Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa
File:                     3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          DSYD6mTLP/DB1JGdLe5JrF9IjkuE+DRieH143pr2V7s=
Subject key identifier:   A3:91:ED:1F:0B:05:0C:8B:17:FB:E4:CF:16:0F:96:6C:0D:BD:8E:CB
Certificate issuer:       /CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
Certificate serial:       3A548767AE7A10B8A87EA60A2E4765AB9CD06B85
Authority key identifier: FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa
Signing time:             Fri 08 Dec 2023 16:34:48 +0000
ROA not before:           Fri 08 Dec 2023 16:29:48 +0000
ROA not after:            Fri 06 Dec 2024 16:34:48 +0000
asID:                     262374
IP address blocks:        179.127.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:54:87:67:ae:7a:10:b8:a8:7e:a6:0a:2e:47:65:ab:9c:d0:6b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
        Validity
            Not Before: Dec  8 16:29:48 2023 GMT
            Not After : Dec  6 16:34:48 2024 GMT
        Subject: CN=A391ED1F0B050C8B17FBE4CF160F966C0DBD8ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:3b:5e:46:cf:d0:5f:f6:0b:8c:7b:80:7a:
                    5a:72:5c:2b:e9:bf:ac:5a:f1:0b:3e:7b:39:7b:49:
                    d9:2e:57:7c:72:28:c1:ea:4c:5d:02:3a:a7:c3:a2:
                    f5:0f:66:42:ea:40:1d:d0:da:5d:82:79:4c:75:10:
                    cd:a7:4e:30:ff:9d:ad:a0:b1:82:d8:5b:da:81:07:
                    9b:ff:00:96:0a:b0:5a:09:fc:84:98:40:2b:52:2a:
                    53:ad:34:3f:36:88:30:eb:0f:72:78:a4:a4:6a:28:
                    72:6d:f3:0b:30:d7:72:1b:7f:f3:27:9f:8b:e3:3c:
                    39:d8:2d:d5:bc:e2:66:c3:c3:85:99:cd:13:14:6e:
                    9d:ef:4c:fc:38:1e:5a:8c:b3:b0:8a:d2:a5:fb:7a:
                    0d:70:64:43:56:e3:e8:95:ca:2a:bb:ed:13:81:c7:
                    13:4a:3f:a7:53:0f:0b:58:30:d2:ae:1a:48:7b:7d:
                    3f:7a:03:1f:02:10:62:27:f3:a5:0f:88:cf:de:60:
                    e5:6f:64:a9:11:fd:23:b0:a3:28:fb:32:da:19:e1:
                    38:d3:cb:c9:73:a3:49:ba:81:ab:58:fe:40:f8:95:
                    8b:9e:3b:f1:16:d2:1c:c9:30:52:79:54:c4:20:54:
                    8a:bd:9a:6b:00:18:e2:79:bf:c1:b6:aa:06:21:65:
                    52:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:91:ED:1F:0B:05:0C:8B:17:FB:E4:CF:16:0F:96:6C:0D:BD:8E:CB
            X509v3 Authority Key Identifier:
                keyid:FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:bd:6e:97:ea:ff:6f:32:2c:a5:47:12:9e:15:f1:c1:3c:8a:
         a8:9c:8a:53:c0:b1:95:b3:95:f6:51:75:ef:20:c3:bb:64:85:
         a8:78:53:1d:0f:a7:ff:c9:be:f2:f8:cf:47:f8:25:cf:e1:94:
         9b:d1:6d:1e:47:3d:bd:6f:76:3d:8b:be:fc:67:cc:39:86:80:
         03:e5:9d:67:3b:65:97:24:88:40:f8:49:cb:0e:55:bf:f8:77:
         00:73:9e:4f:12:4d:8e:c0:46:fd:7a:3f:b7:b5:ee:30:bb:ca:
         8f:9c:03:53:3c:fe:a0:9d:59:fa:bf:66:12:cc:c7:02:98:ef:
         0a:0a:27:ba:78:cc:29:73:46:52:1d:45:93:7a:0d:ea:eb:5f:
         db:74:5f:6f:2c:c8:9b:07:6f:8b:ba:31:73:e0:f5:fb:de:41:
         83:d2:d6:88:6b:e8:1e:19:b0:72:81:f4:47:37:9e:c8:9f:73:
         32:d1:60:88:04:20:ce:b7:ea:ba:47:c5:c4:95:01:f3:44:1f:
         1c:c8:1b:35:c3:cc:92:da:87:1b:33:48:3b:e4:52:e4:6d:d8:
         4d:75:84:41:ca:06:80:26:d1:66:55:41:4d:06:a8:44:02:64:
         33:02:93:19:6a:f2:fe:35:2a:f5:4f:25:c8:20:3a:9a:b2:9f:
         aa:97:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org