Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/3137392e3130372e382e302f32332d3233203d3e20323633323635.roa
File:                     3137392e3130372e382e302f32332d3233203d3e20323633323635.roa (raw, json)
Hash identifier:          StcbmyDG0EBAPSBlm7rijyxNe9pGzq+H45H/H1mZS24=
Subject key identifier:   38:B0:44:D3:21:EC:B2:7D:AC:64:1F:BA:C2:9C:CF:16:EF:0F:C0:F6
Certificate issuer:       /CN=A883F8303219971D2CE7FAB342373AF3913D545F
Certificate serial:       58EFB3A48F0E03A4FAD452F453DFDBD2B7ADEBDD
Authority key identifier: A8:83:F8:30:32:19:97:1D:2C:E7:FA:B3:42:37:3A:F3:91:3D:54:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A883F8303219971D2CE7FAB342373AF3913D545F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/3137392e3130372e382e302f32332d3233203d3e20323633323635.roa
Signing time:             Wed 19 Jul 2023 17:00:01 +0000
ROA not before:           Wed 19 Jul 2023 16:55:01 +0000
ROA not after:            Wed 17 Jul 2024 17:00:01 +0000
asID:                     263265
IP address blocks:        179.107.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ef:b3:a4:8f:0e:03:a4:fa:d4:52:f4:53:df:db:d2:b7:ad:eb:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A883F8303219971D2CE7FAB342373AF3913D545F
        Validity
            Not Before: Jul 19 16:55:01 2023 GMT
            Not After : Jul 17 17:00:01 2024 GMT
        Subject: CN=38B044D321ECB27DAC641FBAC29CCF16EF0FC0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:4a:1d:c5:99:f5:95:20:c8:5c:39:41:4d:
                    08:4a:f6:7c:b4:43:a1:38:c5:d0:53:0b:1f:68:73:
                    14:3a:5e:b3:ac:47:3d:39:51:f5:b6:6e:07:4c:7f:
                    60:1c:f0:46:39:c5:e2:f5:08:00:cd:98:f3:88:7f:
                    b2:fd:f9:20:ac:e9:4b:4d:3d:3a:62:1e:c9:67:6e:
                    8f:42:ae:69:0c:a6:e9:e7:43:09:d9:4d:b4:55:45:
                    c2:41:d0:15:d5:bb:0f:87:ba:c2:09:3a:ae:e7:69:
                    7f:ff:ad:2d:28:e7:e1:fc:80:ac:09:1b:31:cf:df:
                    ae:c6:53:54:8c:c4:3d:89:4e:dd:78:7b:80:37:3a:
                    66:03:f4:e6:5b:c5:76:93:a8:91:10:43:12:e9:a3:
                    4f:f3:dc:12:3e:ca:4f:76:a6:9d:69:ab:bc:80:db:
                    70:8f:bd:48:37:ab:d0:78:80:21:95:70:41:24:98:
                    3e:88:39:57:22:63:17:89:67:4e:9e:46:07:4d:1c:
                    8d:c5:fb:29:21:cb:60:84:84:c6:f7:f9:a6:ff:47:
                    4f:1e:09:06:5b:fe:78:51:78:fd:23:70:34:49:64:
                    64:c2:b3:7f:63:bb:a1:48:c9:c8:64:36:e0:e6:78:
                    21:34:b7:a5:97:d8:b3:3f:35:45:17:b4:6a:65:74:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B0:44:D3:21:EC:B2:7D:AC:64:1F:BA:C2:9C:CF:16:EF:0F:C0:F6
            X509v3 Authority Key Identifier:
                keyid:A8:83:F8:30:32:19:97:1D:2C:E7:FA:B3:42:37:3A:F3:91:3D:54:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/A883F8303219971D2CE7FAB342373AF3913D545F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A883F8303219971D2CE7FAB342373AF3913D545F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/3137392e3130372e382e302f32332d3233203d3e20323633323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:af:6f:39:9e:24:19:75:d0:c9:d1:13:8d:ba:d6:95:06:54:
         3b:d5:94:7a:05:dd:ea:66:81:77:13:32:df:30:4c:e9:85:06:
         a0:6c:e4:88:dd:df:c3:1c:75:b0:c2:02:39:c1:53:ca:be:a4:
         fe:7f:44:6e:f3:93:54:22:48:47:04:e1:6c:b6:ca:88:2e:2a:
         83:83:8b:35:75:90:5a:ef:c0:60:81:58:02:7b:ad:f4:fb:f2:
         ec:95:b4:dd:b8:71:70:50:89:16:87:6e:05:b1:5e:da:23:7c:
         42:fe:b5:d5:ca:6b:2e:6f:84:7c:ef:1e:1e:fa:9e:de:ad:90:
         43:ee:ba:63:d1:19:a1:67:a8:d4:de:09:09:c1:fd:9a:a1:f6:
         ff:66:8f:58:00:82:ca:aa:f5:89:e9:7e:dc:10:dc:9b:d2:ef:
         6b:0a:e1:09:bd:58:20:d0:df:66:4a:30:4c:f1:3e:8b:b0:af:
         c2:bd:d7:3a:ba:a8:ec:51:44:ff:dc:32:e3:bb:a4:cb:08:fa:
         c6:41:fc:86:f4:65:ad:90:2c:35:7d:74:31:15:c3:6f:b9:7d:
         a8:3b:67:9b:46:7b:84:d0:5f:6d:64:91:dd:8b:95:6f:69:9c:
         70:4e:21:a3:f7:68:d2:b8:ed:61:56:2d:49:1e:2a:37:95:af:
         44:94:55:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org