Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31382e302f32342d3234203d3e20323633363235.roa
File:                     3137392e3132352e31382e302f32342d3234203d3e20323633363235.roa (raw, json)
Hash identifier:          goanh5HpVtzwNdQ4gnZL4N2Z3fwnRqj6UjaA7i9YK5s=
Subject key identifier:   32:CB:7A:F8:BE:A3:FA:87:14:9A:48:2C:FE:5A:4D:69:20:CB:80:4E
Certificate issuer:       /CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
Certificate serial:       62298EB5DE7052E45E41C01F1D479DD4B73CEC11
Authority key identifier: FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31382e302f32342d3234203d3e20323633363235.roa
Signing time:             Tue 05 Dec 2023 16:32:28 +0000
ROA not before:           Tue 05 Dec 2023 16:27:28 +0000
ROA not after:            Tue 03 Dec 2024 16:32:28 +0000
asID:                     263625
IP address blocks:        179.125.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:29:8e:b5:de:70:52:e4:5e:41:c0:1f:1d:47:9d:d4:b7:3c:ec:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
        Validity
            Not Before: Dec  5 16:27:28 2023 GMT
            Not After : Dec  3 16:32:28 2024 GMT
        Subject: CN=32CB7AF8BEA3FA87149A482CFE5A4D6920CB804E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c7:df:96:5e:97:61:79:67:20:5f:54:c9:3c:
                    64:20:f2:98:e6:97:99:b2:0d:75:8c:a9:14:17:e0:
                    33:27:6f:ed:f0:68:9e:17:e1:47:64:30:df:41:96:
                    cf:0c:81:89:c9:5e:14:49:99:4a:26:fd:4f:ac:4d:
                    1a:ec:f8:0f:55:c2:3b:bb:fe:28:8a:bc:95:7a:67:
                    c7:3d:cb:a9:08:43:38:dc:fa:ac:ba:80:18:d2:ab:
                    95:cb:cf:09:4a:76:a3:99:bf:9c:0f:da:15:b8:ed:
                    67:ab:94:69:1b:63:f7:17:2b:26:84:ba:d9:0b:aa:
                    c0:41:d9:ca:3a:34:e9:fd:00:3d:ed:40:43:d8:30:
                    67:1e:30:8e:ba:c8:d2:ee:d7:82:5e:1e:2a:5c:6d:
                    ec:c0:9e:4c:cb:f8:e8:7d:e4:45:8c:5e:80:b5:2b:
                    79:98:b1:ed:66:3c:8d:36:37:e2:3b:ae:5e:84:b1:
                    ad:de:e0:27:0a:76:ca:b4:6e:58:24:27:f1:55:3d:
                    27:07:18:0a:61:57:06:9d:b3:03:ee:ce:dc:e5:13:
                    29:6e:32:46:c3:a6:fd:11:da:62:79:68:39:9e:5d:
                    df:ab:9f:2b:80:c6:f7:0f:13:03:8d:9b:40:1f:8c:
                    98:a8:01:a6:3c:85:ea:8a:9f:d9:32:b8:4c:07:2a:
                    c0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CB:7A:F8:BE:A3:FA:87:14:9A:48:2C:FE:5A:4D:69:20:CB:80:4E
            X509v3 Authority Key Identifier:
                keyid:FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31382e302f32342d3234203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:be:33:fa:d4:ea:55:e8:2e:9e:b2:24:12:61:9e:52:0b:47:
         51:70:98:d9:3a:b1:e2:57:ce:5f:dd:4d:ae:1f:6d:72:7d:4f:
         65:b6:8d:e2:cd:be:ae:98:a9:2c:b0:92:2f:a8:0f:f7:25:65:
         cd:fa:36:e3:a5:8e:19:19:12:33:52:ae:78:e7:24:a6:6d:0b:
         2d:3a:b1:9a:2a:3a:93:76:b2:15:a5:aa:5a:37:41:dc:e6:ee:
         82:54:5e:26:6b:b3:d7:32:a3:35:e2:d2:c6:d7:96:11:46:9e:
         ac:62:93:f8:d3:db:da:c7:65:c4:3f:73:b9:f3:06:fc:a7:d0:
         64:91:99:15:4b:a1:e1:e9:c4:da:88:a3:2d:99:47:b8:f0:97:
         9e:25:27:aa:cb:6c:88:32:37:9d:68:b2:ac:c1:9f:e4:f9:b1:
         b0:fa:d8:c4:8b:13:e1:cd:5f:c9:62:d3:51:91:cf:cb:0c:ff:
         0b:0f:6d:c8:8e:57:04:c9:8a:55:26:9f:b9:ed:0b:54:b7:88:
         b1:39:e5:94:9a:6f:91:a9:e3:1f:c3:25:6b:65:ff:70:45:aa:
         18:e3:9b:d1:cf:0d:63:e3:fd:e6:d9:8c:8c:91:1a:a1:f9:68:
         84:64:78:8b:3d:cb:57:d0:3a:dd:1f:e8:22:0b:c1:e8:00:d6:
         20:e9:dc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org