Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3231382e302f32332d3233203d3e20323638303138.roa
File:                     3137392e39362e3231382e302f32332d3233203d3e20323638303138.roa (raw, json)
Hash identifier:          d9O48c34YlnnmhYGcankEbFq5VyuXmg6E1chF3F1jko=
Subject key identifier:   ED:64:F7:D8:FC:48:5C:3A:4F:54:5A:AF:5A:5A:BC:74:FB:03:27:80
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       1225928652D41364C994FBC6F352328A51AC2A5E
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3231382e302f32332d3233203d3e20323638303138.roa
Signing time:             Wed 20 Sep 2023 13:43:40 +0000
ROA not before:           Wed 20 Sep 2023 13:38:40 +0000
ROA not after:            Wed 18 Sep 2024 13:43:40 +0000
asID:                     268018
IP address blocks:        179.96.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:25:92:86:52:d4:13:64:c9:94:fb:c6:f3:52:32:8a:51:ac:2a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Sep 20 13:38:40 2023 GMT
            Not After : Sep 18 13:43:40 2024 GMT
        Subject: CN=ED64F7D8FC485C3A4F545AAF5A5ABC74FB032780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:3a:f0:cb:4d:3b:54:c5:c7:a2:10:50:8f:
                    24:40:59:ff:cc:ff:9e:30:4f:db:23:2e:e9:91:73:
                    b3:41:56:41:da:2a:56:5c:46:eb:cd:1b:fc:72:30:
                    a6:91:13:88:d5:51:d9:ff:26:98:9a:23:cd:12:a7:
                    18:d3:7d:f3:0a:06:71:b8:f3:40:89:d9:f9:9d:29:
                    74:92:2b:9c:3b:ae:4f:4a:82:54:a5:44:89:7d:f7:
                    eb:4b:c9:1d:a2:a0:51:69:22:d8:dc:73:45:1d:83:
                    44:a7:99:4f:2b:96:32:55:22:33:58:f8:ab:98:b8:
                    7d:a4:46:9a:1d:30:fb:41:b7:de:23:af:86:fd:36:
                    17:f9:f2:c4:8b:a9:f0:b7:ab:1e:7f:3a:1a:c1:f2:
                    6f:84:c0:b0:fd:d6:ea:9b:c6:56:29:25:26:86:7c:
                    f2:cd:ee:f2:84:3e:62:07:2a:36:d7:a6:4b:c5:49:
                    c6:11:a7:0d:54:0b:82:b2:51:e2:64:d6:e4:ac:c4:
                    1f:fb:88:61:83:03:9e:e8:0f:97:8a:69:67:21:21:
                    58:e5:94:7e:a2:d5:6a:6f:ec:24:58:79:b1:41:bf:
                    da:56:7d:7f:c9:0a:82:e6:b6:1b:e9:26:27:58:8a:
                    2d:33:74:55:10:48:5f:a2:5d:15:c6:dc:6a:3c:4c:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:64:F7:D8:FC:48:5C:3A:4F:54:5A:AF:5A:5A:BC:74:FB:03:27:80
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3231382e302f32332d3233203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:92:37:81:c2:eb:2b:eb:87:e6:0e:e4:d5:01:3f:2f:0e:d0:
         94:57:fa:8a:58:1c:c7:58:89:9d:1a:cc:1b:ca:57:9a:fb:c8:
         33:1c:5d:a2:a7:1f:67:a4:25:c3:59:1c:b2:66:18:16:56:6e:
         bc:ba:bf:f1:ec:f6:fc:84:ab:e7:f1:cc:10:b9:fd:38:42:dd:
         75:f3:a4:17:92:87:10:d5:0e:c5:77:05:05:4e:48:c6:df:49:
         14:b9:8b:1e:62:87:12:93:88:51:88:de:c0:73:b0:a8:1a:7c:
         d1:5b:dd:a9:c3:47:d6:d1:84:75:8e:14:1c:bc:2f:e5:43:f3:
         60:9c:82:58:4a:28:e6:c9:bf:58:20:d5:47:34:ee:4f:78:16:
         6e:f8:ec:7a:a0:b4:a6:e6:34:cf:bb:e4:08:33:32:87:a6:65:
         b0:7e:32:ab:b9:8a:4a:ab:45:1b:ba:f8:50:92:e7:3f:dc:cf:
         77:44:58:2a:9a:fa:3c:c6:f0:e6:a2:17:d6:20:a6:18:ab:c4:
         67:f1:ae:93:7d:4d:4c:2f:45:31:f8:fa:9e:ab:19:a7:8b:10:
         6c:a9:c2:7a:1c:39:a2:5c:b5:ea:41:45:00:42:f9:8d:fc:64:
         40:e4:75:d8:82:b4:03:d5:9c:9e:f6:a5:80:f4:20:e0:3b:cb:
         f4:96:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org