Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3137392e302e33322e302f32322d3234203d3e20323632333030.roa
File:                     3137392e302e33322e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          FjJPgwTxA5h4Yet/7X0T/rlTrcgiKaObcUgLALTtik4=
Subject key identifier:   F2:CF:FB:9A:03:E7:3F:88:70:B7:E5:18:0A:37:29:29:41:E6:B2:E1
Certificate issuer:       /CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
Certificate serial:       3199CA30B6D84E00805FB40E70650DF2F569E7C4
Authority key identifier: 0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3137392e302e33322e302f32322d3234203d3e20323632333030.roa
Signing time:             Thu 11 Jan 2024 14:43:56 +0000
ROA not before:           Thu 11 Jan 2024 14:38:56 +0000
ROA not after:            Thu 09 Jan 2025 14:43:56 +0000
asID:                     262300
IP address blocks:        179.0.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:99:ca:30:b6:d8:4e:00:80:5f:b4:0e:70:65:0d:f2:f5:69:e7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
        Validity
            Not Before: Jan 11 14:38:56 2024 GMT
            Not After : Jan  9 14:43:56 2025 GMT
        Subject: CN=F2CFFB9A03E73F8870B7E5180A37292941E6B2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:d4:97:50:cc:64:2e:e1:02:d8:6d:f4:70:
                    00:41:fa:34:2b:a7:75:e4:f1:f3:3d:f9:64:d8:f5:
                    42:99:8e:63:58:5b:9b:da:9e:40:d5:83:cb:d1:e8:
                    11:a4:3b:8a:0a:05:fd:ea:cd:e1:cd:44:2f:59:ca:
                    f9:a3:4a:f9:45:7d:d5:b2:c0:50:98:a8:54:90:2e:
                    f8:e3:7e:58:60:8b:d9:73:61:55:7e:a4:bf:12:1d:
                    f7:a8:bf:14:d9:71:fe:59:b3:2f:d6:b8:f4:ce:17:
                    ef:01:d8:74:81:81:f5:93:11:65:9a:03:5d:47:16:
                    62:33:69:78:68:61:b4:36:e5:55:52:9a:21:d3:c4:
                    84:cc:d7:05:0b:33:fd:18:97:80:7f:e7:aa:ee:1c:
                    81:65:0f:24:68:cc:bb:0b:c9:d3:1b:60:f8:79:21:
                    d4:20:5a:46:5b:01:46:f0:d7:07:e4:f3:cd:b7:5c:
                    31:f8:e0:71:58:b5:fd:56:0e:64:52:2a:2d:83:26:
                    d6:89:4a:70:8e:ba:ce:50:20:72:d6:64:b8:4a:9d:
                    e8:0a:e3:59:98:5c:a7:e6:12:b2:d6:e9:e5:ba:5a:
                    63:83:f8:ad:a3:75:79:c7:6c:73:cc:8d:75:02:24:
                    c8:c3:57:a6:9b:c7:22:6b:ee:9d:17:b7:ac:18:47:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CF:FB:9A:03:E7:3F:88:70:B7:E5:18:0A:37:29:29:41:E6:B2:E1
            X509v3 Authority Key Identifier:
                keyid:0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/3137392e302e33322e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:e6:77:7e:01:3a:5d:49:a0:1d:5b:c2:e3:75:8f:63:fb:41:
         dc:d8:a2:ff:2e:f0:f8:05:94:13:ba:fe:51:d4:02:94:f5:9f:
         a3:3d:3d:d0:d0:c3:93:e2:8e:4a:b0:c0:f5:5c:69:bd:7c:15:
         25:2d:04:58:f7:52:e9:f5:ef:ae:39:4a:84:90:c7:9c:98:6a:
         b0:21:25:8e:87:f0:dc:f6:09:a3:a3:7b:64:01:08:c4:7e:85:
         1a:1c:d3:db:cf:f6:c6:7d:f2:fb:36:f2:17:49:36:18:89:62:
         54:42:7d:f0:7c:6b:10:c7:e7:f9:bd:b1:41:57:95:8f:06:87:
         f8:f6:5b:77:e2:e8:65:88:a5:e4:63:0f:36:15:5f:4b:cd:70:
         4b:37:5f:8c:dd:dc:0e:32:33:4a:ab:08:e1:60:e3:ae:67:2f:
         f9:9c:53:03:3c:e4:02:50:88:8e:ef:89:67:20:69:37:6e:73:
         c3:6f:9d:6b:e3:23:65:1e:f5:27:3d:44:5d:09:ae:09:71:9a:
         8f:3e:25:d4:47:4e:fd:d8:0f:fa:c7:36:2e:b7:51:e3:4d:7e:
         ab:b2:69:09:76:bc:de:8d:cc:4c:e4:13:5c:75:8e:05:aa:03:
         19:16:c7:3a:40:1b:86:ad:99:d6:db:5d:e9:6d:22:c9:dd:d6:
         86:a9:6b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org