Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa
File:                     3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          ejrHjgsMOurzvyDHKMDfSTXEy0vI+hp2wHkG1lmenTo=
Subject key identifier:   89:A6:6D:E6:1E:36:1D:1A:8E:FD:8A:A9:E8:E6:58:84:A2:11:1E:4D
Certificate issuer:       /CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Certificate serial:       59B2FFD6C04F251CD31A6ACFCD4A960AA3D6055C
Authority key identifier: 42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa
Signing time:             Thu 30 Nov 2023 20:00:00 +0000
ROA not before:           Thu 30 Nov 2023 19:55:00 +0000
ROA not after:            Thu 28 Nov 2024 20:00:00 +0000
asID:                     262595
IP address blocks:        179.106.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b2:ff:d6:c0:4f:25:1c:d3:1a:6a:cf:cd:4a:96:0a:a3:d6:05:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
        Validity
            Not Before: Nov 30 19:55:00 2023 GMT
            Not After : Nov 28 20:00:00 2024 GMT
        Subject: CN=89A66DE61E361D1A8EFD8AA9E8E65884A2111E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:36:36:1c:cd:67:c7:13:a3:b6:d3:4e:0b:
                    cb:f7:bc:6e:3f:cf:7c:a2:b7:2a:34:ed:be:74:1b:
                    f0:a4:03:20:c8:3e:49:15:7e:41:ff:7d:25:77:f5:
                    41:70:57:b5:d0:b3:ba:45:5d:e1:fe:28:76:31:f9:
                    61:aa:38:92:4f:66:1b:0f:a5:6d:de:01:80:03:f3:
                    33:88:1d:94:8d:b0:b9:8a:0a:cd:4f:58:01:3f:3d:
                    03:3a:3e:79:2a:0a:ef:d4:3b:c6:6b:e8:e2:ef:c5:
                    91:d6:ff:de:39:0e:4c:70:e3:4d:c8:fe:ab:fa:1f:
                    85:05:fc:d4:e9:8f:dd:7f:20:96:35:08:fc:f6:b3:
                    70:64:b9:e4:ec:d8:09:70:93:6b:af:ef:f8:46:f0:
                    f9:7c:0a:54:50:9e:41:17:34:87:cd:77:20:19:57:
                    98:d4:20:2e:3f:39:e0:a9:c4:6d:92:c1:3d:89:31:
                    fc:94:af:bc:46:5e:ae:64:3e:77:ff:b3:79:20:30:
                    9e:be:ba:4f:e0:e1:f6:8b:b2:a4:68:53:cb:bc:51:
                    a6:42:30:b1:3e:1d:2a:59:18:b9:b7:1f:07:c4:d9:
                    a0:4e:67:16:6e:98:01:00:22:69:50:1c:bf:a0:f8:
                    78:0e:30:9e:4e:66:e0:f1:43:1d:eb:44:47:e7:b9:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A6:6D:E6:1E:36:1D:1A:8E:FD:8A:A9:E8:E6:58:84:A2:11:1E:4D
            X509v3 Authority Key Identifier:
                keyid:42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/3137392e3130362e31362e302f32302d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:1f:b0:06:42:ac:c0:97:57:d9:a6:82:37:94:43:1e:09:3f:
         8f:e6:b9:13:84:61:77:58:92:31:f7:c6:f6:0d:45:4c:bd:35:
         c9:24:d9:0d:6f:72:a1:0a:1e:e8:03:68:cb:85:6d:fc:89:7b:
         09:a4:d3:c0:af:46:92:6c:dc:38:8e:44:78:fa:64:48:bb:ed:
         87:4c:b2:e8:f3:d2:f5:d7:14:ff:8b:04:a9:e5:b1:1b:81:15:
         4b:6f:63:3e:53:69:2a:c9:91:b6:8b:e8:a8:c4:a8:df:7a:ab:
         1a:3b:33:1d:03:76:fb:95:40:8a:f9:9c:27:20:64:0c:3a:60:
         e6:57:10:67:fe:83:4c:50:5d:8a:b2:c8:bf:16:97:4a:99:31:
         0f:4f:1d:2b:30:be:34:01:b6:73:eb:fb:b7:a0:94:56:e9:d5:
         9d:73:48:50:00:68:4f:4c:d2:3b:68:5d:48:73:fc:7b:a8:70:
         40:c2:04:d6:6f:f8:16:7b:c8:ac:4f:85:23:19:5f:cc:a1:4b:
         c8:03:0b:c6:b2:91:ee:15:40:a7:98:56:7f:52:dc:62:63:dc:
         8e:dd:de:2a:05:68:b5:26:2c:c8:b8:24:05:2d:73:d2:d7:de:
         aa:7e:5d:41:18:13:ea:85:eb:43:97:8a:04:29:bf:18:38:83:
         70:77:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org