Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3138392e302f32342d3234203d3e20323633323731.roa
File:                     3137392e3130382e3138392e302f32342d3234203d3e20323633323731.roa (raw, json)
Hash identifier:          WF7g8cw60GHs4dmTbTdD+Dp4Dmu4mmXWbq9GVESvfak=
Subject key identifier:   12:51:29:17:2C:8C:0F:BD:5A:0E:47:47:AF:66:27:09:A5:7A:F5:FA
Certificate issuer:       /CN=0CDD5188965FFFE43C008A41D0033C4E7DB447F1
Certificate serial:       5249A27CB39F60C013910B2397AC9CCB7E109753
Authority key identifier: 0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3138392e302f32342d3234203d3e20323633323731.roa
Signing time:             Fri 24 Mar 2023 01:38:14 +0000
ROA not before:           Fri 24 Mar 2023 01:33:14 +0000
ROA not after:            Fri 22 Mar 2024 01:38:14 +0000
asID:                     263271
IP address blocks:        179.108.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:49:a2:7c:b3:9f:60:c0:13:91:0b:23:97:ac:9c:cb:7e:10:97:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDD5188965FFFE43C008A41D0033C4E7DB447F1
        Validity
            Not Before: Mar 24 01:33:14 2023 GMT
            Not After : Mar 22 01:38:14 2024 GMT
        Subject: CN=125129172C8C0FBD5A0E4747AF662709A57AF5FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:59:98:54:14:01:b4:c3:13:8a:48:e7:fe:
                    61:3f:78:c5:44:73:d2:c9:2d:90:83:63:fc:a5:97:
                    11:26:54:a8:10:fe:90:53:dd:6e:b2:87:2a:3c:7d:
                    8c:bb:3c:c5:1b:54:3d:9e:fd:f1:7e:b0:4c:36:88:
                    3d:da:ad:d4:2d:5a:6d:c5:a7:b7:80:16:65:6b:50:
                    1b:bd:94:eb:32:81:e0:80:c2:3d:01:24:9e:0d:80:
                    d1:9a:08:8d:be:7b:b2:c4:f0:c9:66:87:05:ef:d8:
                    f2:c0:2b:5a:d0:04:85:bc:a2:72:e3:62:53:ef:57:
                    96:bb:5d:8f:48:a7:d2:6a:31:5b:eb:43:ec:fd:81:
                    9b:9d:d6:c7:73:85:41:7a:91:7a:0b:14:20:1d:92:
                    2d:59:d5:bc:d4:70:df:fe:3a:07:56:b5:a7:24:12:
                    8a:cf:bb:70:bd:b1:82:51:d7:16:94:49:85:29:ee:
                    e9:a6:fb:b7:48:ce:a9:dd:ce:e5:de:ba:55:00:b3:
                    39:3a:0b:ab:3e:c4:ea:78:b8:d3:eb:fa:2b:92:5d:
                    e9:2c:84:ce:48:ae:14:02:61:15:06:3a:c8:bc:27:
                    48:48:6e:1d:3f:bf:fd:0e:90:ae:35:9f:5b:e9:7d:
                    a4:d4:00:bc:98:c9:cf:93:26:7b:55:ba:4e:d1:8c:
                    9b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:51:29:17:2C:8C:0F:BD:5A:0E:47:47:AF:66:27:09:A5:7A:F5:FA
            X509v3 Authority Key Identifier:
                keyid:0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3138392e302f32342d3234203d3e20323633323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:24:bb:c4:f3:a6:d4:49:fc:4e:65:4d:8b:b4:1e:b2:4b:88:
         1e:54:58:7f:5c:65:7a:fd:1e:02:ec:9d:f7:d1:bc:c8:2b:5b:
         e6:36:d2:37:08:e4:90:f3:5b:24:f9:9e:bc:89:c0:c6:f2:90:
         38:4a:8b:e4:3b:8f:50:eb:a1:89:ef:93:b1:fc:3b:04:d2:dd:
         99:24:e2:1c:cd:51:96:bc:ad:14:be:69:ce:8d:5b:8d:93:fd:
         6c:e5:ab:42:fb:a8:3d:82:3b:4d:c8:83:4f:7d:9b:dd:ce:3f:
         ab:12:7d:9d:18:53:af:64:78:de:22:75:94:82:a7:cd:9d:38:
         1c:da:56:c9:cf:60:68:ac:2f:d8:6c:a7:64:23:42:93:12:18:
         7a:fb:2e:f5:98:19:cd:08:1e:0a:81:c5:61:38:94:d3:38:69:
         33:ab:4d:4a:3a:1b:d8:67:6a:9f:9c:c8:45:65:cb:8e:fc:62:
         39:19:e8:9e:89:d2:e2:a0:5b:11:83:9d:8e:cb:bd:a1:cb:36:
         93:a4:b8:20:4b:ff:38:32:9a:c1:53:68:8f:23:ea:b4:0b:eb:
         24:04:e6:59:c1:7f:e7:fe:14:8b:43:a7:0c:8b:61:c2:cb:88:
         8f:bd:14:2c:b5:a6:a7:12:33:6f:9e:15:c9:83:56:47:c9:80:
         a7:20:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org