Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e203533313831.roa
File:                     3137392e3130392e3132382e302f31392d3234203d3e203533313831.roa (raw, json)
Hash identifier:          Jo3CafhS7Jxe4aNSrQ+J4zKpmyKZTvxPIKNJvlhkDtc=
Subject key identifier:   01:B3:70:24:AE:05:B5:F4:36:E2:8D:FE:73:6C:76:7D:04:B4:60:15
Certificate issuer:       /CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
Certificate serial:       655090BEEA4CACACB0B942AFE2297258F369E054
Authority key identifier: EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e203533313831.roa
Signing time:             Wed 21 Feb 2024 15:38:13 +0000
ROA not before:           Wed 21 Feb 2024 15:33:13 +0000
ROA not after:            Fri 21 Feb 2025 15:38:13 +0000
asID:                     53181
IP address blocks:        179.109.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:50:90:be:ea:4c:ac:ac:b0:b9:42:af:e2:29:72:58:f3:69:e0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6
        Validity
            Not Before: Feb 21 15:33:13 2024 GMT
            Not After : Feb 21 15:38:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:27:74:82:ec:81:a0:05:07:f6:e2:d8:aa:
                    49:6a:ca:cb:c7:d6:64:5e:75:3e:31:a5:ab:84:c4:
                    61:24:67:f6:6d:c6:98:2c:bf:cc:0c:c1:fa:c5:88:
                    c3:3c:ff:54:62:2c:a1:55:17:6e:be:bc:6f:cb:7e:
                    34:13:06:85:c5:eb:da:29:fc:a6:47:be:30:46:12:
                    bb:d0:c3:ea:22:9e:63:5a:14:38:85:b3:2f:22:f4:
                    1c:ad:47:b5:51:1d:2d:08:8c:31:33:3a:2f:ce:9d:
                    82:b6:b6:59:0c:a0:2e:19:86:aa:fe:ad:dc:8e:19:
                    24:f5:be:26:93:9a:b3:34:0f:b9:e2:b8:bd:22:17:
                    ed:dc:fa:d4:96:72:b0:dd:97:76:21:e6:a2:b7:42:
                    78:92:d3:35:41:df:2c:db:ac:34:d6:a7:d3:7d:e2:
                    69:c4:1a:e5:3b:29:0b:bb:42:41:25:df:ed:76:d0:
                    3e:57:1e:bb:ab:ab:6f:0d:cb:1d:28:9b:d5:a7:c9:
                    de:56:cd:da:90:5c:ab:f0:9c:b1:bc:9d:85:a8:0a:
                    c2:7e:97:96:85:8c:b3:43:28:e8:db:91:44:e2:3b:
                    78:ad:6a:ea:e3:13:7d:65:1e:d5:c6:17:97:b1:c2:
                    03:c3:d2:4d:94:ac:6a:f6:78:4a:03:3f:c8:00:2f:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B3:70:24:AE:05:B5:F4:36:E2:8D:FE:73:6C:76:7D:04:B4:60:15
            X509v3 Authority Key Identifier:
                keyid:EB:60:FF:6B:02:73:73:0C:27:BE:59:AF:B4:BE:CA:4F:11:C7:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB60FF6B0273730C27BE59AFB4BECA4F11C7D8D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/0/3137392e3130392e3132382e302f31392d3234203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:6c:76:3e:07:de:14:a8:9d:b3:2a:7e:53:a5:3a:18:ab:08:
         e1:e1:28:2b:38:94:a6:c2:ab:fe:1d:43:26:14:2b:ed:56:30:
         f6:5a:a1:88:4f:39:fc:aa:3d:cb:84:6f:70:fb:80:2e:93:95:
         36:8a:86:be:64:23:8a:5a:af:69:83:5c:ea:a0:d2:bf:d2:cd:
         f5:4b:20:5a:c3:70:f5:30:0b:25:6e:26:a6:fa:81:da:26:37:
         b9:b4:ee:c0:1c:38:ec:f0:b0:23:15:50:b0:60:69:8f:c2:1d:
         82:e4:ce:cc:9d:ae:09:a1:fc:66:b9:3f:56:d7:e5:90:a6:98:
         9e:43:27:fe:93:97:dd:65:c0:1b:53:72:49:71:77:5b:7c:65:
         76:6a:b1:93:f7:61:9e:fc:d5:37:d8:0a:64:83:62:df:9f:be:
         0e:d0:16:7b:fe:f5:75:58:ea:92:c7:b4:36:4e:97:64:65:7a:
         52:b5:8f:b0:da:ac:f3:0f:3f:7a:ac:9d:ca:a7:7f:71:10:3c:
         69:aa:af:52:f5:cc:af:b5:6e:1f:ed:fb:a4:0b:fe:6b:b5:45:
         81:4a:e7:1f:b5:8b:38:b8:fa:63:ce:15:6b:9d:e0:b3:39:4d:
         65:da:a5:12:2d:99:7b:62:68:c8:d1:11:c9:39:79:4e:56:e5:
         c1:3c:9e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org