Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/3137392e34322e35392e302f32342d3234203d3e20323731313239.roa
File:                     3137392e34322e35392e302f32342d3234203d3e20323731313239.roa (raw, json)
Hash identifier:          441vsIJFmBI7rtFrNd6S1tpuSth9zFJbKzxV4MT1rmg=
Subject key identifier:   CE:0A:D1:BE:56:C9:B2:E3:29:12:E0:DC:97:BD:91:8A:BD:00:93:01
Certificate issuer:       /CN=332A76C31096E5489F824017290F825E1ED6B826
Certificate serial:       3A7D040713E42FFC6E8C52002CFE9BAB15E334A1
Authority key identifier: 33:2A:76:C3:10:96:E5:48:9F:82:40:17:29:0F:82:5E:1E:D6:B8:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332A76C31096E5489F824017290F825E1ED6B826.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/3137392e34322e35392e302f32342d3234203d3e20323731313239.roa
Signing time:             Wed 07 Feb 2024 14:11:08 +0000
ROA not before:           Wed 07 Feb 2024 14:06:08 +0000
ROA not after:            Wed 05 Feb 2025 14:11:08 +0000
asID:                     271129
IP address blocks:        179.42.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7d:04:07:13:e4:2f:fc:6e:8c:52:00:2c:fe:9b:ab:15:e3:34:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332A76C31096E5489F824017290F825E1ED6B826
        Validity
            Not Before: Feb  7 14:06:08 2024 GMT
            Not After : Feb  5 14:11:08 2025 GMT
        Subject: CN=CE0AD1BE56C9B2E32912E0DC97BD918ABD009301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:4d:af:16:1f:74:b7:ca:bd:c1:17:7d:ed:
                    5a:0c:2a:01:c3:f0:67:f3:cf:8a:ab:7f:cf:79:6d:
                    60:de:1e:aa:d0:17:08:05:ec:b8:9a:be:31:d5:e9:
                    0e:25:6e:61:f7:55:e5:3d:d1:e1:c2:50:ed:d1:12:
                    92:98:cb:c6:44:49:d0:24:b4:58:de:1a:42:3e:1b:
                    e4:98:74:93:b3:b9:0b:23:03:0c:16:52:f9:1f:13:
                    3d:c0:c9:4c:9a:3a:7f:e9:4d:cf:7b:40:04:04:bb:
                    60:9f:3a:fb:59:e7:86:43:c1:68:a5:9f:ad:44:a9:
                    93:70:e5:9a:c0:04:12:d7:ce:e4:88:2e:d5:db:7d:
                    4e:3d:8d:aa:5b:af:cf:b7:63:2e:f0:64:f2:f3:bb:
                    fe:f7:f7:a1:1f:0f:f4:f5:fa:70:ca:68:32:a8:de:
                    92:59:06:21:ab:6e:71:2f:4b:8d:bb:44:0f:71:49:
                    bf:a2:67:ab:ab:44:77:eb:83:35:53:2b:a7:ae:55:
                    27:0d:b3:ec:aa:f6:10:72:68:13:98:7e:15:a4:9e:
                    fa:ab:0f:b1:94:1e:37:d8:8e:82:1c:1a:d2:64:f3:
                    a8:5a:9d:78:bb:f3:fd:7f:92:b3:c2:59:d8:c1:e8:
                    4f:32:92:1f:f0:0a:1a:4c:80:af:5a:f5:be:3a:1b:
                    3c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0A:D1:BE:56:C9:B2:E3:29:12:E0:DC:97:BD:91:8A:BD:00:93:01
            X509v3 Authority Key Identifier:
                keyid:33:2A:76:C3:10:96:E5:48:9F:82:40:17:29:0F:82:5E:1E:D6:B8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/332A76C31096E5489F824017290F825E1ED6B826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332A76C31096E5489F824017290F825E1ED6B826.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/3137392e34322e35392e302f32342d3234203d3e20323731313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:56:ce:20:cc:51:63:08:8c:48:77:fe:cf:27:b9:59:c3:13:
         75:94:79:b1:f8:0c:fc:2a:6a:de:60:26:fc:79:1e:a3:c7:d6:
         bf:e1:45:05:8d:45:64:6f:50:38:68:9d:31:56:a7:eb:79:f8:
         5c:05:d6:b4:33:74:9b:8e:d6:69:83:4d:02:bc:7e:be:13:3d:
         09:13:02:1a:b7:ea:c7:25:1d:dd:bf:39:49:3d:e1:4c:38:33:
         8c:c1:28:1d:35:b4:6e:a9:7a:cd:df:dc:3d:27:d5:86:e3:3a:
         d8:7e:81:64:8f:eb:d6:f6:a2:e1:09:2a:8b:d4:24:b2:ba:33:
         2d:73:c3:54:25:ad:c3:bb:bd:07:30:73:4c:01:8a:c1:6a:7e:
         59:32:4a:3d:7a:be:24:54:13:42:52:b8:f7:7a:cd:7d:27:e9:
         c8:16:51:70:bc:63:14:4e:ba:d3:57:9a:21:78:fd:39:28:77:
         ec:3d:6c:b2:1f:a0:62:85:e0:1a:ca:b3:8d:aa:0c:8d:b9:8c:
         60:aa:a9:8e:1e:46:e1:8c:ef:a8:d1:18:9b:e1:c1:5f:d5:f4:
         79:6e:c9:a8:9f:f9:85:b7:f7:84:b2:b9:57:b7:d0:e3:9e:22:
         d1:c9:a2:8a:4e:3d:9e:21:6c:e7:79:c8:70:e4:af:63:d0:fb:
         4e:f0:53:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org