Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31372e302f32342d3234203d3e20323633363235.roa
File:                     3137392e3132352e31372e302f32342d3234203d3e20323633363235.roa (raw, json)
Hash identifier:          z9oRKRrdpHBQR/btmXpDDuDwr9AT8OtLxbeKijsccjM=
Subject key identifier:   0B:93:A0:D0:C9:A9:EB:37:65:3C:FF:18:63:B2:C4:4F:07:37:41:17
Certificate issuer:       /CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
Certificate serial:       1A71FE78249742B98286F52E30077530362E42C8
Authority key identifier: FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31372e302f32342d3234203d3e20323633363235.roa
Signing time:             Tue 05 Dec 2023 16:32:28 +0000
ROA not before:           Tue 05 Dec 2023 16:27:28 +0000
ROA not after:            Tue 03 Dec 2024 16:32:28 +0000
asID:                     263625
IP address blocks:        179.125.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:71:fe:78:24:97:42:b9:82:86:f5:2e:30:07:75:30:36:2e:42:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
        Validity
            Not Before: Dec  5 16:27:28 2023 GMT
            Not After : Dec  3 16:32:28 2024 GMT
        Subject: CN=0B93A0D0C9A9EB37653CFF1863B2C44F07374117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:45:ee:67:30:ed:68:fd:63:e4:56:60:b1:b0:
                    45:c5:54:47:f8:9c:27:2d:c7:90:37:33:5f:19:90:
                    65:8d:66:24:9c:34:36:43:58:2f:1f:40:fc:4a:c3:
                    05:e4:15:be:d5:3b:d8:68:ee:1d:01:91:53:df:c5:
                    2e:ce:03:0a:c7:2f:d1:ce:95:7e:1a:b8:cf:db:aa:
                    47:d0:e2:fb:cb:b5:e0:d1:d9:9c:6e:dc:52:cb:76:
                    0c:db:13:86:e9:0f:10:2b:f4:95:28:aa:e0:d8:db:
                    07:dd:53:a4:1d:45:16:ab:10:d5:b1:91:87:46:3f:
                    c8:a8:50:15:f4:61:28:fd:24:25:15:b7:34:b3:5f:
                    10:61:23:f9:45:f0:5f:cc:b4:3d:58:42:a2:8f:6b:
                    ef:25:6e:9f:ad:f1:a2:4f:a0:70:ee:0a:3d:23:bb:
                    e1:84:be:b2:29:51:39:5b:16:76:4f:07:01:d2:4c:
                    d5:73:d6:b9:24:63:c8:86:11:21:8e:f7:f6:f1:8f:
                    aa:ec:74:78:80:72:e0:2e:72:40:56:cf:97:b2:7c:
                    56:e8:c2:0d:1c:20:31:74:d4:9c:bb:e0:66:9a:c7:
                    f8:01:c1:04:01:c4:b4:12:f3:5d:8f:c2:6d:e1:0d:
                    b6:a5:8f:98:59:19:2d:49:15:48:bd:95:26:e6:fb:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:93:A0:D0:C9:A9:EB:37:65:3C:FF:18:63:B2:C4:4F:07:37:41:17
            X509v3 Authority Key Identifier:
                keyid:FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31372e302f32342d3234203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:90:df:90:57:2f:d3:e1:b5:b7:91:ab:89:32:c5:7a:b3:3d:
         86:4c:2f:c8:29:ab:c1:e4:19:3b:fb:5c:b2:2a:0f:02:ce:c7:
         35:6f:ef:ff:28:17:c3:3e:61:cc:7d:ea:e9:56:30:6d:8a:93:
         b0:f4:e5:66:cb:90:be:e7:3f:ae:0c:b6:0e:66:c8:4c:5a:b9:
         27:5d:83:a6:03:1a:49:24:70:03:dd:49:03:93:18:9c:ca:3a:
         66:1f:41:08:bb:ca:4d:b5:ef:d7:0e:6f:05:26:cd:1f:96:69:
         11:85:d3:51:f4:82:b2:fd:a8:89:b5:11:7c:d5:b7:51:2d:a9:
         0d:66:50:6e:11:c0:02:69:52:49:04:db:d9:dc:37:8f:95:30:
         73:d3:3b:84:18:4f:c4:94:ab:50:df:8f:fa:1e:04:7b:84:e7:
         18:ca:a3:82:88:56:ea:56:75:b8:f2:ed:7f:02:f1:4b:e2:23:
         ea:2d:ae:38:1d:69:81:fc:d7:73:6e:51:51:6c:60:e6:5a:7d:
         fa:47:4c:67:d0:81:9a:08:d1:0d:37:52:bb:4b:7c:ea:24:64:
         97:45:7f:2c:58:be:b4:0f:6e:38:3a:8e:29:9e:32:16:90:1f:
         c6:a9:79:ae:d2:c7:a6:ea:15:84:78:8b:f1:ed:2e:c4:3a:10:
         71:a4:57:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org