Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33382e302f32342d3234203d3e20323632373630.roa
File:                     3137392e3130362e33382e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          EIZmnhKv+AACcU/PxfMSiOxo0OjtvVx/qVAaugf/qkI=
Subject key identifier:   53:A0:34:FE:A3:61:D0:78:97:51:AD:17:F1:27:38:C5:E7:8C:06:59
Certificate issuer:       /CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
Certificate serial:       3FEDF3C585D36F6565B018F079EBFFFB7C8FCB91
Authority key identifier: C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33382e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 22 Mar 2023 22:00:03 +0000
ROA not before:           Wed 22 Mar 2023 21:55:03 +0000
ROA not after:            Wed 20 Mar 2024 22:00:03 +0000
asID:                     262760
IP address blocks:        179.106.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ed:f3:c5:85:d3:6f:65:65:b0:18:f0:79:eb:ff:fb:7c:8f:cb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Validity
            Not Before: Mar 22 21:55:03 2023 GMT
            Not After : Mar 20 22:00:03 2024 GMT
        Subject: CN=3082010A0282010100E02FCD7754CA5336B2F8BBBDD3D903F06AC0626C2D12AD7879825564F1E7BA0F996EB0A15152181513AF4D66D738D82F01BFCD70753D555C2CA616D469FABD2408304A5F896C42A5C3A975CF1DB05C59F1EE5CE44B6A7854109E26FC9E08D21096218E76675DB082F45625F341B33E39F9A90FD1FC1C95428A47AC7ABF030F538B334471AD21A48014E7ABAB177DEEDA429F6E53CCC1A04356E5BC42D0D1FD8FBCE34B4D8DF8C73E2C5C8C4BFBC9CB6F7D3433E56962A61C64E0417261F1F3998C7FBF32E6FCD45D39020F08CBAD87E7BB938C00A221975933A3D8482B18D21E67552571AA1F274E005617699254A7CAE377A358ED5237B13EAC091EDC489AAB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2f:cd:77:54:ca:53:36:b2:f8:bb:bd:d3:d9:
                    03:f0:6a:c0:62:6c:2d:12:ad:78:79:82:55:64:f1:
                    e7:ba:0f:99:6e:b0:a1:51:52:18:15:13:af:4d:66:
                    d7:38:d8:2f:01:bf:cd:70:75:3d:55:5c:2c:a6:16:
                    d4:69:fa:bd:24:08:30:4a:5f:89:6c:42:a5:c3:a9:
                    75:cf:1d:b0:5c:59:f1:ee:5c:e4:4b:6a:78:54:10:
                    9e:26:fc:9e:08:d2:10:96:21:8e:76:67:5d:b0:82:
                    f4:56:25:f3:41:b3:3e:39:f9:a9:0f:d1:fc:1c:95:
                    42:8a:47:ac:7a:bf:03:0f:53:8b:33:44:71:ad:21:
                    a4:80:14:e7:ab:ab:17:7d:ee:da:42:9f:6e:53:cc:
                    c1:a0:43:56:e5:bc:42:d0:d1:fd:8f:bc:e3:4b:4d:
                    8d:f8:c7:3e:2c:5c:8c:4b:fb:c9:cb:6f:7d:34:33:
                    e5:69:62:a6:1c:64:e0:41:72:61:f1:f3:99:8c:7f:
                    bf:32:e6:fc:d4:5d:39:02:0f:08:cb:ad:87:e7:bb:
                    93:8c:00:a2:21:97:59:33:a3:d8:48:2b:18:d2:1e:
                    67:55:25:71:aa:1f:27:4e:00:56:17:69:92:54:a7:
                    ca:e3:77:a3:58:ed:52:37:b1:3e:ac:09:1e:dc:48:
                    9a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A0:34:FE:A3:61:D0:78:97:51:AD:17:F1:27:38:C5:E7:8C:06:59
            X509v3 Authority Key Identifier:
                keyid:C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e33382e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:34:77:f1:3b:77:4e:ae:06:c3:52:d6:bd:c6:5f:e3:e2:e6:
         c8:92:91:5b:b7:69:4c:cd:a0:44:69:03:98:bf:2d:e9:9c:45:
         f4:57:49:47:92:a8:92:a1:a1:1c:51:eb:93:01:3a:12:10:6c:
         7a:87:ab:2c:0e:4f:ad:f8:31:0c:b8:01:54:d5:d2:2b:b7:64:
         35:75:39:ae:b6:ee:96:5d:6d:79:77:6c:72:15:f0:e5:32:5a:
         2a:ab:9c:79:31:47:fa:93:2b:e3:1f:0f:2a:07:b4:c6:87:3f:
         df:c1:c2:5d:2c:7d:f9:c4:a9:74:40:83:1e:7e:b8:2f:92:46:
         ac:09:3c:b7:c0:8c:d4:b9:b9:1a:29:d3:5f:68:61:78:e1:26:
         fe:e7:56:eb:c5:20:76:a2:f3:82:39:cd:a7:35:ce:ec:be:1c:
         9d:4c:79:80:0c:bd:a6:be:b8:db:3d:15:98:0b:2c:a8:6d:7f:
         44:9b:33:ba:4b:42:b9:46:07:ae:af:4b:35:5f:01:3b:28:a5:
         93:da:4e:86:cb:61:a1:e6:9d:6c:3a:6f:c0:94:5e:82:b9:f0:
         55:48:9a:3d:d6:02:00:5e:17:0d:44:48:39:18:0d:b7:66:05:
         8c:17:6a:0d:58:68:5e:ce:81:4e:01:9c:49:ee:03:3b:88:f9:
         36:c5:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org