Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa
File:                     3137392e34382e38382e302f32342d3234203d3e20323731313137.roa (raw, json)
Hash identifier:          1TIdpm3OsiUU1ZuMtLpxcDWqb7DWhLfKY/E33dumAC8=
Subject key identifier:   3B:3D:95:FA:F7:1B:68:9A:3B:BC:3B:77:9A:9E:0B:9F:6C:C0:C6:1F
Certificate issuer:       /CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
Certificate serial:       58AA120B3D3C9BDE67D58D6B885D62863AB240DE
Authority key identifier: F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa
Signing time:             Mon 21 Aug 2023 22:51:11 +0000
ROA not before:           Mon 21 Aug 2023 22:46:11 +0000
ROA not after:            Mon 19 Aug 2024 22:51:11 +0000
asID:                     271117
IP address blocks:        179.48.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:aa:12:0b:3d:3c:9b:de:67:d5:8d:6b:88:5d:62:86:3a:b2:40:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
        Validity
            Not Before: Aug 21 22:46:11 2023 GMT
            Not After : Aug 19 22:51:11 2024 GMT
        Subject: CN=3B3D95FAF71B689A3BBC3B779A9E0B9F6CC0C61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:5b:65:a7:b1:1e:7a:5a:ea:11:ee:a9:c0:
                    f5:0c:da:a2:c2:00:66:80:ce:0f:56:13:ad:e6:0f:
                    81:d7:90:a4:62:8d:90:03:b6:6b:f0:e0:d6:10:31:
                    d3:4e:13:e1:27:59:cb:bc:f3:6f:f6:88:5b:09:79:
                    74:d8:3c:05:ba:b2:db:f2:84:6d:0e:64:b4:a9:4e:
                    e4:16:c0:53:66:d7:56:bd:81:d5:2f:7b:7f:c1:e5:
                    d4:f4:8b:c2:73:c5:f1:69:ab:32:2a:b1:69:26:e5:
                    e7:ae:0d:40:2b:7b:78:f7:c5:5e:a1:31:39:4a:7c:
                    d7:d9:ce:2d:e0:2f:a1:df:83:74:4a:7e:16:bc:eb:
                    ea:eb:23:ab:3d:a8:13:05:ed:bd:fc:f3:1e:0c:f9:
                    40:89:45:e3:dd:ee:a7:a7:11:73:92:87:f4:3c:16:
                    be:52:a4:90:42:d5:a2:bd:2c:2a:e2:71:2e:81:62:
                    77:01:66:f9:16:20:63:f1:52:b0:3b:51:d3:42:71:
                    d9:02:4f:ce:5b:8d:f8:e5:81:54:d6:7c:dd:f9:47:
                    c6:79:25:d2:44:a2:99:77:b8:80:26:f5:0b:89:c9:
                    cb:ba:ef:c9:bb:a4:72:9c:37:f1:14:ab:39:ef:63:
                    18:30:54:6a:4b:f6:85:08:1c:5d:75:57:f9:d8:a1:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3D:95:FA:F7:1B:68:9A:3B:BC:3B:77:9A:9E:0B:9F:6C:C0:C6:1F
            X509v3 Authority Key Identifier:
                keyid:F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:9a:0b:9c:4e:25:76:71:6f:ee:ce:04:81:01:86:aa:15:7f:
         d1:64:b9:ab:cb:07:fa:c7:eb:38:9d:c2:3c:49:27:26:12:73:
         6c:3c:99:cc:f5:4b:87:fa:0a:52:e1:98:c8:8a:0e:11:42:9e:
         51:af:c2:98:41:5b:a6:3c:2f:16:37:3c:d5:e1:ea:2d:f4:f6:
         47:fc:ad:bd:17:f2:0c:52:32:d1:33:c9:19:69:59:58:b3:97:
         c6:c6:39:ca:84:26:69:5d:c5:8a:f7:5b:6e:7b:da:3a:1a:b5:
         d1:7d:2a:af:e5:96:9f:df:93:f2:d3:7c:f3:fe:c3:8d:f0:ee:
         6b:da:4d:fc:0c:03:32:a1:40:7e:b4:93:f2:9c:29:56:3c:06:
         db:9e:ad:3a:bb:85:2e:ec:1c:e6:a3:ce:57:f9:9e:55:01:1e:
         1c:64:61:2c:ef:23:c0:03:77:04:08:60:23:74:59:14:9c:fb:
         f9:06:2a:b8:48:9e:9c:0f:f6:76:b0:04:3e:6f:f1:ee:58:bc:
         f7:f6:5d:eb:64:2c:5c:92:4c:32:df:a1:bb:9c:c1:4b:8b:a4:
         b7:9f:f3:19:8f:08:97:9c:47:78:39:3f:52:bb:57:db:69:02:
         0e:28:7e:72:76:9c:7d:e0:64:89:0a:b4:fb:87:df:ab:50:27:
         0c:5e:5d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org