Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa
File:                     3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa (raw, json)
Hash identifier:          +UyHWzYHrpNMEmmY8zWjkDVHmh+gUXbT2aFA69C8klc=
Subject key identifier:   0F:14:3A:B3:5D:A7:BF:1E:CF:F7:EA:CA:16:46:AD:3E:12:20:A2:C8
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       272B8EC33752D059A60032FBDEAFCAFD7B852881
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa
Signing time:             Tue 09 May 2023 14:22:02 +0000
ROA not before:           Tue 09 May 2023 14:17:02 +0000
ROA not after:            Tue 07 May 2024 14:22:02 +0000
asID:                     263641
IP address blocks:        179.127.156.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2b:8e:c3:37:52:d0:59:a6:00:32:fb:de:af:ca:fd:7b:85:28:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: May  9 14:17:02 2023 GMT
            Not After : May  7 14:22:02 2024 GMT
        Subject: CN=0F143AB35DA7BF1ECFF7EACA1646AD3E1220A2C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:77:bc:d1:31:4f:38:2a:d8:3f:bc:31:fb:c9:
                    7b:4b:dc:da:b5:5d:99:d2:ca:46:af:00:48:b3:56:
                    a8:47:0f:9e:20:6e:90:f7:bf:e5:1d:8d:88:67:cb:
                    38:3f:20:67:f8:f8:bd:6f:7c:83:69:28:fc:25:9d:
                    fa:f1:4e:8a:65:57:48:76:c1:60:80:ee:db:aa:ad:
                    fe:b1:0f:10:b2:30:c1:5d:87:55:d8:be:f6:e7:7c:
                    4b:ff:c9:48:11:05:17:6b:e7:d0:2c:fc:99:78:1e:
                    b7:7c:53:d3:bd:c2:39:a4:a0:d3:0c:ad:cc:dd:cd:
                    7a:cb:7e:47:8e:3d:9c:9c:7e:7a:6d:0f:d7:90:65:
                    09:0e:cd:fe:1c:71:14:a3:af:f6:fd:46:a0:a2:79:
                    ec:ae:1f:58:92:c5:fa:bc:fd:df:b2:13:49:32:a6:
                    8b:85:3d:62:f9:c1:dd:33:7d:2d:0b:0b:05:a9:7c:
                    89:8e:5b:6c:15:15:00:3f:c4:28:c3:cf:fd:b9:2e:
                    3d:57:f5:28:55:8a:f6:00:77:82:5b:9a:06:5f:6a:
                    bd:ff:8f:e9:49:98:9d:e9:99:ac:57:a8:79:0d:b2:
                    90:c1:a9:65:63:8a:03:4c:9f:bb:50:01:e0:83:2f:
                    8b:26:b6:f2:a8:a9:18:91:8b:9e:1c:17:35:44:dc:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:14:3A:B3:5D:A7:BF:1E:CF:F7:EA:CA:16:46:AD:3E:12:20:A2:C8
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135362e302f32332d3233203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:ab:7b:c6:74:2d:36:f6:ea:21:ce:7a:f6:36:97:25:2a:88:
         25:40:87:67:32:76:8d:58:0a:81:71:6e:ff:c0:ef:32:51:af:
         52:4a:8c:41:e1:23:78:32:94:9e:c0:31:4d:af:e0:60:a2:47:
         57:b1:4a:13:ef:dd:22:9c:34:ad:38:72:48:df:61:cb:bc:eb:
         d9:9b:c4:ec:91:b8:bb:b5:39:e0:00:ba:aa:b8:c1:34:ba:45:
         49:c8:92:4c:92:93:67:69:00:c8:f9:d7:3f:eb:2a:94:98:1a:
         a0:97:cd:57:18:ab:7e:1c:f7:f1:d3:bb:7c:66:0d:d8:c2:54:
         6a:09:00:9f:59:ae:22:f8:15:f5:f8:e8:6c:0a:31:f1:23:c1:
         0c:92:af:98:8a:a8:17:3d:9c:65:8a:72:37:54:c3:16:9e:d4:
         fd:b3:c4:ae:89:e7:1a:b5:a9:a2:ef:a8:5e:22:ab:6f:ab:b1:
         9e:fd:d7:7e:e0:51:72:56:7b:e1:96:aa:b6:fe:a5:11:39:ec:
         90:11:35:6f:c9:e1:bd:aa:05:9d:18:63:3d:74:6b:23:0f:a7:
         61:60:f3:90:d6:35:4e:31:92:89:fc:99:ef:09:83:56:36:3c:
         3f:f1:85:4d:f3:b7:b0:6d:0b:8e:33:fd:88:d9:d3:54:2e:5f:
         30:cf:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org