Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3234203d3e20323032.roa
File:                     3137392e34392e3134342e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier:          13U7uo64I/NYfqP9mY9zYi4P/7DAvsWLBqMZ4lhM+44=
Subject key identifier:   59:C1:C6:36:D8:52:ED:77:AF:F4:F9:8A:42:B3:0A:CB:27:D7:C4:43
Certificate issuer:       /CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
Certificate serial:       727B7845B22FA4632835B6DDB0B387D29A3E2BC3
Authority key identifier: F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3234203d3e20323032.roa
Signing time:             Mon 19 Dec 2022 19:05:32 +0000
ROA not before:           Mon 19 Dec 2022 19:00:32 +0000
ROA not after:            Mon 18 Dec 2023 19:05:32 +0000
asID:                     202
IP address blocks:        179.49.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7b:78:45:b2:2f:a4:63:28:35:b6:dd:b0:b3:87:d2:9a:3e:2b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
        Validity
            Not Before: Dec 19 19:00:32 2022 GMT
            Not After : Dec 18 19:05:32 2023 GMT
        Subject: CN=59C1C636D852ED77AFF4F98A42B30ACB27D7C443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b7:d3:92:61:45:b1:69:b3:63:e2:ef:43:94:
                    5e:a0:94:a8:67:02:36:20:24:e7:26:88:07:d0:d7:
                    d6:86:77:28:8d:e6:4f:f5:e5:76:7a:92:5a:08:55:
                    84:62:6c:a4:d2:c6:29:2a:60:7d:af:8c:e8:b5:3d:
                    4b:02:99:8c:34:eb:36:ad:da:2b:46:78:ac:64:bc:
                    f7:d9:3f:e2:4f:b7:be:0c:c1:e4:6b:f0:33:03:6a:
                    ac:1d:e7:d8:86:5b:d7:61:4a:e4:06:c3:b2:d4:59:
                    31:b7:c4:f4:40:c7:a3:a8:37:b8:3d:78:28:3d:70:
                    47:56:4b:bf:dd:22:73:1d:e2:f3:6c:be:d6:4c:8f:
                    ee:90:51:c9:16:9a:41:96:5b:08:9e:b8:d2:09:77:
                    a4:1e:96:48:80:10:8e:c5:53:47:2c:50:b3:e9:e3:
                    d1:10:a2:07:a7:6a:7d:84:af:e4:18:17:f4:27:cf:
                    01:28:82:25:29:c5:ab:41:19:a7:1a:64:50:5a:82:
                    47:23:5d:97:01:4a:b7:e3:a5:f4:89:ad:64:42:07:
                    f4:b2:bb:fd:14:cd:c4:23:ae:0d:ad:56:95:b5:07:
                    a4:f6:22:93:c8:9a:62:10:7c:22:56:6a:2e:22:87:
                    e5:c7:16:2d:da:62:d6:39:b9:a6:a6:2e:2a:0b:12:
                    2e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C1:C6:36:D8:52:ED:77:AF:F4:F9:8A:42:B3:0A:CB:27:D7:C4:43
            X509v3 Authority Key Identifier:
                keyid:F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:44:ca:eb:d1:6b:a8:c7:49:23:c0:03:48:c1:01:7a:e4:39:
         69:8b:19:aa:f7:7c:ba:1f:2f:ac:87:f7:d3:c9:86:86:52:31:
         a5:f6:20:dd:a3:cf:9e:ea:8b:c8:e4:f0:56:12:f4:e4:ee:b3:
         7b:91:88:14:57:86:51:cd:16:cf:3d:5e:c0:2c:4b:85:fa:d5:
         d8:e0:c8:9f:ed:93:e7:c4:b1:16:a8:4b:8b:79:51:b4:2d:d3:
         7e:7e:e7:9a:86:97:67:e4:c8:92:db:b5:19:3c:a7:b2:e0:02:
         76:75:c5:aa:0b:08:07:05:11:b5:4a:5c:b7:47:b6:ba:38:60:
         47:ca:b8:0a:95:63:c1:90:fa:f8:ee:31:ac:9e:65:f9:d7:a7:
         ee:7f:76:62:01:a1:47:9c:c7:76:65:c9:c1:ee:f5:fa:11:80:
         cc:2b:d9:cb:a5:86:59:15:d4:73:d7:bb:42:bc:6a:f5:33:ae:
         f2:93:be:a0:30:6d:9b:73:d5:90:15:07:a4:51:02:8a:5b:33:
         fd:60:e1:46:41:7e:35:21:ca:25:2d:a3:26:f8:e5:b6:f7:0d:
         90:98:f9:c5:2f:e1:09:89:fa:b7:f6:1b:43:7a:63:44:97:a0:
         c4:32:90:b9:6f:c8:d0:63:fc:2c:88:a0:ae:76:7b:4f:4a:a9:
         ee:fd:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org