Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135372e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135372e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          GHlArM8UgK0cxLTi2yOF3oz4/NGn24qhRXX5E3B+Jts=
Subject key identifier:   D7:A4:4D:D5:F3:D1:E1:61:7E:19:80:B0:09:68:6F:A0:77:02:1A:67
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       320013EA3E7B04AB4B5BDD837F0CA49CFA55A81F
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135372e302f32342d3234203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:34 +0000
ROA not before:           Tue 05 Dec 2023 15:39:34 +0000
ROA not after:            Tue 03 Dec 2024 15:44:34 +0000
asID:                     263641
IP address blocks:        179.127.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:00:13:ea:3e:7b:04:ab:4b:5b:dd:83:7f:0c:a4:9c:fa:55:a8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:34 2023 GMT
            Not After : Dec  3 15:44:34 2024 GMT
        Subject: CN=D7A44DD5F3D1E1617E1980B009686FA077021A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:b2:4f:30:5f:97:b1:0c:8d:e2:81:ad:16:
                    05:ec:ba:c3:36:70:f4:27:be:56:55:26:0c:5c:de:
                    c2:78:ac:b6:fe:9c:27:30:93:72:e0:f3:4d:0e:ec:
                    d4:19:79:9d:b9:80:f3:c7:80:15:a2:98:e5:a5:c6:
                    57:df:48:0d:ce:ee:b7:86:d7:4f:fb:d7:f3:c2:b3:
                    3e:2f:5f:c5:08:7f:a3:3a:2b:61:0d:df:be:c8:51:
                    60:08:c8:2a:d9:08:cf:31:7e:48:61:d9:07:2e:7b:
                    a6:c0:c8:bd:11:a6:d3:bd:ba:de:50:ae:cf:0e:47:
                    34:02:b0:c1:03:54:93:e5:86:90:ba:a0:3d:35:0e:
                    40:fe:93:d7:03:7f:4b:8e:9c:ce:4f:c8:c2:e8:bb:
                    a1:06:02:7d:b0:c8:38:aa:93:97:cf:25:a7:dc:7c:
                    73:6f:71:83:46:de:f0:05:78:20:29:56:e9:55:83:
                    b0:95:32:49:67:c7:52:4c:01:5d:96:3a:91:a5:9e:
                    06:eb:b7:6f:b6:5e:b0:2e:14:bd:d4:a7:81:e8:42:
                    32:31:4c:79:c5:ec:25:23:92:25:25:3f:95:38:b6:
                    c7:68:18:c3:74:53:63:a4:c9:bf:8f:59:c3:35:1d:
                    92:12:ef:61:f7:1e:52:83:d6:35:9a:df:f8:9d:b5:
                    4d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:4D:D5:F3:D1:E1:61:7E:19:80:B0:09:68:6F:A0:77:02:1A:67
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135372e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:65:2f:df:3c:28:e2:6e:f8:27:98:0b:29:e9:5f:58:b1:fb:
         c2:e3:89:04:80:61:b0:21:4f:1f:83:41:1c:14:52:27:bd:b1:
         b9:32:02:7d:1b:08:10:fe:3e:97:22:0c:e2:51:9d:87:f9:4d:
         f4:38:ef:84:5b:fa:bc:7a:18:02:e8:d8:43:36:18:e2:d8:2b:
         48:38:3b:df:4f:e8:1f:6a:b0:d5:b3:42:b2:8c:21:2b:57:f7:
         2e:9e:24:19:6c:ec:ba:23:19:86:66:68:ce:a1:f4:a3:26:68:
         44:d3:b5:b7:ed:33:7c:d7:6f:99:1d:30:0d:6a:39:05:a5:6c:
         40:e5:ad:d0:9e:c5:a3:04:34:92:c0:a5:8b:38:e5:55:84:f0:
         ae:cf:23:b7:28:78:a1:80:7b:5a:86:73:64:12:c2:ba:33:e3:
         c2:e2:9f:d8:50:44:85:df:a4:52:47:a6:9b:62:20:0b:9a:57:
         0a:e4:7f:db:22:72:9c:92:4c:39:87:4d:9e:5f:40:66:3d:62:
         59:e0:c2:b3:42:e4:b0:3a:fc:87:97:b6:85:a8:e8:56:6b:04:
         00:42:2a:90:33:52:4e:50:d5:fd:dc:fe:b7:d8:9c:63:07:1f:
         d4:d8:e4:b4:b9:4c:2e:ec:d7:fb:37:70:89:c5:10:65:ac:5e:
         2e:66:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org