Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa
File:                     3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa (raw, json)
Hash identifier:          UUEvdwq7cWFXTp1jZDzONqKjHacaxg0z+AA2dMXY0aU=
Subject key identifier:   DE:A1:F2:22:C2:58:68:40:E8:74:41:87:B4:DA:FE:E6:84:EB:0C:38
Certificate issuer:       /CN=CE68A6D76A55B9D8764712CA4B612489BCF20583
Certificate serial:       31C337047AE6923AC81EFC9C06DAF2AA61EA4254
Authority key identifier: CE:68:A6:D7:6A:55:B9:D8:76:47:12:CA:4B:61:24:89:BC:F2:05:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE68A6D76A55B9D8764712CA4B612489BCF20583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa
Signing time:             Tue 06 Jun 2023 16:03:18 +0000
ROA not before:           Tue 06 Jun 2023 15:58:18 +0000
ROA not after:            Tue 04 Jun 2024 16:03:18 +0000
asID:                     271192
IP address blocks:        179.42.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c3:37:04:7a:e6:92:3a:c8:1e:fc:9c:06:da:f2:aa:61:ea:42:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE68A6D76A55B9D8764712CA4B612489BCF20583
        Validity
            Not Before: Jun  6 15:58:18 2023 GMT
            Not After : Jun  4 16:03:18 2024 GMT
        Subject: CN=DEA1F222C2586840E8744187B4DAFEE684EB0C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:c7:e4:37:46:a1:07:64:94:19:5b:3c:4e:
                    9c:89:a6:a6:82:02:2b:14:e3:fb:70:a8:ea:a7:bb:
                    6b:de:0d:fb:62:ce:dc:9e:91:85:7d:b7:8d:76:e7:
                    e5:e1:ea:59:58:9a:7c:81:84:d2:ed:a9:70:e5:18:
                    b2:c3:33:d2:2e:c0:57:92:80:ec:24:e8:76:8d:fc:
                    5c:b4:fb:5c:ec:29:62:f2:28:18:3a:ca:f5:85:f3:
                    d8:cd:f4:dd:d9:18:b3:4e:1f:a0:63:b7:2b:be:37:
                    d4:e3:21:87:8d:47:6b:df:8f:31:d9:d1:58:96:56:
                    e4:d3:95:5c:95:80:1a:f5:f8:1f:28:b5:a0:30:c4:
                    3b:95:fc:7b:99:bc:63:90:dc:db:29:80:98:dd:db:
                    dd:fe:12:2b:88:7a:19:38:d7:13:15:9d:a7:8f:4d:
                    3a:92:6a:8f:16:65:bf:f1:c0:9c:23:83:c1:cb:76:
                    93:ce:ca:16:f6:3d:5e:eb:df:dc:8a:22:9a:fd:c2:
                    39:d3:16:cd:78:69:f6:3c:e9:61:6f:15:2e:fa:88:
                    2e:7a:97:a0:a3:a0:3e:63:35:fb:c0:a2:3e:bb:3f:
                    66:c3:0a:c0:a3:ce:2b:2d:dd:d8:22:15:e0:29:fa:
                    10:ad:98:72:12:b0:89:82:93:c0:81:b9:bf:0f:f9:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A1:F2:22:C2:58:68:40:E8:74:41:87:B4:DA:FE:E6:84:EB:0C:38
            X509v3 Authority Key Identifier:
                keyid:CE:68:A6:D7:6A:55:B9:D8:76:47:12:CA:4B:61:24:89:BC:F2:05:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/CE68A6D76A55B9D8764712CA4B612489BCF20583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE68A6D76A55B9D8764712CA4B612489BCF20583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:6c:91:5e:93:ea:10:c0:85:ae:57:ee:56:75:21:ef:e7:
         0c:95:a6:52:06:8b:24:ed:38:84:83:15:96:4f:f3:f6:aa:02:
         29:b8:5b:2d:77:51:5b:2c:76:dd:9e:91:9b:64:39:28:b3:6e:
         fe:69:70:15:d0:8b:56:f3:11:13:4c:72:cf:6b:c9:02:39:55:
         b0:ab:5d:ad:05:31:e2:25:39:09:ba:4e:b0:6d:43:19:25:41:
         9e:9c:24:7e:cf:40:7a:5e:e3:cb:5b:03:80:f7:f2:2c:ea:97:
         63:c4:bc:c3:03:5d:a6:23:5a:1e:36:30:16:36:e6:7e:a1:4a:
         a4:25:ba:76:a5:9a:21:47:69:c0:c9:b9:b0:0d:c1:ad:c1:aa:
         4b:e1:88:6e:3e:30:ad:fd:10:92:01:0b:47:7d:36:90:4a:bf:
         cc:d3:f0:54:13:3e:0e:bb:9d:ff:83:2f:48:57:67:e7:08:bd:
         4e:11:52:14:b5:31:d4:4f:41:d3:c3:d7:a8:a6:4c:a6:92:64:
         de:b4:cb:40:18:8b:c7:37:fc:5e:1c:a7:fb:25:9f:ce:52:d9:
         7e:e0:01:e7:6c:cb:8c:cd:ec:eb:68:d6:92:a1:3e:df:ea:f0:
         75:23:0f:56:de:3f:d6:0e:ac:3d:ad:3e:ef:64:ff:77:49:4f:
         b6:b2:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org