Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137392e3132372e3132302e302f32322d3233203d3e20323632333734.roa
File:                     3137392e3132372e3132302e302f32322d3233203d3e20323632333734.roa (raw, json)
Hash identifier:          M6wikNr0aCHXjkelkpC9frNHVEbX2QxkTBUtMDhbHbQ=
Subject key identifier:   11:DD:57:F7:77:ED:24:46:04:A4:98:D7:74:48:24:52:F9:F7:B9:04
Certificate issuer:       /CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
Certificate serial:       4E140AD709A486740CB3591DACF39F5A3E5231AC
Authority key identifier: FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137392e3132372e3132302e302f32322d3233203d3e20323632333734.roa
Signing time:             Fri 06 Jan 2023 11:44:10 +0000
ROA not before:           Fri 06 Jan 2023 11:39:10 +0000
ROA not after:            Fri 05 Jan 2024 11:44:10 +0000
asID:                     262374
IP address blocks:        179.127.120.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:14:0a:d7:09:a4:86:74:0c:b3:59:1d:ac:f3:9f:5a:3e:52:31:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
        Validity
            Not Before: Jan  6 11:39:10 2023 GMT
            Not After : Jan  5 11:44:10 2024 GMT
        Subject: CN=11DD57F777ED244604A498D774482452F9F7B904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:47:07:33:27:42:32:c7:af:c0:66:a2:fd:
                    1a:32:25:80:f1:d3:16:9e:e3:cd:5c:e4:bb:40:f2:
                    b3:f9:69:cb:77:4d:12:70:46:5d:c5:c3:47:07:b4:
                    30:1f:48:86:f2:b1:d8:c8:de:63:db:a8:04:f2:cd:
                    e6:d9:84:9b:36:cb:7f:0d:26:94:63:e5:57:70:bc:
                    6e:10:34:b0:90:23:d0:95:08:1b:53:d6:e8:fc:14:
                    24:c2:8b:15:4a:47:ab:63:ef:8d:01:71:2b:14:2d:
                    82:5b:8b:18:9e:4b:fb:94:05:49:18:d0:bc:b0:8e:
                    4e:05:01:d8:e9:52:be:dc:28:0a:ac:cf:19:51:38:
                    d7:89:ef:04:30:00:6c:bd:56:39:3d:97:0a:b7:1b:
                    f8:62:1b:3b:ca:23:95:ac:9e:ae:8b:58:10:3d:1e:
                    69:70:d8:d8:83:1f:44:9f:15:15:e6:75:f4:d1:ef:
                    e8:29:fd:7d:c5:e4:bf:fe:62:da:e8:17:91:08:dc:
                    c5:52:80:78:62:e3:c4:6f:d1:bb:14:2e:ad:ae:cb:
                    43:94:4b:8d:65:43:c4:cd:3d:f1:5a:e9:ba:46:25:
                    e9:44:26:d5:9a:f6:fb:e4:34:4a:c7:6f:d4:f3:5f:
                    1a:86:46:89:ac:33:97:24:3d:dd:3c:91:3c:33:a9:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DD:57:F7:77:ED:24:46:04:A4:98:D7:74:48:24:52:F9:F7:B9:04
            X509v3 Authority Key Identifier:
                keyid:FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137392e3132372e3132302e302f32322d3233203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:03:f5:98:3a:ff:d3:31:d7:28:37:df:eb:04:d4:ed:a9:2d:
         d1:a1:8a:ec:30:d6:d0:bc:4e:bf:4d:c7:82:89:c0:2a:7d:66:
         9b:7b:cf:8a:88:2d:dd:b2:58:65:14:31:f9:af:31:02:85:0a:
         93:62:0d:c3:7d:2a:d3:ff:ee:b7:7e:90:f5:33:49:c4:37:5e:
         c0:d0:24:f3:9f:df:0d:3a:44:2b:ba:77:46:5f:de:ca:fc:11:
         9c:84:b6:a1:d2:20:f6:e7:6b:12:4f:1e:95:74:e7:ed:b8:f9:
         c3:de:df:50:96:35:81:33:59:71:d3:b3:13:bb:cb:0d:6d:ef:
         7d:ea:53:ff:b5:65:58:d4:f2:24:d2:b4:a7:de:5b:b7:34:08:
         83:21:a6:57:cc:60:d9:86:ee:bf:d4:e8:7c:2a:41:4b:5d:44:
         b8:c2:a1:63:2f:ba:60:10:e6:f0:8a:5b:54:d8:e2:f4:81:72:
         e2:69:95:25:f5:eb:f3:6c:a1:a5:7b:50:48:1f:fc:ec:93:35:
         a9:21:85:93:5c:0d:c1:a0:05:b7:2f:b1:17:97:17:b6:4e:98:
         ba:63:3e:87:11:2e:fb:d5:ac:30:32:d5:4e:1c:ec:08:f0:6c:
         fb:9c:a5:1b:d5:1c:e7:14:72:b5:af:94:54:18:78:a4:9f:4b:
         c9:d6:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org