Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34332e302f32342d3234203d3e20323632373630.roa
File:                     3137392e3130362e34332e302f32342d3234203d3e20323632373630.roa (raw, json)
Hash identifier:          F4WYKBbOKE2ci/sue4uaD2PmCte+2rNCKi4gJFDt1Rc=
Subject key identifier:   58:0D:BB:A3:8A:35:31:9B:B5:D7:E6:9B:9D:A3:D1:88:81:96:DD:AB
Certificate issuer:       /CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
Certificate serial:       4C46C77921F3B1F8C6A29E48BD10E7C896F9AE17
Authority key identifier: C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34332e302f32342d3234203d3e20323632373630.roa
Signing time:             Wed 22 Mar 2023 22:00:03 +0000
ROA not before:           Wed 22 Mar 2023 21:55:03 +0000
ROA not after:            Wed 20 Mar 2024 22:00:03 +0000
asID:                     262760
IP address blocks:        179.106.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:46:c7:79:21:f3:b1:f8:c6:a2:9e:48:bd:10:e7:c8:96:f9:ae:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3
        Validity
            Not Before: Mar 22 21:55:03 2023 GMT
            Not After : Mar 20 22:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:64:7c:9c:eb:b5:08:28:84:aa:ba:cd:71:
                    56:f5:5c:68:f7:0a:b6:f8:b4:54:d9:18:11:d3:df:
                    aa:2e:bc:af:44:c6:b1:14:54:57:8f:64:cf:90:40:
                    35:f1:19:2d:95:8f:9f:f1:2f:05:ca:90:99:78:28:
                    5e:0b:0e:14:9d:a8:96:07:90:4f:5b:d4:ad:15:1d:
                    e9:e5:31:d1:eb:16:42:3a:2e:0f:0d:34:d6:92:f6:
                    cf:c6:9a:81:d3:3a:18:04:5a:c4:78:52:be:dc:7a:
                    a7:f5:7f:79:7b:81:9d:37:7d:12:23:0f:fe:bf:2e:
                    c2:0c:db:1d:9e:7b:26:8b:5b:cb:11:e6:e2:34:d7:
                    ff:2d:99:89:a3:1b:db:df:6d:27:1e:83:ba:e1:9d:
                    b3:d4:69:84:5b:60:2d:3c:04:e9:97:cc:be:3e:39:
                    71:5a:59:1b:40:d9:c0:2f:32:3d:b3:f7:a1:55:e6:
                    71:a1:a0:6b:f4:0d:4f:a9:79:83:0e:94:1c:6a:95:
                    86:33:1e:f8:b2:39:e5:78:d6:aa:c6:9a:6c:9b:0e:
                    48:dd:f2:b0:0d:c8:4f:57:fd:c4:8c:39:b7:64:ea:
                    da:fa:9a:5f:18:6c:0b:82:aa:5e:10:7d:9c:3c:b0:
                    46:20:35:73:9f:5c:c1:9f:b4:5c:a4:6a:83:f8:22:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0D:BB:A3:8A:35:31:9B:B5:D7:E6:9B:9D:A3:D1:88:81:96:DD:AB
            X509v3 Authority Key Identifier:
                keyid:C8:FE:A1:81:62:31:EA:2B:DE:E7:FF:AF:19:A0:EC:92:B3:4A:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8FEA1816231EA2BDEE7FFAF19A0EC92B34A66C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/3137392e3130362e34332e302f32342d3234203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:54:fa:b8:ea:c3:6c:15:19:d6:0b:dd:a3:2c:1b:42:d8:d4:
         98:8c:3c:2d:de:74:05:35:98:46:f8:68:23:2f:ed:fb:e8:97:
         ee:be:fa:d4:ac:46:a7:b2:0e:8b:0b:67:0c:d9:7e:94:bf:be:
         b2:b5:e8:ca:65:f2:b5:8f:8e:60:8e:b4:f6:1c:62:27:b9:1c:
         6e:40:0f:db:d9:77:6d:32:39:9c:3f:23:ce:d1:4f:05:f2:8d:
         9b:7e:5f:47:b6:7e:06:8b:c0:1b:2c:1b:c0:5d:f6:31:ae:85:
         c4:87:85:9e:fa:bf:c6:53:41:aa:71:90:8a:b5:2f:a8:cc:11:
         92:a8:0f:c9:01:38:fa:97:55:df:e4:68:49:0a:00:c6:aa:1f:
         80:95:22:12:1a:91:b3:bf:92:ba:d2:85:28:28:af:70:0d:dd:
         3e:9c:84:a7:7b:fb:4c:e9:3f:7a:2d:cf:09:44:a3:7c:eb:92:
         9a:6f:b1:fe:ec:7e:66:22:0d:74:8f:8e:3e:57:1c:57:fa:51:
         a9:dc:d3:43:d4:98:dc:11:e7:20:9e:96:f5:5b:8a:db:fb:b3:
         79:8c:bb:2d:60:73:90:a7:fe:0b:f3:f7:cc:5b:12:8b:21:17:
         10:8f:4c:73:33:74:1f:00:fd:cd:11:02:c3:42:3a:9c:40:9b:
         b3:b7:ce:8c
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUTEbHeSHzsfjGop5IvRDnyJb5rhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhGRUExODE2MjMxRUEyQkRFRTdGRkFGMTlBMEVDOTJC
MzRBNjZDMzAeFw0yMzAzMjIyMTU1MDNaFw0yNDAzMjAyMjAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTA5NDY0N0M5Q0VCQjUwODI4
ODRBQUJBQ0Q3MTU2RjU1QzY4RjcwQUI2RjhCNDU0RDkxODExRDNERkFBMkVCQ0FG
NDRDNkIxMTQ1NDU3OEY2NENGOTA0MDM1RjExOTJEOTU4RjlGRjEyRjA1Q0E5MDk5
NzgyODVFMEIwRTE0OURBODk2MDc5MDRGNUJENEFEMTUxREU5RTUzMUQxRUIxNjQy
M0EyRTBGMEQzNEQ2OTJGNkNGQzY5QTgxRDMzQTE4MDQ1QUM0Nzg1MkJFREM3QUE3
RjU3Rjc5N0I4MTlEMzc3RDEyMjMwRkZFQkYyRUMyMENEQjFEOUU3QjI2OEI1QkNC
MTFFNkUyMzREN0ZGMkQ5OTg5QTMxQkRCREY2RDI3MUU4M0JBRTE5REIzRDQ2OTg0
NUI2MDJEM0MwNEU5OTdDQ0JFM0UzOTcxNUE1OTFCNDBEOUMwMkYzMjNEQjNGN0Ex
NTVFNjcxQTFBMDZCRjQwRDRGQTk3OTgzMEU5NDFDNkE5NTg2MzMxRUY4QjIzOUU1
NzhENkFBQzY5QTZDOUIwRTQ4RERGMkIwMERDODRGNTdGREM0OEMzOUI3NjRFQURB
RkE5QTVGMTg2QzBCODJBQTVFMTA3RDlDM0NCMDQ2MjAzNTczOUY1Q0MxOUZCNDVD
QTQ2QTgzRjgyMjlDRTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoJRkfJzrtQgohKq6zXFW9Vxo9wq2+LRU2RgR09+qLryvRMaxFFRX
j2TPkEA18RktlY+f8S8FypCZeCheCw4UnaiWB5BPW9StFR3p5THR6xZCOi4PDTTW
kvbPxpqB0zoYBFrEeFK+3Hqn9X95e4GdN30SIw/+vy7CDNsdnnsmi1vLEebiNNf/
LZmJoxvb320nHoO64Z2z1GmEW2AtPATpl8y+PjlxWlkbQNnALzI9s/ehVeZxoaBr
9A1PqXmDDpQcapWGMx74sjnleNaqxppsmw5I3fKwDchPV/3EjDm3ZOra+ppfGGwL
gqpeEH2cPLBGIDVzn1zBn7RcpGqD+CKc5wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFgNu6OKNTGbtdfmm52j0YiBlt2rMB8GA1UdIwQYMBaAFMj+oYFiMeor3uf/rxmg
7JKzSmbDMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6WE40M3VGNkhRdUZI
YnFITWluRFNuaVZGaDlQSHg5QXduNURBbVV4UzI5LzAvQzhGRUExODE2MjMxRUEy
QkRFRTdGRkFGMTlBMEVDOTJCMzRBNjZDMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9DOEZFQTE4MTYyMzFFQTJCREVFN0ZGQUYxOUEwRUM5MkIzNEE2
NkMzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CelhONDN1RjZIUXVGSGJxSE1p
bkRTbmlWRmg5UEh4OUF3bjVEQW1VeFMyOS8wLzMxMzczOTJlMzEzMDM2MmUzNDMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
s2orMA0GCSqGSIb3DQEBCwUAA4IBAQAWVPq46sNsFRnWC92jLBtC2NSYjDwt3nQF
NZhG+GgjL+376JfuvvrUrEansg6LC2cM2X6Uv76ytejKZfK1j45gjrT2HGInuRxu
QA/b2XdtMjmcPyPO0U8F8o2bfl9Htn4Gi8AbLBvAXfYxroXEh4We+r/GU0GqcZCK
tS+ozBGSqA/JATj6l1Xf5GhJCgDGqh+AlSISGpGzv5K60oUoKK9wDd0+nISne/tM
6T96Lc8JRKN865Kab7H+7H5mIg10j44+VxxX+lGp3NND1JjcEecgnpb1W4rb+7N5
jLstYHOQp/4L8/fMWxKLIRcQj0xzM3QfAP3NEQLDQjqcQJuzt86M
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org