Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa
File:                     3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          dwRvmxBwuLpFtj14KN3oCwKrg9bi7fcE8ifAtA+cuww=
Subject key identifier:   8D:14:B3:FB:F1:8B:87:E5:9E:B5:68:65:AA:D6:66:19:5F:59:4B:EC
Certificate issuer:       /CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
Certificate serial:       41DB27B18CE6A1B293C150B7EB96263914123BEC
Authority key identifier: EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa
Signing time:             Tue 02 Jan 2024 07:00:00 +0000
ROA not before:           Tue 02 Jan 2024 06:55:00 +0000
ROA not after:            Thu 02 Jan 2025 07:00:00 +0000
asID:                     263585
IP address blocks:        179.109.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:db:27:b1:8c:e6:a1:b2:93:c1:50:b7:eb:96:26:39:14:12:3b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
        Validity
            Not Before: Jan  2 06:55:00 2024 GMT
            Not After : Jan  2 07:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:32:f8:b4:6c:52:54:dc:8e:ad:ab:21:78:
                    11:99:12:4a:4b:0c:eb:0f:61:62:43:de:85:42:cf:
                    85:bf:1b:71:82:ea:5d:f6:cc:66:34:08:4a:13:63:
                    c1:cf:99:2c:cf:c4:81:fd:42:78:6d:f4:4e:7f:7d:
                    a2:20:8e:d3:cf:af:14:aa:b3:93:90:58:f9:18:c7:
                    d3:47:3d:53:a2:0c:0d:58:5b:24:38:83:1d:80:ab:
                    ef:87:14:85:44:53:51:56:f5:e7:c3:f0:eb:81:b9:
                    32:b0:49:3d:0a:6c:87:0d:4a:f7:0b:eb:05:8c:80:
                    b5:09:02:c0:5c:60:54:7c:58:bc:a4:6b:cf:88:a5:
                    f5:e4:38:dc:25:10:90:7e:c1:09:ae:9b:73:8c:41:
                    5e:36:f3:38:c5:33:89:9e:83:ac:5a:0a:b2:ec:a6:
                    9c:c4:9e:cc:d7:27:54:8c:a8:69:a9:9e:3e:47:67:
                    fd:3c:2d:ce:58:e8:2a:da:9a:65:d0:63:5b:03:bc:
                    15:a0:7a:48:16:b4:41:ae:3b:5f:cc:fd:db:25:8b:
                    31:67:c0:18:d8:7d:6c:29:9b:9b:2a:e1:ac:97:dd:
                    5f:83:5c:2b:0c:35:f9:1f:8f:61:df:ed:9e:37:8e:
                    04:09:9e:7f:d6:05:78:2b:06:52:da:d5:ab:4d:ca:
                    5d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:14:B3:FB:F1:8B:87:E5:9E:B5:68:65:AA:D6:66:19:5F:59:4B:EC
            X509v3 Authority Key Identifier:
                keyid:EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         e9:38:9c:5b:29:58:76:40:02:9f:d1:1a:20:b4:42:dd:12:85:
         37:57:e0:33:f1:25:55:a6:6b:9f:a6:fd:6b:84:c9:56:14:08:
         ac:ac:84:88:71:12:67:e2:57:87:76:4c:07:a8:76:12:5d:9e:
         c4:19:3a:76:c9:26:38:85:f3:ee:9f:fc:96:ac:75:25:e2:c9:
         c6:16:60:a4:b2:f6:e7:c3:64:52:f1:87:f8:82:8c:4c:b9:07:
         36:a0:32:d7:1a:08:5a:0b:8f:47:87:de:1f:6a:00:61:dc:1c:
         32:23:54:0f:96:48:fc:3c:bb:a0:c9:3e:86:af:52:1f:a1:d6:
         32:cb:01:16:1e:67:67:ff:66:f3:ad:0c:76:32:8a:e5:02:77:
         97:90:fd:dd:32:95:72:f0:2f:35:3e:99:87:9c:a0:31:55:a3:
         2d:02:31:38:e1:de:9f:eb:e0:ab:d5:2e:1b:6b:30:06:a6:5c:
         05:31:89:7c:15:27:63:87:52:cc:62:de:64:88:0e:86:28:37:
         11:ac:26:05:60:58:66:9f:71:58:76:01:61:41:d1:77:2b:50:
         d4:90:1d:01:2a:03:3c:21:c5:c6:ca:d4:ef:f9:be:45:d5:a7:
         88:3d:17:cf:c7:3e:f2:ad:6b:a0:f8:47:d1:94:20:4d:ca:d9:
         de:7a:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org