Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/3137392e34322e35382e302f32342d3234203d3e20323731313239.roa
File:                     3137392e34322e35382e302f32342d3234203d3e20323731313239.roa (raw, json)
Hash identifier:          yTtnNP2qrcx4RbbCErNcL+rkYPhrGA15SqCZEnr4Vj0=
Subject key identifier:   6F:D1:CF:25:C2:B5:52:AF:AB:FE:27:4D:CB:14:62:C3:94:17:A1:C0
Certificate issuer:       /CN=332A76C31096E5489F824017290F825E1ED6B826
Certificate serial:       5CF356E49F6DC1853AABE4DA59C5CBC8DBE8A984
Authority key identifier: 33:2A:76:C3:10:96:E5:48:9F:82:40:17:29:0F:82:5E:1E:D6:B8:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332A76C31096E5489F824017290F825E1ED6B826.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/3137392e34322e35382e302f32342d3234203d3e20323731313239.roa
Signing time:             Wed 07 Feb 2024 14:11:08 +0000
ROA not before:           Wed 07 Feb 2024 14:06:08 +0000
ROA not after:            Wed 05 Feb 2025 14:11:08 +0000
asID:                     271129
IP address blocks:        179.42.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f3:56:e4:9f:6d:c1:85:3a:ab:e4:da:59:c5:cb:c8:db:e8:a9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332A76C31096E5489F824017290F825E1ED6B826
        Validity
            Not Before: Feb  7 14:06:08 2024 GMT
            Not After : Feb  5 14:11:08 2025 GMT
        Subject: CN=6FD1CF25C2B552AFABFE274DCB1462C39417A1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:79:94:01:13:4f:95:b2:5c:64:fe:47:02:
                    c6:43:a6:0f:27:90:eb:18:f6:dc:f5:23:85:e0:56:
                    d1:5b:fa:ce:85:fd:f9:14:7e:c1:5e:5f:e5:1d:35:
                    89:ef:2f:f9:51:cf:d4:75:3c:a3:ca:3c:0f:ba:a0:
                    9b:30:a3:68:76:82:ab:6f:d8:5f:f1:0a:29:a1:cb:
                    46:ff:e6:96:bf:cf:bf:fd:1a:f6:90:44:8c:b2:f8:
                    c3:9e:e5:63:fe:a0:ae:a5:66:5f:1f:98:15:16:48:
                    63:6c:06:00:17:30:7c:08:6a:28:13:16:07:0c:b1:
                    22:20:db:36:58:27:e0:d1:2c:99:8e:c3:27:71:59:
                    66:f8:ea:d3:6a:da:10:41:4d:37:16:88:ba:12:30:
                    32:f2:9a:7f:0b:50:6c:1d:bb:9a:ee:23:8b:c5:25:
                    8b:eb:fc:98:ed:18:fa:15:bc:a4:de:a7:89:c5:4a:
                    06:da:8a:e5:32:f1:c7:f6:fa:4f:67:25:34:dd:f2:
                    a4:bc:24:c7:2a:5b:5d:67:81:c6:38:7a:07:01:e8:
                    5f:b1:8b:42:5d:39:ff:a2:d5:9a:31:ea:fe:39:da:
                    30:ab:ac:56:27:85:ce:37:5a:1f:cf:ec:e8:66:c6:
                    00:53:67:62:37:24:00:3e:3e:20:ff:e9:75:6d:8b:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D1:CF:25:C2:B5:52:AF:AB:FE:27:4D:CB:14:62:C3:94:17:A1:C0
            X509v3 Authority Key Identifier:
                keyid:33:2A:76:C3:10:96:E5:48:9F:82:40:17:29:0F:82:5E:1E:D6:B8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/332A76C31096E5489F824017290F825E1ED6B826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332A76C31096E5489F824017290F825E1ED6B826.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/3137392e34322e35382e302f32342d3234203d3e20323731313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:e0:c7:dc:8c:c0:2a:2b:34:d7:94:31:84:2b:95:f4:cf:22:
         41:3d:50:39:8a:dc:d2:9d:34:c8:b8:b5:6d:81:8c:e5:57:f6:
         ca:c0:12:5b:b8:c1:25:1c:e6:be:f6:28:79:0f:f6:d9:ff:d0:
         5a:ae:5a:7e:ea:bf:8a:72:98:f2:25:ea:55:12:da:d6:72:6d:
         71:5a:64:c6:49:4a:5e:93:b8:b3:f8:82:15:04:c2:9b:cb:c3:
         88:15:78:56:7d:e4:7b:0f:b0:c2:8b:3f:0a:3a:f8:84:44:25:
         56:43:41:45:c9:2d:db:f8:47:40:28:06:8e:5f:fa:db:bc:81:
         2a:9f:7d:23:39:cb:7d:87:9b:1e:5d:34:1c:6c:c9:92:36:06:
         a4:51:02:df:fc:37:93:50:5a:40:62:51:99:29:81:8b:c0:e4:
         da:f8:90:ef:03:b5:23:2f:bb:77:11:ce:45:a9:24:8f:97:25:
         1d:b6:2a:52:ff:b4:d8:88:cb:99:fd:b0:24:13:a9:d0:f4:c9:
         5b:47:eb:8c:31:27:05:93:72:5c:c4:3f:e2:ff:9f:e4:82:b0:
         d3:6f:47:f7:42:26:cb:1c:56:a6:a3:f1:11:3f:3a:95:78:1f:
         23:bf:d4:92:f7:12:bf:d3:e1:c9:37:39:ea:1e:ff:f9:fc:f9:
         37:d1:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org