Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3234203d3e2033333536.roa
File:                     3137392e34392e3134342e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          H/4IIlsfWZxhydg565fMd48xvjCheshV/HQkPyKNcXw=
Subject key identifier:   09:2C:13:F5:88:D0:07:CA:E4:54:84:FD:31:85:EF:41:3A:7A:1A:C7
Certificate issuer:       /CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
Certificate serial:       318E090493E54E0452330E8CD662EB6BB5B67F2B
Authority key identifier: F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3234203d3e2033333536.roa
Signing time:             Mon 19 Dec 2022 19:05:16 +0000
ROA not before:           Mon 19 Dec 2022 19:00:16 +0000
ROA not after:            Mon 18 Dec 2023 19:05:16 +0000
asID:                     3356
IP address blocks:        179.49.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8e:09:04:93:e5:4e:04:52:33:0e:8c:d6:62:eb:6b:b5:b6:7f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
        Validity
            Not Before: Dec 19 19:00:16 2022 GMT
            Not After : Dec 18 19:05:16 2023 GMT
        Subject: CN=092C13F588D007CAE45484FD3185EF413A7A1AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:e4:f5:73:e0:77:98:00:cf:ab:c4:e5:14:
                    6f:57:84:f3:5f:06:1b:a9:9f:a8:5a:5d:ca:9e:26:
                    b6:ed:e0:68:87:52:af:ae:75:17:0a:7c:bc:37:a8:
                    24:ad:0a:c2:69:35:cf:cb:6d:cd:81:c8:78:19:e9:
                    31:09:f2:3e:a4:cb:7e:da:96:c6:c9:47:3c:2a:cc:
                    e1:73:df:55:cb:ae:a5:5f:02:b0:48:4f:18:0f:2c:
                    12:c2:6f:68:35:00:46:49:2e:7e:97:89:66:4c:e4:
                    6a:c2:8e:d2:2f:65:1b:7f:7e:49:1c:d1:e5:83:39:
                    65:5c:a1:7f:48:b7:69:99:d8:37:ad:b1:af:f9:cb:
                    81:a1:0d:33:ea:14:51:2c:b3:d3:f0:04:26:ca:15:
                    9c:cd:78:7e:96:e9:56:21:fe:82:85:5c:19:2b:88:
                    16:4c:05:81:7a:c4:d2:75:82:10:a3:1f:9a:b8:f3:
                    d9:e3:e9:82:81:dd:fe:39:39:50:00:78:92:7b:e8:
                    8d:27:7e:3a:8e:33:45:e5:db:72:15:b7:8d:fb:0e:
                    80:1c:2a:18:b0:c7:d8:fd:5f:5b:8e:cb:be:65:30:
                    72:0a:81:95:a5:9a:c0:ac:05:24:8a:f1:54:7f:6b:
                    db:df:a4:a8:1f:a3:22:26:83:c0:e4:13:d6:d3:9e:
                    cf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2C:13:F5:88:D0:07:CA:E4:54:84:FD:31:85:EF:41:3A:7A:1A:C7
            X509v3 Authority Key Identifier:
                keyid:F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:30:40:ea:ca:d5:7f:ac:f3:1b:05:a1:d6:89:a4:06:97:3e:
         a9:81:2e:f9:8f:e8:d8:96:80:fe:04:22:eb:91:e5:9e:e8:f7:
         4b:e9:f5:7a:bd:af:da:23:e2:a9:c6:5d:56:38:0d:fc:38:48:
         47:31:3e:d5:dd:27:71:d1:27:d3:6e:d6:c5:51:07:9c:5c:27:
         cd:af:e9:08:04:e2:5c:26:72:02:04:8a:88:45:46:d3:4f:b0:
         2b:23:53:cf:6e:51:41:8e:b3:fb:df:e5:d3:d4:7c:0d:dd:1d:
         2f:70:c2:17:2f:4f:59:e5:71:7a:ba:1f:5e:4d:01:1c:48:a7:
         88:d1:70:6c:2c:cf:33:49:22:c1:23:b2:f2:92:d3:56:e7:92:
         5d:b5:76:d2:3c:98:bc:17:aa:d3:73:de:ff:d7:37:12:cc:15:
         2f:25:82:4a:ad:8a:82:a0:aa:a4:6f:d1:27:1a:bf:43:af:c7:
         44:47:5c:bb:a7:7b:b3:fd:35:bd:9d:27:4a:9a:86:dd:b7:32:
         8c:8f:5e:53:49:4f:f4:38:c3:64:ec:bd:51:df:aa:f2:fd:af:
         fa:1c:9e:4c:a3:f3:d9:62:49:3d:e0:a1:b7:43:58:0c:9b:6a:
         0a:ef:72:0f:e5:bb:e7:d6:5d:24:41:02:33:c0:12:cc:5e:81:
         a5:b1:64:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org