Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32332d3233203d3e20323633343133.roa
File:                     3137392e39372e39322e302f32332d3233203d3e20323633343133.roa (raw, json)
Hash identifier:          4u689IGXvPsNfY/4PoSyntqlYADwXMjWn/wzf7km/F4=
Subject key identifier:   16:C1:2B:71:0B:D3:FF:59:72:44:B8:04:50:31:66:47:32:17:38:9B
Certificate issuer:       /CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
Certificate serial:       397A355897AEA00D57F10A21F493A68E8E7782EC
Authority key identifier: 1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32332d3233203d3e20323633343133.roa
Signing time:             Fri 16 Feb 2024 20:56:31 +0000
ROA not before:           Fri 16 Feb 2024 20:51:31 +0000
ROA not after:            Fri 14 Feb 2025 20:56:31 +0000
asID:                     263413
IP address blocks:        179.97.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7a:35:58:97:ae:a0:0d:57:f1:0a:21:f4:93:a6:8e:8e:77:82:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6
        Validity
            Not Before: Feb 16 20:51:31 2024 GMT
            Not After : Feb 14 20:56:31 2025 GMT
        Subject: CN=16C12B710BD3FF597244B804503166473217389B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:3a:a8:6f:e5:08:6f:98:41:d1:8d:d7:5a:
                    1e:80:fa:cb:ba:d3:53:40:23:39:ca:4a:f7:8e:06:
                    5e:67:53:62:95:4f:97:44:5f:97:69:a8:3f:00:af:
                    a9:2e:a1:9d:0e:80:0e:56:0f:e4:59:71:14:56:2e:
                    d2:66:a1:1a:56:86:ed:cd:34:2f:c1:58:6f:00:5b:
                    a3:58:97:04:26:15:49:f0:4b:51:43:e1:57:18:9b:
                    a9:d3:99:c7:68:ed:53:16:20:17:19:3d:70:d6:9f:
                    0e:e9:ea:ed:c3:37:ef:47:41:0f:24:ac:12:04:36:
                    86:c3:3c:27:08:f0:fa:e3:2f:b9:cc:49:87:dc:40:
                    cd:11:da:ec:81:9b:59:44:f7:8d:e9:8b:23:94:36:
                    79:cc:53:78:13:a4:47:4b:cc:33:ad:f2:26:7d:e5:
                    2f:85:f6:68:2f:8c:eb:aa:f6:51:b4:d0:08:bf:df:
                    c1:0b:2c:13:1c:3e:b4:7f:c1:80:02:16:a6:84:5c:
                    37:a1:7a:20:a2:2e:69:5d:d8:83:92:81:8d:96:b1:
                    d4:20:04:bc:12:f9:15:ae:b1:db:8f:70:89:91:57:
                    ba:e0:ac:bc:52:2c:10:1d:eb:4e:8e:c2:d1:4d:26:
                    f3:0a:18:1d:f2:75:90:cc:99:34:62:18:1b:6f:54:
                    b3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C1:2B:71:0B:D3:FF:59:72:44:B8:04:50:31:66:47:32:17:38:9B
            X509v3 Authority Key Identifier:
                keyid:1F:9E:BA:1C:25:67:EA:0F:9A:BC:83:9B:D5:DE:FA:B0:CC:4A:4A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9EBA1C2567EA0F9ABC839BD5DEFAB0CC4A4AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32332d3233203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:68:23:40:a9:c4:1a:bb:a4:07:04:bf:1d:96:5b:2f:73:47:
         85:ef:24:16:84:9b:84:43:31:8d:13:90:03:cb:c0:07:58:44:
         6c:26:6a:8a:74:8f:4a:d3:20:e4:92:20:2e:a0:5c:dc:75:1b:
         3d:ca:1e:70:08:9e:2c:aa:d7:bb:0c:ce:5b:da:ea:3e:d4:03:
         40:fb:83:92:25:5a:98:e8:f2:84:3b:ef:68:d1:c7:93:ff:d7:
         83:bf:0f:a8:5d:48:d3:6c:96:ad:db:fa:ca:33:0b:1b:63:0e:
         9b:a0:70:bd:6f:40:b8:e3:19:29:87:49:6f:04:c0:91:cb:82:
         b7:05:2e:90:a1:aa:05:c2:57:2b:9e:8a:92:7b:77:a1:ff:2f:
         11:0f:a9:32:19:d3:b1:97:44:30:10:80:ea:ff:37:0c:da:eb:
         f7:ab:71:39:2b:03:17:66:3a:38:a4:ef:af:3f:8c:ca:cf:23:
         af:f4:71:8c:3d:c8:ad:3a:8a:b3:f8:c1:35:ac:84:41:a9:dc:
         41:38:dd:6c:d0:a8:97:f4:d8:9b:35:89:a0:bf:58:9d:53:c5:
         30:c7:e3:f4:45:df:06:e2:18:f5:51:d3:65:7d:5e:64:5c:94:
         02:ca:a7:28:49:30:ce:87:31:de:9c:29:a4:38:6f:74:d8:54:
         70:d1:9e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org