Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3139312e302f32342d3234203d3e20323633323731.roa
File:                     3137392e3130382e3139312e302f32342d3234203d3e20323633323731.roa (raw, json)
Hash identifier:          b0X6sGtmy5HXzv/VG9SEJmlF5R+t0d42AeK56Mlqflc=
Subject key identifier:   1C:73:1D:0D:E5:32:A4:EA:6E:14:93:D1:53:9E:83:8C:0F:64:B9:42
Certificate issuer:       /CN=0CDD5188965FFFE43C008A41D0033C4E7DB447F1
Certificate serial:       56F22A91A96DC58DB1D2C7B51071745B2CF07A9E
Authority key identifier: 0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3139312e302f32342d3234203d3e20323633323731.roa
Signing time:             Fri 24 Mar 2023 01:38:22 +0000
ROA not before:           Fri 24 Mar 2023 01:33:22 +0000
ROA not after:            Fri 22 Mar 2024 01:38:22 +0000
asID:                     263271
IP address blocks:        179.108.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f2:2a:91:a9:6d:c5:8d:b1:d2:c7:b5:10:71:74:5b:2c:f0:7a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDD5188965FFFE43C008A41D0033C4E7DB447F1
        Validity
            Not Before: Mar 24 01:33:22 2023 GMT
            Not After : Mar 22 01:38:22 2024 GMT
        Subject: CN=1C731D0DE532A4EA6E1493D1539E838C0F64B942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:95:6e:e8:a1:fc:a7:06:35:45:22:79:ea:
                    81:64:a7:b5:14:58:8a:c8:11:54:2b:24:54:22:61:
                    01:84:c0:2d:78:bd:09:c8:d6:80:95:62:67:ad:3c:
                    c6:38:07:30:7a:d3:75:56:2c:5c:77:00:f2:ae:49:
                    81:35:b5:3b:e2:e2:c8:b8:67:3b:27:6c:d9:28:28:
                    8f:6f:be:ab:1a:7f:f3:ab:a5:7c:88:57:3c:f2:39:
                    d7:70:45:3b:3e:d7:58:85:ce:aa:bf:e6:49:14:42:
                    65:40:a3:5a:fe:c9:c3:b2:69:4b:b5:33:9a:f8:89:
                    59:8a:ab:f4:b8:7c:da:07:db:10:32:36:a6:5a:08:
                    70:a2:76:31:93:67:a9:82:e0:c2:c7:0b:27:70:bd:
                    06:8d:bf:c0:3c:eb:49:25:2e:e4:e6:53:d7:11:2b:
                    e3:1c:56:a5:ed:ef:6a:27:10:2f:5d:98:bb:09:3e:
                    6e:07:94:5c:ca:f3:47:7f:ad:c3:1a:1e:a1:b4:35:
                    eb:23:d7:95:d2:9e:7b:33:10:7b:0b:7f:7e:64:a0:
                    ad:9f:82:21:33:b0:7e:6d:e5:52:cb:43:36:9f:8f:
                    4b:c7:fe:4d:17:1e:02:8b:82:e5:4a:34:c4:d3:50:
                    9c:ee:f3:ad:1d:8f:fe:89:dd:3d:a1:19:90:39:fe:
                    62:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:73:1D:0D:E5:32:A4:EA:6E:14:93:D1:53:9E:83:8C:0F:64:B9:42
            X509v3 Authority Key Identifier:
                keyid:0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/3137392e3130382e3139312e302f32342d3234203d3e20323633323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f8:20:03:6a:1e:48:c6:f0:91:38:65:9c:53:3c:9a:fc:64:
         7d:0a:89:68:30:f9:1d:69:67:2e:cd:5a:29:06:16:18:f4:48:
         85:28:9f:b1:80:e4:b8:98:9d:16:3a:f2:8a:ab:59:29:53:11:
         3c:b9:c2:0e:f2:c2:74:36:3a:1a:7a:83:21:83:ad:a4:0b:f0:
         89:5b:02:24:08:1e:cc:51:fd:34:e1:cb:8f:dd:19:f7:fe:a4:
         fe:ef:49:47:30:47:96:87:07:a0:e5:67:6f:9a:c9:76:33:2e:
         1d:f2:26:16:95:3b:f8:f1:3a:3b:ff:95:35:e0:c0:c2:41:23:
         93:74:20:30:22:73:9f:be:b4:82:65:e4:d7:f3:91:75:fd:58:
         b6:21:9a:72:62:43:2f:db:ba:6f:c8:37:df:0d:1a:7d:3b:07:
         88:e8:33:d0:fd:36:2e:92:63:62:49:bb:33:59:d1:d2:23:e6:
         8c:7d:c6:98:5b:bf:02:ad:c7:bc:7f:b2:89:db:50:ec:2b:fd:
         68:45:da:6e:f2:94:2b:a3:46:57:95:ce:da:4d:c6:55:fa:e4:
         8a:2f:25:c1:1c:9d:90:af:a8:d1:47:7e:f1:5b:f4:41:0f:c3:
         fc:31:f6:f3:41:cf:2e:a0:3c:37:c0:50:aa:37:8d:c5:89:09:
         67:ab:36:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org