Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39312e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e39312e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          +lcemIK8wHBXKdnaHRufceE6k6I+lBJCcnp35Y9tPT4=
Subject key identifier:   61:EF:7C:CB:32:24:81:F6:28:1A:21:EC:91:A5:A0:AB:B6:65:80:71
Certificate issuer:       /CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
Certificate serial:       7F252E51F7AF985675FBB289CE992149507A29B5
Authority key identifier: 1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39312e302f32342d3234203d3e20323633343133.roa
Signing time:             Mon 06 Mar 2023 11:41:43 +0000
ROA not before:           Mon 06 Mar 2023 11:36:43 +0000
ROA not after:            Mon 04 Mar 2024 11:41:43 +0000
asID:                     263413
IP address blocks:        179.97.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:25:2e:51:f7:af:98:56:75:fb:b2:89:ce:99:21:49:50:7a:29:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
        Validity
            Not Before: Mar  6 11:36:43 2023 GMT
            Not After : Mar  4 11:41:43 2024 GMT
        Subject: CN=61EF7CCB322481F6281A21EC91A5A0ABB6658071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:06:4f:da:13:d3:f4:08:81:85:80:dd:90:eb:
                    f8:0c:9d:3b:74:58:ba:a7:d1:8f:5c:6b:18:d3:e7:
                    6e:c1:62:06:85:b1:1e:36:44:c3:bf:71:27:50:c7:
                    9c:1d:b7:90:55:2c:c4:ec:85:29:7d:c6:65:82:31:
                    3b:41:38:12:11:f5:4b:66:3d:d7:7e:7a:89:69:db:
                    6c:7d:fa:1f:f3:b0:15:d7:0d:ff:7b:d0:ff:3f:39:
                    54:e8:50:1f:46:b5:2a:fa:92:e3:d7:89:be:3e:eb:
                    d0:1c:d1:40:68:bd:c2:c3:37:ec:17:90:4f:54:fe:
                    4a:f3:73:1c:93:ec:44:19:1a:1e:78:da:d4:f4:c2:
                    db:b5:ab:df:18:46:cb:6b:bd:89:ca:05:30:5f:ee:
                    cb:b7:08:d8:22:d8:10:5e:99:75:97:af:18:83:29:
                    62:b3:0a:24:bd:f8:55:f4:b0:8b:2f:12:1d:1d:8e:
                    f3:cb:2e:93:49:c1:20:85:8d:f7:8d:99:10:c0:d3:
                    d3:cb:d6:21:63:28:8e:aa:5e:02:a6:89:e0:6a:9c:
                    55:ce:2f:c6:82:82:94:e3:2c:97:c8:eb:e2:0d:f5:
                    7f:7a:73:b7:5c:49:c0:70:d9:db:28:57:30:df:31:
                    3d:38:46:42:ab:03:e2:9f:fc:85:56:b0:41:27:5b:
                    79:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EF:7C:CB:32:24:81:F6:28:1A:21:EC:91:A5:A0:AB:B6:65:80:71
            X509v3 Authority Key Identifier:
                keyid:1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39312e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:57:31:21:86:ce:d3:18:0d:28:0a:3d:48:df:93:42:ef:98:
         fe:fa:93:be:9e:8b:e7:6e:f3:16:4e:32:1a:a8:73:d2:2b:23:
         59:75:9e:53:dc:e2:df:49:0a:44:0c:07:94:7e:9f:d1:98:45:
         ae:2c:aa:df:d4:c1:f2:e0:61:dc:c8:d9:62:29:30:94:9f:6a:
         a4:ce:a4:d1:3f:71:64:93:eb:a1:4f:c1:9b:14:38:34:be:0e:
         78:c1:b7:0c:c5:15:24:63:b4:24:6a:b9:37:e8:33:19:e7:ff:
         52:15:02:d2:fd:c1:a2:b0:7f:49:70:3c:40:39:84:64:f3:36:
         1a:ff:8b:d0:14:1c:09:68:f8:fa:76:10:c2:5b:ed:0c:ee:28:
         fc:bc:b9:ad:39:59:b4:99:d2:c0:aa:8e:28:87:c9:2a:10:81:
         d4:91:ff:88:0f:5a:70:53:f8:21:bc:43:b9:3f:08:b4:8e:0e:
         cc:31:51:c0:4f:eb:33:1a:ca:05:75:1c:03:ca:db:ad:13:dc:
         17:87:a3:5f:bd:67:f1:3e:bb:7b:64:88:16:28:3e:3b:05:40:
         3d:af:3a:96:e0:aa:c1:a5:00:2d:4f:45:94:5e:97:04:4c:50:
         35:6d:17:ab:b4:95:59:4d:21:dd:e7:df:24:b1:5d:25:e4:5e:
         e2:3e:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org