Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/3137392e36332e3131322e302f32322d3234203d3e20323731353338.roa
File:                     3137392e36332e3131322e302f32322d3234203d3e20323731353338.roa (raw, json)
Hash identifier:          k8UB5sUuvm7/ymt+5p7hRzq4CmH48eyMsToSoIlWcz0=
Subject key identifier:   96:0C:FA:9D:06:C8:CD:5D:4F:B3:A2:99:0E:70:B1:59:EB:29:5B:C6
Certificate issuer:       /CN=A646D371FC2C8E729B4DF2ED3A1475720567B384
Certificate serial:       12B55CD2AFB3F5594FAFF65032632DE30472964C
Authority key identifier: A6:46:D3:71:FC:2C:8E:72:9B:4D:F2:ED:3A:14:75:72:05:67:B3:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A646D371FC2C8E729B4DF2ED3A1475720567B384.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/3137392e36332e3131322e302f32322d3234203d3e20323731353338.roa
Signing time:             Mon 22 May 2023 14:00:00 +0000
ROA not before:           Mon 22 May 2023 13:55:00 +0000
ROA not after:            Wed 22 May 2024 14:00:00 +0000
asID:                     271538
IP address blocks:        179.63.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b5:5c:d2:af:b3:f5:59:4f:af:f6:50:32:63:2d:e3:04:72:96:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A646D371FC2C8E729B4DF2ED3A1475720567B384
        Validity
            Not Before: May 22 13:55:00 2023 GMT
            Not After : May 22 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:27:ba:8a:f3:18:6c:c4:70:dd:74:a4:02:41:
                    77:48:a4:a1:ab:e7:aa:c8:e2:56:50:27:82:e2:94:
                    55:07:5d:7c:63:d1:7f:9a:1f:87:02:b0:2a:fd:da:
                    05:03:1b:c7:5e:51:56:96:a4:1b:c1:c2:e2:cd:ac:
                    3e:87:a2:18:00:3e:df:e8:b8:18:61:1c:44:92:73:
                    e5:fa:01:93:81:23:89:70:18:0f:4a:6a:51:60:5d:
                    8e:d6:56:45:2f:ec:75:d3:36:4e:d4:af:79:29:16:
                    23:26:27:d0:bb:98:fb:75:05:e4:dc:06:22:8f:ba:
                    24:b6:90:40:c1:f9:b2:0b:e4:67:a5:74:25:91:a4:
                    83:03:bf:40:22:12:f6:b5:ed:8c:39:45:d5:76:09:
                    a0:95:e1:74:52:39:ae:af:7e:c1:e3:3f:50:31:b3:
                    cc:92:17:4e:a8:36:e7:33:52:d4:8d:1f:db:cd:3f:
                    20:24:b6:59:3b:66:9c:89:54:8b:8d:fb:38:7f:36:
                    0a:ed:d4:09:3a:6d:84:fe:cd:b7:7a:6b:2f:2e:64:
                    8f:1c:6f:b9:ae:a2:3a:4e:12:bf:20:7c:17:69:15:
                    a3:53:cd:4e:e8:54:e5:0d:54:c5:6a:e6:6b:38:a7:
                    21:33:9a:75:4d:ec:b7:aa:1b:29:81:e9:40:6d:77:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0C:FA:9D:06:C8:CD:5D:4F:B3:A2:99:0E:70:B1:59:EB:29:5B:C6
            X509v3 Authority Key Identifier:
                keyid:A6:46:D3:71:FC:2C:8E:72:9B:4D:F2:ED:3A:14:75:72:05:67:B3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/A646D371FC2C8E729B4DF2ED3A1475720567B384.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A646D371FC2C8E729B4DF2ED3A1475720567B384.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/0/3137392e36332e3131322e302f32322d3234203d3e20323731353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:3a:e6:05:5a:93:45:86:76:82:df:42:b1:ce:18:ef:eb:4d:
         b0:e3:30:2f:55:e4:8c:37:c3:67:cd:4c:8c:98:67:3f:da:2f:
         ed:3c:20:d9:78:c8:0c:14:bd:1a:1c:3c:99:d8:c5:37:17:85:
         a9:75:ce:0e:74:ed:e1:ca:2c:eb:61:0d:ce:e3:b8:5a:92:88:
         15:1a:ef:1b:6d:ed:34:27:cf:89:e1:fd:94:fd:90:09:ad:dc:
         2c:25:46:0f:34:e8:bb:61:fc:80:32:77:0a:38:54:89:4d:33:
         7d:b8:a1:0b:9b:d9:cf:58:86:60:0f:98:0b:53:33:15:9b:9e:
         89:2c:78:7f:77:98:9d:eb:84:1b:07:86:39:7a:36:1d:24:b0:
         10:dc:86:87:e2:3b:ca:1e:f0:4d:e7:94:62:9b:f6:74:54:9c:
         f5:c3:86:87:bc:9f:7d:e4:14:8c:69:d1:33:58:0e:e9:ce:67:
         0c:3b:08:a4:83:ea:98:b1:26:58:c1:f6:91:69:f6:3a:df:d3:
         30:56:71:35:c5:9c:78:e2:8f:90:5a:4d:e8:6b:04:7c:d0:df:
         83:17:c2:05:37:4a:27:8e:1d:95:64:07:0e:03:3a:7d:98:a2:
         7f:64:38:7e:51:de:48:b0:f8:17:2a:fa:0e:1d:45:3f:05:a9:
         44:f5:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org