Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/3137392e3132352e31362e302f32322d3332203d3e20323633363235.roa
File:                     3137392e3132352e31362e302f32322d3332203d3e20323633363235.roa (raw, json)
Hash identifier:          JfcoAMR+PLyPY+y7+Zmh/u0dpoYBSWOy/YgsS0HGxPg=
Subject key identifier:   59:06:C7:DA:D9:04:6F:6A:AC:A5:52:CD:48:D0:7E:90:6D:22:AA:FA
Certificate issuer:       /CN=1F9A49C248A696B5167DAB1D9B36795298FC2EC1
Certificate serial:       213EAE3368DD0CA6A15785D1591FE842F23DAF07
Authority key identifier: 1F:9A:49:C2:48:A6:96:B5:16:7D:AB:1D:9B:36:79:52:98:FC:2E:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/3137392e3132352e31362e302f32322d3332203d3e20323633363235.roa
Signing time:             Tue 03 Oct 2023 04:57:04 +0000
ROA not before:           Tue 03 Oct 2023 04:52:04 +0000
ROA not after:            Tue 01 Oct 2024 04:57:04 +0000
asID:                     263625
IP address blocks:        179.125.16.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3e:ae:33:68:dd:0c:a6:a1:57:85:d1:59:1f:e8:42:f2:3d:af:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F9A49C248A696B5167DAB1D9B36795298FC2EC1
        Validity
            Not Before: Oct  3 04:52:04 2023 GMT
            Not After : Oct  1 04:57:04 2024 GMT
        Subject: CN=5906C7DAD9046F6AACA552CD48D07E906D22AAFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:64:fd:84:de:95:16:1d:91:94:31:ea:0d:8e:
                    16:13:f5:f6:3b:70:d0:b3:27:e7:f6:03:bb:47:3f:
                    1e:ed:4a:33:e1:a3:79:fe:b6:50:0c:2f:6a:15:d0:
                    b6:53:e1:f8:17:a1:11:52:6b:2b:2b:a5:e6:a8:73:
                    11:92:da:e6:e9:a0:7a:fc:78:92:6e:e0:38:d1:c2:
                    86:e1:57:ed:c4:eb:08:e8:78:00:cd:b2:0d:06:a7:
                    a4:d9:09:fd:6c:a6:38:bf:fc:95:71:db:fd:86:8d:
                    62:05:06:17:83:67:64:ec:72:8e:58:c9:d5:51:4b:
                    f5:f5:2e:e5:46:82:b3:9e:54:31:c5:23:44:ea:4a:
                    2b:ec:24:f4:7c:80:84:45:8f:37:87:98:32:41:02:
                    2d:84:20:a9:2d:86:42:2e:25:c0:64:84:d6:10:2c:
                    13:53:93:23:09:17:d1:a8:4b:fb:58:fe:3b:63:e3:
                    09:5f:a8:32:03:f1:05:b7:55:82:6b:6f:74:bf:71:
                    7c:97:db:9e:b9:30:de:34:df:11:88:a4:66:31:e1:
                    c4:09:0c:b2:09:cf:cb:94:af:cd:ef:42:f2:58:e9:
                    eb:7d:a5:ec:7b:22:f6:b1:e7:2f:64:11:3f:8b:4a:
                    b6:38:73:4a:51:4c:30:af:a8:6c:c8:f9:81:29:d9:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:06:C7:DA:D9:04:6F:6A:AC:A5:52:CD:48:D0:7E:90:6D:22:AA:FA
            X509v3 Authority Key Identifier:
                keyid:1F:9A:49:C2:48:A6:96:B5:16:7D:AB:1D:9B:36:79:52:98:FC:2E:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F9A49C248A696B5167DAB1D9B36795298FC2EC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/1/3137392e3132352e31362e302f32322d3332203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:65:e6:49:35:7d:92:fb:fe:81:b5:c7:61:df:2d:c4:d7:6a:
         a0:53:88:76:ad:c1:80:d4:b1:06:a6:a5:a9:ff:c8:e6:59:dd:
         72:ab:ee:39:b0:11:60:eb:3d:2d:97:c8:d8:7a:28:d3:cf:29:
         85:91:d8:0e:09:d6:15:95:86:dc:de:9f:bd:f2:8c:08:41:08:
         2d:25:d9:5e:11:a8:9d:30:da:f7:14:c7:c4:9b:78:65:5f:44:
         d9:4d:e9:d7:06:01:2c:e3:8f:af:7b:0f:59:e4:bb:81:13:ae:
         b0:34:4e:0d:17:41:aa:f7:d6:80:28:bd:d3:8b:75:b1:ba:44:
         68:82:89:3d:d6:25:3b:60:78:e5:4c:f9:56:d8:77:5a:d4:08:
         39:22:91:b4:1e:ba:08:dc:8c:00:3b:58:f3:46:4d:13:88:e0:
         a1:3f:36:1d:27:24:d3:25:b0:91:68:86:80:5a:8d:d3:f3:fe:
         55:d0:92:b4:60:83:fc:3d:97:d4:0a:fe:47:d9:55:6e:1c:ce:
         3a:92:58:9a:4a:68:75:f2:87:e0:67:f6:62:fc:95:74:4d:7c:
         89:56:01:cd:0e:6c:30:98:b4:03:98:9b:b0:4e:bb:79:30:71:
         75:0b:a8:1c:8f:73:1d:70:2f:98:d2:ba:ff:02:37:89:2f:e9:
         41:85:38:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org