Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38392e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e38392e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          dIP/5Gfir2bOygMHJbicW8KEPrpEYLs2faQzimsenb8=
Subject key identifier:   F1:07:14:20:99:62:56:E0:11:5F:4D:3D:18:F3:7F:D8:12:7B:01:5F
Certificate issuer:       /CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
Certificate serial:       655902B10A2F82A1D53ACF72AF75BB45C1DE4122
Authority key identifier: 1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38392e302f32342d3234203d3e20323633343133.roa
Signing time:             Mon 06 Mar 2023 11:41:31 +0000
ROA not before:           Mon 06 Mar 2023 11:36:31 +0000
ROA not after:            Mon 04 Mar 2024 11:41:31 +0000
asID:                     263413
IP address blocks:        179.97.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:59:02:b1:0a:2f:82:a1:d5:3a:cf:72:af:75:bb:45:c1:de:41:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
        Validity
            Not Before: Mar  6 11:36:31 2023 GMT
            Not After : Mar  4 11:41:31 2024 GMT
        Subject: CN=F1071420996256E0115F4D3D18F37FD8127B015F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:6a:78:2f:e0:1d:a7:5f:1f:be:e1:8c:f6:
                    c1:5f:e1:cd:d4:ca:2e:c2:d3:75:59:d9:55:06:29:
                    aa:4a:6f:e7:2f:4e:06:48:c7:1c:bb:30:8a:79:a9:
                    94:f9:3d:44:98:18:4a:04:3b:ed:f4:f3:17:2e:84:
                    2d:a8:64:6a:4c:d5:c0:3c:c1:b3:db:fa:cf:f6:e7:
                    b4:a0:23:a8:0d:39:53:08:54:cc:a6:a1:33:fc:fc:
                    5e:a5:3b:a5:30:13:d1:93:5b:be:1d:d7:e5:45:3f:
                    02:74:cd:63:08:d7:08:eb:2a:3c:b9:f6:49:ec:2d:
                    2c:a4:b2:7b:f1:6e:a2:d2:cb:9a:01:4c:bf:16:ad:
                    b5:59:44:9e:6a:f3:2f:95:46:e4:b0:9f:14:a7:52:
                    94:23:e3:0e:b4:9c:e0:8e:09:51:3c:65:90:2e:24:
                    2f:df:a6:8e:b0:ac:4a:8c:26:ee:ef:15:39:ea:92:
                    61:b1:ef:3d:2f:d9:ac:b0:9f:6d:8b:f3:82:ac:96:
                    0b:5a:8b:1a:39:67:37:b9:b4:ff:f5:c3:e1:c1:a8:
                    b8:e1:5f:82:dd:d5:ab:a9:a8:be:ca:ab:e9:bb:56:
                    95:c1:f1:84:64:2e:e7:4e:a5:b5:69:23:18:09:ff:
                    31:04:21:9f:8c:7f:e5:8b:04:17:88:d8:a0:c7:01:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:07:14:20:99:62:56:E0:11:5F:4D:3D:18:F3:7F:D8:12:7B:01:5F
            X509v3 Authority Key Identifier:
                keyid:1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38392e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:76:be:96:7c:8e:74:17:58:d3:97:ee:ba:da:3b:29:cd:25:
         fc:12:13:31:66:64:cb:ac:61:37:4c:c3:16:82:e1:ce:39:b1:
         4f:c3:7a:07:1e:67:be:72:6f:a0:25:51:47:75:da:a5:8a:a7:
         b1:df:a6:5e:78:a1:97:62:1a:f7:15:28:cd:6c:4c:aa:ce:04:
         87:4a:c2:58:1c:0e:8d:56:9d:5f:89:e9:8c:b1:63:28:e7:fa:
         ba:21:7e:26:a9:16:ae:84:99:ec:bd:d0:64:30:ca:42:fb:f3:
         f5:84:83:e7:a0:53:fc:aa:35:fe:30:6b:cd:b7:ad:23:54:19:
         26:99:04:ab:5b:42:89:3c:ad:fe:e8:1e:11:1b:a7:1a:b8:45:
         d8:ce:38:41:85:e4:b2:f7:fb:0d:a5:f2:fd:25:ce:5a:90:94:
         16:b3:e4:3b:16:2f:d9:4d:2d:98:4d:62:09:bc:64:74:aa:19:
         c1:b6:96:23:31:e1:2b:53:16:e7:72:b8:67:34:03:cd:83:4a:
         e3:fe:48:e9:b7:35:70:fd:3d:fb:fd:37:19:e8:a8:e9:97:8d:
         ad:55:82:64:b4:6a:f2:ed:52:d4:3d:1b:0b:30:df:92:00:55:
         0b:3b:b4:6e:92:c6:59:04:d6:80:d6:2d:b1:a2:c4:80:61:3b:
         28:21:8d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org