Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235312e302f32342d3234203d3e20323633343231.roa
File:                     3137392e3139312e3235312e302f32342d3234203d3e20323633343231.roa (raw, json)
Hash identifier:          BHMFrorXz7JgJkxkTo5Fu5qJVwhhSG6EAitM4lyPxE8=
Subject key identifier:   37:B6:31:88:A1:48:CD:65:B6:66:E6:AD:43:CC:AC:A6:FF:31:11:1A
Certificate issuer:       /CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
Certificate serial:       4EFAEDD2C58B9785D17D20C4E3E5ED94EBFD167F
Authority key identifier: B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235312e302f32342d3234203d3e20323633343231.roa
Signing time:             Tue 16 Jan 2024 22:31:50 +0000
ROA not before:           Tue 16 Jan 2024 22:26:50 +0000
ROA not after:            Tue 14 Jan 2025 22:31:50 +0000
asID:                     263421
IP address blocks:        179.191.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fa:ed:d2:c5:8b:97:85:d1:7d:20:c4:e3:e5:ed:94:eb:fd:16:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BBC2B5109511F272026E674B0D0AA24CE514F5
        Validity
            Not Before: Jan 16 22:26:50 2024 GMT
            Not After : Jan 14 22:31:50 2025 GMT
        Subject: CN=37B63188A148CD65B666E6AD43CCACA6FF31111A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:35:8f:c7:4b:d8:d5:58:49:2b:d7:fa:09:
                    f1:06:72:f3:36:83:ca:58:ef:f0:e3:f7:8c:07:3c:
                    a9:61:e4:01:20:ef:4b:d5:d8:33:99:de:4c:7e:b6:
                    f0:a0:54:1d:52:f8:c8:ba:a3:cb:ab:cf:d1:01:3e:
                    45:0e:6d:ac:fa:40:7b:86:6e:55:a8:33:d4:9c:9e:
                    11:bf:fd:fe:90:f1:08:86:5e:60:9b:05:35:86:9d:
                    c2:96:b9:60:70:7f:fc:c3:12:a0:f3:2a:87:6b:ae:
                    0f:ed:91:af:c0:8e:71:08:2e:d9:9d:ec:4f:cd:e7:
                    7b:44:79:ee:c8:1f:9c:f8:72:07:dd:54:95:03:72:
                    29:fc:30:98:74:e6:5f:aa:4f:b0:dc:ab:fc:27:2d:
                    b8:1c:8d:60:6a:03:6f:6f:67:7d:0d:bd:db:12:8f:
                    67:dc:15:3d:09:04:8e:a2:3a:09:78:92:40:da:25:
                    81:ff:81:d3:4d:74:d5:88:f1:4d:63:a7:c7:cd:2a:
                    0c:e1:4b:a9:fb:96:6b:25:f5:52:96:f2:9e:60:a6:
                    fb:ed:5e:f7:3a:a2:6c:96:b1:5f:58:ab:dc:22:7f:
                    00:51:9b:95:fd:a1:03:9f:49:72:56:38:5f:d0:56:
                    de:a1:0e:6a:96:77:c5:48:aa:8e:90:0a:5b:07:dd:
                    d4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:31:88:A1:48:CD:65:B6:66:E6:AD:43:CC:AC:A6:FF:31:11:1A
            X509v3 Authority Key Identifier:
                keyid:B2:BB:C2:B5:10:95:11:F2:72:02:6E:67:4B:0D:0A:A2:4C:E5:14:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2BBC2B5109511F272026E674B0D0AA24CE514F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3137392e3139312e3235312e302f32342d3234203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:42:47:e7:f2:39:c1:47:bb:3b:96:58:3f:01:f1:0b:01:5c:
         0e:a3:1a:11:33:41:94:ac:02:08:1b:e6:ce:ce:8a:26:72:8f:
         20:13:91:c2:f7:36:d1:a2:23:3f:36:4d:77:40:1f:af:ad:e3:
         28:2c:f6:6c:24:cc:f8:b3:43:38:11:0d:44:d9:d1:ac:9e:b3:
         34:15:ae:ca:79:ac:a6:a2:97:93:5a:6f:63:95:bc:bb:12:7a:
         c7:90:4c:49:49:99:93:cd:30:df:7b:cf:9f:e5:0f:14:ad:3e:
         68:e8:5c:2b:02:2c:73:38:1a:a6:4f:33:2b:c2:ce:25:c7:9a:
         1d:1d:0a:de:97:ab:78:5f:5b:e9:d9:d4:cc:1d:0c:42:b8:f7:
         4e:aa:a9:03:2b:5e:11:b4:18:8f:f1:e1:a8:e5:9d:90:0b:07:
         51:be:a7:25:a5:10:d4:b7:bb:0b:cb:bd:5e:9d:90:d5:74:f6:
         62:1b:e1:9d:6d:94:46:9c:aa:c4:42:90:da:ee:b4:e4:28:8a:
         b8:13:cd:13:52:e0:8e:f8:d4:65:51:d2:35:ae:20:01:ca:4a:
         ae:69:41:a3:81:a0:78:22:b0:77:ed:a6:d2:b1:20:33:a6:7b:
         2d:0e:d3:71:32:5d:d5:98:05:d8:0e:75:47:b0:fa:73:03:11:
         04:d5:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org