Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3332203d3e2033333536.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e2033333536.roa (raw, json)
Hash identifier:          UaYfYegPrXlsRdmL7MV+vK6TqBcR8zIo1lxANGf7nYk=
Subject key identifier:   25:0A:AD:38:57:46:4F:94:F3:36:7D:AD:19:AD:DD:14:92:8B:72:F2
Certificate issuer:       /CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
Certificate serial:       578057C384987AAEDB2F1B91C3B66CDC8FD58075
Authority key identifier: F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3332203d3e2033333536.roa
Signing time:             Thu 23 Nov 2023 18:10:18 +0000
ROA not before:           Thu 23 Nov 2023 18:05:18 +0000
ROA not after:            Thu 21 Nov 2024 18:10:18 +0000
asID:                     3356
IP address blocks:        179.49.144.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:80:57:c3:84:98:7a:ae:db:2f:1b:91:c3:b6:6c:dc:8f:d5:80:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
        Validity
            Not Before: Nov 23 18:05:18 2023 GMT
            Not After : Nov 21 18:10:18 2024 GMT
        Subject: CN=250AAD3857464F94F3367DAD19ADDD14928B72F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b5:c3:83:1b:d3:3f:59:31:e6:33:96:75:35:
                    a6:be:c8:72:17:19:3b:9f:62:ba:de:4a:4a:81:79:
                    70:68:80:40:29:72:d8:19:f2:ef:17:0f:05:1c:29:
                    e3:b8:5d:c4:86:24:55:04:c4:22:16:03:22:d5:30:
                    5b:d2:03:9f:4c:35:c7:2a:01:7d:fb:89:5e:a7:55:
                    ba:72:01:28:e3:e5:98:9f:d9:bf:77:b8:5c:74:49:
                    bd:65:82:4b:ad:e3:e5:82:de:0b:10:c4:dc:75:63:
                    3d:0a:6b:45:26:f6:5c:ca:25:83:b2:06:a9:d6:62:
                    9a:1c:35:c8:dd:88:71:91:87:9e:25:aa:9b:92:e4:
                    80:6d:61:9e:ef:61:c2:f7:38:82:2a:ed:5a:01:45:
                    82:6e:00:1a:a8:82:86:4b:54:20:aa:03:bf:64:91:
                    42:98:23:e3:d9:3c:4f:dd:58:41:e2:cb:1d:07:c4:
                    a5:57:44:74:cc:b7:2a:97:3c:89:88:6e:4d:d6:7a:
                    12:77:cb:af:95:6b:a5:81:ac:13:3a:1f:c4:f1:5a:
                    f5:84:f8:76:f3:c9:32:7b:a9:19:13:9b:df:29:b2:
                    91:ff:b9:0a:16:0b:4f:22:45:57:85:27:9d:29:3e:
                    af:39:6f:ae:b8:d1:a8:31:57:b0:8a:e1:7d:31:8f:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0A:AD:38:57:46:4F:94:F3:36:7D:AD:19:AD:DD:14:92:8B:72:F2
            X509v3 Authority Key Identifier:
                keyid:F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/3137392e34392e3134342e302f32322d3332203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:3a:1b:37:01:2b:a3:a8:6b:3c:1c:29:e6:e4:20:dc:b8:ba:
         dc:ba:25:62:9b:40:fc:22:a4:e1:54:4c:bf:a6:53:90:f7:e7:
         cb:f2:91:49:b8:c0:9e:bc:b4:dc:0f:5c:ac:08:07:58:96:72:
         5c:56:ab:f3:82:5a:72:8f:ff:05:b4:1c:91:b1:74:97:0a:83:
         7d:c7:70:1d:4d:9b:7a:a7:49:04:46:ac:73:43:38:94:ac:a0:
         14:02:14:05:58:d0:51:97:ba:47:66:25:ed:ad:8e:c1:d2:11:
         5c:0e:65:3a:13:17:54:96:7e:36:06:75:8d:9e:96:22:71:d5:
         05:f4:18:42:9f:d6:d4:73:cc:0f:64:a0:66:c1:06:08:63:e9:
         73:03:c6:53:80:22:9f:d6:b3:8d:91:29:05:5f:b1:00:6a:7c:
         f4:36:63:fa:9c:09:6b:ce:31:34:c0:08:6b:3e:7b:8f:40:c2:
         8c:9a:97:ab:e8:cf:01:2c:97:b7:53:8a:f2:7c:20:38:97:6b:
         fc:86:5d:bd:49:c0:dc:c3:cb:3a:66:d1:a1:0d:70:94:d4:5d:
         a7:91:de:a0:c7:24:e9:fd:e3:56:62:d7:df:06:0e:e2:f5:a9:
         76:cf:0b:3c:2d:74:6b:b4:d5:ca:44:31:44:83:15:bf:42:68:
         36:71:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org