Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3138362e302f32342d3234203d3e20323633323731.roa
File:                     3137392e3130382e3138362e302f32342d3234203d3e20323633323731.roa (raw, json)
Hash identifier:          uUgnVvlFM9zprCikfZfKjUnd7usTn8sBaU5wcvLVw/A=
Subject key identifier:   6A:4A:2B:79:4A:67:15:2B:DF:D0:73:5A:08:58:D0:44:E5:CA:3A:33
Certificate issuer:       /CN=0CDD5188965FFFE43C008A41D0033C4E7DB447F1
Certificate serial:       085E0393461BF7EB03AC52975721F27A57F4CAA6
Authority key identifier: 0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3138362e302f32342d3234203d3e20323633323731.roa
Signing time:             Fri 24 Mar 2023 01:38:02 +0000
ROA not before:           Fri 24 Mar 2023 01:33:02 +0000
ROA not after:            Fri 22 Mar 2024 01:38:02 +0000
asID:                     263271
IP address blocks:        179.108.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5e:03:93:46:1b:f7:eb:03:ac:52:97:57:21:f2:7a:57:f4:ca:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDD5188965FFFE43C008A41D0033C4E7DB447F1
        Validity
            Not Before: Mar 24 01:33:02 2023 GMT
            Not After : Mar 22 01:38:02 2024 GMT
        Subject: CN=6A4A2B794A67152BDFD0735A0858D044E5CA3A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:84:79:53:6d:20:a9:70:b5:ba:f4:ce:94:
                    1a:b6:c9:c4:95:1f:aa:ac:c3:36:60:ed:1f:47:a3:
                    a8:71:39:98:2f:e4:6f:5b:ea:0b:3f:d8:2a:de:06:
                    2f:d3:4a:83:3e:6b:6b:59:79:2b:bf:c7:53:0a:77:
                    e5:60:fe:38:81:a7:a7:83:a7:bb:e7:d1:4f:ac:00:
                    cd:1e:87:c1:43:21:f3:7b:0d:ca:6a:8c:28:54:ff:
                    ea:0c:79:7e:d8:40:1f:e8:1f:40:1b:2a:ec:fe:36:
                    bc:9d:61:e8:ff:7f:fe:7d:d3:4d:25:37:8e:db:9b:
                    1e:ed:a0:81:01:85:7f:f0:eb:fe:b3:66:54:a3:2f:
                    d6:95:44:bc:4d:17:b0:07:9d:13:80:7a:3d:58:dc:
                    25:03:69:9d:7d:0e:35:fc:46:97:8b:87:1b:70:07:
                    aa:cb:3e:9c:6d:e1:f9:99:b5:40:54:bd:fd:13:43:
                    0d:95:2d:08:e0:bb:3f:9c:63:68:5b:c9:85:90:b1:
                    26:c9:93:4b:ac:4e:eb:d1:68:0f:04:96:f5:50:5d:
                    29:38:50:0b:d8:11:8f:fe:ce:1e:8a:44:35:c2:b2:
                    af:ea:2b:4a:ec:f8:5b:81:0e:bb:6c:93:8b:84:e6:
                    98:47:3c:44:a4:8f:46:8f:3c:54:97:43:f5:84:62:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4A:2B:79:4A:67:15:2B:DF:D0:73:5A:08:58:D0:44:E5:CA:3A:33
            X509v3 Authority Key Identifier:
                keyid:0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3138362e302f32342d3234203d3e20323633323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:b7:5a:f2:bd:3d:2f:39:2b:b6:1a:00:4d:ec:d8:a7:cf:d4:
         c4:47:ab:9a:2d:d5:16:3f:7b:1e:25:44:42:53:39:e2:83:a4:
         66:ad:0c:57:d8:b7:9c:f5:0a:0b:dc:90:a2:31:21:84:b4:ff:
         b4:73:70:c5:43:f5:7c:4b:e3:e5:e5:37:08:d2:d9:c8:23:b6:
         27:c7:ab:18:0a:69:52:48:4e:af:0a:5a:a2:52:5b:62:40:61:
         8b:c0:66:fb:7c:cf:c7:5a:a8:22:7d:f2:f2:5f:cc:8c:61:14:
         8b:3d:7f:66:10:19:22:14:fb:ed:29:96:bd:8c:5c:d7:68:6b:
         41:58:f3:15:ae:7f:58:04:cf:45:07:86:0a:3f:ca:b4:02:30:
         20:30:ae:b6:b5:16:24:f8:ac:e2:2a:62:e8:bf:96:ba:78:c3:
         1b:49:bc:f7:bd:aa:6c:be:0d:71:ce:df:01:36:a7:4f:df:60:
         28:29:ab:b9:21:e9:32:4d:db:88:e6:04:1e:7b:ec:4e:6f:41:
         2b:35:80:9c:de:fe:b5:b6:72:8f:83:9d:fd:e3:b3:c7:c7:ee:
         73:f1:66:b1:67:66:32:a1:49:3c:68:9b:56:db:09:9f:f9:c9:
         5f:83:fa:b4:58:b4:0e:a6:ac:34:ad:fc:b1:af:cf:04:dd:6b:
         ee:79:76:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org