Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa
File:                     3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          Wt0Tpk3f3nd9xOICPfcVeWZjTnuORZEGkMTSh4255mQ=
Subject key identifier:   A5:63:43:66:0F:D6:6D:6C:05:FE:FE:7C:7E:46:9E:0C:E3:2C:EF:07
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       6D7C24D2AB1721ED441EF43B8076EE2F58B901BC
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:33 +0000
ROA not before:           Fri 03 May 2024 19:39:33 +0000
ROA not after:            Fri 02 May 2025 19:44:33 +0000
asID:                     28669
IP address blocks:        179.189.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7c:24:d2:ab:17:21:ed:44:1e:f4:3b:80:76:ee:2f:58:b9:01:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:33 2024 GMT
            Not After : May  2 19:44:33 2025 GMT
        Subject: CN=A56343660FD66D6C05FEFE7C7E469E0CE32CEF07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:ad:1e:c3:2f:27:9a:61:e7:63:6e:12:c9:
                    a4:3b:c2:68:18:82:0b:a0:f9:70:9b:5b:05:a3:92:
                    2f:ad:44:96:50:53:53:6e:d3:5e:ff:2c:06:49:65:
                    60:21:9a:1a:9d:99:9c:44:06:f3:a4:78:91:32:70:
                    bf:cc:92:52:6d:91:0f:a6:b0:74:3e:04:5b:66:18:
                    af:26:75:05:bd:f4:ca:be:bb:24:72:8e:83:76:43:
                    44:c6:a5:d8:1e:ab:c2:8d:b6:0d:50:77:84:bd:0f:
                    cf:43:0e:5e:31:a1:3a:84:fb:9c:75:e1:64:f9:ce:
                    4b:a5:55:51:f9:33:b1:f6:99:7a:a8:fa:39:3d:c5:
                    a5:c8:66:15:56:df:52:85:00:4c:75:11:20:56:a7:
                    ff:f3:26:6f:d3:3e:96:a3:24:d0:74:32:7c:e0:f8:
                    e6:84:6d:83:a2:99:6d:4e:22:ee:dc:49:f2:78:51:
                    80:e8:9b:7f:d3:13:eb:f5:e8:ea:b1:4e:1a:56:dd:
                    e2:62:5f:cb:b6:10:b4:9c:55:de:80:6a:75:fb:71:
                    76:dd:78:cc:c9:17:e2:88:8f:cf:8e:03:e4:5e:a5:
                    8d:87:a4:ee:da:8c:91:7e:1f:32:22:f6:fd:bf:f5:
                    e9:d4:f6:e0:41:00:27:b3:77:d2:86:d9:cc:f9:25:
                    22:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:63:43:66:0F:D6:6D:6C:05:FE:FE:7C:7E:46:9E:0C:E3:2C:EF:07
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3137392e3138392e3232342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:ec:b3:8f:eb:45:af:69:8d:fc:7e:37:92:c6:06:16:e9:46:
         71:b9:27:56:64:aa:37:72:9b:bc:3a:47:05:95:ea:60:fc:09:
         30:7a:b0:b4:1f:11:ac:2c:a9:43:ec:7b:dc:eb:1f:54:f7:c1:
         3f:42:3f:ea:88:e9:ef:d5:97:cb:f8:ae:22:c2:98:f8:01:a6:
         63:9a:75:08:f4:01:8a:e3:ac:ee:8a:54:a6:14:ab:d7:c4:7f:
         b6:53:df:87:57:e4:04:21:11:13:8e:3d:88:2b:d7:c2:86:57:
         a1:21:17:f1:50:de:1a:22:d5:95:ac:87:06:d6:68:9c:11:5d:
         72:1b:87:b1:bb:cc:3b:12:ec:08:7b:33:1f:bb:b2:22:67:54:
         60:26:00:5c:e5:0a:ae:2a:06:53:4a:17:93:48:1a:68:50:32:
         6d:b6:59:1a:f3:d0:77:e3:ab:f3:69:6b:89:0c:4b:65:d6:b8:
         bf:1b:31:a6:fc:00:20:67:f3:dd:8d:57:e3:92:c4:42:1d:13:
         16:25:d8:ef:85:19:44:a6:1e:70:a0:22:b1:19:f2:95:b5:48:
         c4:2b:a8:d3:b1:eb:ba:c6:c6:05:4e:39:af:74:34:ce:cb:91:
         17:15:7c:17:db:fe:c6:c8:a6:d5:ea:68:f7:d2:a9:40:fc:54:
         a6:16:96:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org