb:27:19:ff:f9:0f:d6:df:
                    09:7e:f2:72:7b:8c:10:35:91:69:6a:38:ee:7a:b3:
                    d0:60:54:46:d8:b0:28:62:af:ee:1d:4b:d2:ae:77:
                    d3:a0:cd:ba:b5:33:c2:4b:ee:e3:0c:f3:67:bd:ef:
                    9e:b0:de:32:d8:e8:c1:e5:ae:f8:21:86:76:17:db:
                    e7:db:0f:53:65:0c:65:66:f5:b7:19:bc:d2:6d:be:
                    98:3b:6b:63:07:13:03:dd:1c:c7:00:3d:3f:8b:00:
                    c2:93:ad:7f:7a:ae:ab:9d:ff:fb:bc:a1:ea:51:99:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:12:B4:47:36:CA:B2:3A:1D:C2:64:48:36:04:98:87:9B:F9:72:63
            X509v3 Authority Key Identifier:
                keyid:EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e20323633303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:c7:e4:fe:fa:ba:f3:16:14:60:74:0c:83:68:4c:7d:f8:6d:
         a5:96:e3:05:80:e9:a4:58:51:d5:ce:ef:16:89:ca:6c:dc:7a:
         6d:d4:40:3e:dd:e7:60:21:03:b1:bd:f4:ec:8d:d4:79:b9:fc:
         17:4c:3f:02:fe:20:6b:86:ef:11:50:05:55:67:22:97:6a:34:
         29:38:8a:2a:bd:e5:49:e6:70:a2:a5:1c:aa:fd:13:9a:d2:3f:
         ab:79:f9:63:89:55:53:75:96:2f:0b:a7:8e:1b:fa:2c:d8:62:
         45:d3:09:b2:4f:c8:3d:68:d0:68:de:5f:0b:2f:50:9e:30:99:
         ae:27:ac:3f:9a:31:01:a0:50:e1:2c:ad:9f:64:b9:f3:fb:79:
         48:02:41:61:17:c1:47:8c:ab:2a:58:81:6d:ff:ed:11:60:f1:
         1f:77:a9:f3:b7:df:16:74:5c:30:74:8e:18:94:9c:a5:d7:88:
         4f:b7:45:61:1d:b6:b7:59:02:e1:fa:a5:6a:8e:bd:c9:8c:32:
         30:00:8d:0a:48:ae:d6:b4:84:5c:74:24:64:f3:f8:fd:7c:f5:
         b7:06:73:b1:a7:b5:2c:0a:eb:50:5c:27:64:63:23:9d:87:c8:
         56:73:a9:bd:61:c4:17:e6:88:c6:10:eb:44:3f:df:97:2b:0a:
         fc:84:df:53
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUFi5M9xKz1YR5NNnkYehlTBJhcXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI2MEZGNkIwMjczNzMwQzI3QkU1OUFGQjRCRUNBNEYx
MUM3RDhENjAeFw0yNDAyMjExNTMzMTNaFw0yNTAyMjExNTM4MTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTgwQjFFNjg0NDQ1MzI3NjEy
MUQ3NTM0ODFFQUUxNkRDRkFGRDVCODc1MzQxQzRDQkQ5NUJGMDgwMzNENjcwMjM0
MjY2QzU2RjAwMDNBMDA2M0EzQjVDRkQwRTg0M0ZBOTdCMDY5QjNFMjBGRkVEOEUx
Q0M2MDUwNDk5RTZCRDk4NjBCODQwQkU2OTVFQjdENENGRUREODlDOEY0MUE5N0Ex
NTUyMDU0MUQzRjMxRjdFNEJBMTE4N0U0QjZCRkZBODZBRjM4MTNCMjQwRjcwNjIx
ODE4OTQzM0NFODg5Q0NBNDZCMUU1QzZBQjJGQTlCNDc3QUZCQzEyM0I0OTgxRkQx
QUQwQzJEQzZGQjg1RDVBOEM4NDM1MURDQkIyNzE5RkZGOTBGRDZERjA5N0VGMjcy
N0I4QzEwMzU5MTY5NkEzOEVFN0FCM0QwNjA1NDQ2RDhCMDI4NjJBRkVFMUQ0QkQy
QUU3N0QzQTBDREJBQjUzM0MyNEJFRUUzMENGMzY3QkRFRjlFQjBERTMyRDhFOEMx
RTVBRUY4MjE4Njc2MTdEQkU3REIwRjUzNjUwQzY1NjZGNUI3MTlCQ0QyNkRCRTk4
M0I2QjYzMDcxMzAzREQxQ0M3MDAzRDNGOEIwMEMyOTNBRDdGN0FBRUFCOURGRkZC
QkNBMUVBNTE5OTUwQkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmAseaERFMnYSHXU0gerhbc+v1bh1NBxMvZW/CAM9ZwI0JmxW8AA6
AGOjtc/Q6EP6l7Bps+IP/tjhzGBQSZ5r2YYLhAvmlet9TP7dicj0GpehVSBUHT8x
9+S6EYfktr/6hq84E7JA9wYhgYlDPOiJzKRrHlxqsvqbR3r7wSO0mB/RrQwtxvuF
1ajIQ1HcuycZ//kP1t8JfvJye4wQNZFpajjuerPQYFRG2LAoYq/uHUvSrnfToM26
tTPCS+7jDPNnve+esN4y2OjB5a74IYZ2F9vn2w9TZQxlZvW3GbzSbb6YO2tjBxMD
3RzHAD0/iwDCk61/eq6rnf/7vKHqUZlQvQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FC0StEc2yrI6HcJkSDYEmIeb+XJjMB8GA1UdIwQYMBaAFOtg/2sCc3MMJ75Zr7S+
yk8Rx9jWMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhQUlJXQ1dXalFMbmRU
dGh4N1BlR1doTjh1ZW9idkp1bURyOThwaFNrbU1ULzAvRUI2MEZGNkIwMjczNzMw
QzI3QkU1OUFGQjRCRUNBNEYxMUM3RDhENi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FQjYwRkY2QjAyNzM3MzBDMjdCRTU5QUZCNEJFQ0E0RjExQzdE
OEQ2LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84UFJSV0NXV2pRTG5kVHRoeDdQ
ZUdXaE44dWVvYnZKdW1Ecjk4cGhTa21NVC8wLzMxMzczOTJlMzEzMDM5MmUzMTMy
MzgyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM2MzMzMDMwMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAWzbYAwDQYJKoZIhvcNAQELBQADggEBAD3H5P76uvMWFGB0DINoTH34baWW4wWA
6aRYUdXO7xaJymzcem3UQD7d52AhA7G99OyN1Hm5/BdMPwL+IGuG7xFQBVVnIpdq
NCk4iiq95UnmcKKlHKr9E5rSP6t5+WOJVVN1li8Lp44b+izYYkXTCbJPyD1o0Gje
XwsvUJ4wma4nrD+aMQGgUOEsrZ9kufP7eUgCQWEXwUeMqypYgW3/7RFg8R93qfO3
3xZ0XDB0jhiUnKXXiE+3RWEdtrdZAuH6pWqOvcmMMjAAjQpIrta0hFx0JGTz+P18
9bcGc7GntSwK61BcJ2RjI52HyFZzqb1hxBfmiMYQ60Q/35crCvyE31M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org