Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/3137392e39372e3232342e302f31392d3234203d3e203238333030.roa
File:                     3137392e39372e3232342e302f31392d3234203d3e203238333030.roa (raw, json)
Hash identifier:          9rhy5B6eyLojDhOqv6PxWJrA3LvZoI1kRDemVhYttMo=
Subject key identifier:   73:BC:A4:AD:B9:77:91:3F:60:86:B0:8E:3D:05:51:B6:D5:5A:5D:B5
Certificate issuer:       /CN=34BD768B65C97BD03F40D833E018BBE743046FE2
Certificate serial:       21AE70F62652564068BC48B71147CBFE4E29B286
Authority key identifier: 34:BD:76:8B:65:C9:7B:D0:3F:40:D8:33:E0:18:BB:E7:43:04:6F:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BD768B65C97BD03F40D833E018BBE743046FE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/3137392e39372e3232342e302f31392d3234203d3e203238333030.roa
Signing time:             Fri 05 Apr 2024 01:11:05 +0000
ROA not before:           Fri 05 Apr 2024 01:06:05 +0000
ROA not after:            Fri 04 Apr 2025 01:11:05 +0000
asID:                     28300
IP address blocks:        179.97.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ae:70:f6:26:52:56:40:68:bc:48:b7:11:47:cb:fe:4e:29:b2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34BD768B65C97BD03F40D833E018BBE743046FE2
        Validity
            Not Before: Apr  5 01:06:05 2024 GMT
            Not After : Apr  4 01:11:05 2025 GMT
        Subject: CN=73BCA4ADB977913F6086B08E3D0551B6D55A5DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:c7:02:5f:23:50:f5:a5:1a:14:4d:9f:1c:
                    a4:17:88:9c:3b:d9:e4:e7:2f:49:57:a8:58:18:3a:
                    a8:a2:a1:e4:f7:8e:dc:5b:fc:14:8e:a0:25:1f:55:
                    8c:bd:1e:a8:7b:a3:cc:6d:74:46:c5:4b:21:78:ac:
                    01:56:a5:d2:d0:a9:dc:e3:12:6a:ae:96:c8:97:4f:
                    28:07:f0:b6:20:85:b9:fb:95:cc:4d:b7:c9:be:13:
                    07:25:9e:53:65:e5:7a:fa:3e:39:60:a4:fd:a8:28:
                    64:a3:2f:46:6c:a9:60:39:00:2b:1b:4e:e0:d0:a5:
                    3b:30:80:5b:00:0e:23:66:75:28:f7:35:4a:70:c5:
                    fe:a2:ac:9a:81:15:ef:87:60:29:b1:09:67:2d:4d:
                    ac:ff:a8:c2:8f:fc:ed:20:2d:40:d2:47:9d:e5:64:
                    83:b4:ea:71:6a:bb:e1:75:ec:70:31:b5:5b:ce:01:
                    47:61:0a:ed:37:9e:72:cd:78:6c:f2:ab:06:a2:b4:
                    bd:0c:05:c2:fe:02:92:f3:24:c7:76:ae:09:ba:ed:
                    2e:8c:78:97:81:5a:d5:9a:75:57:27:18:0e:3d:1d:
                    c3:66:dc:3a:f5:9b:9d:65:57:d1:68:a3:62:f1:87:
                    5f:34:25:37:18:20:49:52:19:69:f5:94:ae:7d:5d:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BC:A4:AD:B9:77:91:3F:60:86:B0:8E:3D:05:51:B6:D5:5A:5D:B5
            X509v3 Authority Key Identifier:
                keyid:34:BD:76:8B:65:C9:7B:D0:3F:40:D8:33:E0:18:BB:E7:43:04:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/34BD768B65C97BD03F40D833E018BBE743046FE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34BD768B65C97BD03F40D833E018BBE743046FE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/1/3137392e39372e3232342e302f31392d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1a:74:80:12:1f:fb:fb:f0:d1:6b:82:5c:33:2d:c2:50:70:c5:
         f3:af:21:42:4c:25:c5:68:22:0a:6d:24:18:31:d1:d2:0b:87:
         cc:b5:86:1d:d4:f9:37:3e:a7:65:05:90:75:6c:7f:70:eb:bc:
         7b:28:41:a6:32:18:5d:ce:a5:cc:19:40:0d:7d:b3:12:5d:ad:
         41:69:7c:33:15:41:da:31:c8:d6:1b:79:ee:cb:0c:43:4d:bc:
         b2:27:db:41:b4:33:c9:7e:b8:07:77:07:3d:18:1d:c1:06:1e:
         a2:3f:4a:c3:aa:82:19:79:bc:26:3d:3f:3a:8a:b0:e9:37:03:
         56:9a:ba:38:f8:46:a9:de:84:1f:ee:eb:ed:62:8d:cd:ac:e5:
         2b:d3:52:b4:a6:e6:57:0d:5e:46:79:70:18:f9:18:e0:2a:76:
         f6:c7:47:7a:74:d6:c6:32:76:e0:09:c3:dc:66:a7:2d:bc:5d:
         89:cc:9f:11:3a:94:95:e2:46:75:31:14:50:dc:d8:ed:b6:53:
         38:e1:f7:ad:67:7c:f0:4c:5d:fe:03:d9:77:6b:06:5d:51:6d:
         21:74:6a:64:04:f7:b7:ea:2a:a5:3b:64:66:2d:f9:29:8a:50:
         10:d9:d4:35:99:92:5f:62:04:f0:f2:ab:b6:af:dc:a4:f8:46:
         fe:bb:cb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org