Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3137392e3132342e34382e302f32312d3231203d3e20323633313034.roa
File:                     3137392e3132342e34382e302f32312d3231203d3e20323633313034.roa (raw, json)
Hash identifier:          p/bq2zwvHx6KFuLtAQ06eDuw+gvo26pvEcLGYmO+4sU=
Subject key identifier:   F6:42:DE:41:9E:84:2E:22:C8:49:95:5F:6D:07:0A:58:93:5D:7F:E1
Certificate issuer:       /CN=B4C0FD9D5211263A3D5871F7AB677346D8044DE8
Certificate serial:       3148FA35650F258F27FFD87CF21189D11991CD3E
Authority key identifier: B4:C0:FD:9D:52:11:26:3A:3D:58:71:F7:AB:67:73:46:D8:04:4D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C0FD9D5211263A3D5871F7AB677346D8044DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3137392e3132342e34382e302f32312d3231203d3e20323633313034.roa
Signing time:             Sat 25 Mar 2023 19:45:50 +0000
ROA not before:           Sat 25 Mar 2023 19:40:50 +0000
ROA not after:            Sat 23 Mar 2024 19:45:50 +0000
asID:                     263104
IP address blocks:        179.124.48.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:48:fa:35:65:0f:25:8f:27:ff:d8:7c:f2:11:89:d1:19:91:cd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C0FD9D5211263A3D5871F7AB677346D8044DE8
        Validity
            Not Before: Mar 25 19:40:50 2023 GMT
            Not After : Mar 23 19:45:50 2024 GMT
        Subject: CN=F642DE419E842E22C849955F6D070A58935D7FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:c9:c5:e4:5a:74:74:19:5e:9a:d2:13:69:
                    86:f9:43:df:89:90:6d:f1:6d:14:74:7a:c7:26:e3:
                    26:96:21:c5:ea:56:6c:3d:47:61:4a:d4:e3:53:ea:
                    c3:b9:fb:ad:84:eb:14:cb:89:5a:8a:10:10:76:ef:
                    5f:e8:5d:1f:59:bb:e2:59:f8:67:fc:e2:0d:db:c4:
                    39:df:e7:ef:06:03:dc:75:93:d2:95:db:35:1a:13:
                    92:3a:84:94:f2:e6:01:bc:56:87:73:d5:cf:be:fe:
                    ac:e8:d5:88:63:ca:0c:e7:32:0b:e2:0b:36:f7:8a:
                    80:06:65:54:fd:fe:7e:b0:2d:4a:c0:5e:c3:f7:0e:
                    3b:4c:2a:ad:52:68:55:ab:00:fa:a8:2d:48:ed:e8:
                    0d:ac:5b:d7:46:7f:05:31:28:3f:bf:c1:cb:50:71:
                    60:c3:1e:61:b8:7a:58:99:eb:fa:fc:ea:b7:71:c9:
                    1a:e3:0c:f8:e7:c6:eb:c7:f7:57:d3:3c:25:7f:e7:
                    c5:be:d3:d5:5c:0d:0f:ee:6f:f5:5c:8a:65:7c:fa:
                    19:e8:ee:a0:40:2e:bf:a3:d2:b4:4c:3b:58:8a:b4:
                    f6:ea:ea:d4:f4:b0:60:c7:3c:b2:cd:60:d9:06:f5:
                    12:3c:32:54:da:62:8a:19:72:73:ee:89:29:10:d8:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:42:DE:41:9E:84:2E:22:C8:49:95:5F:6D:07:0A:58:93:5D:7F:E1
            X509v3 Authority Key Identifier:
                keyid:B4:C0:FD:9D:52:11:26:3A:3D:58:71:F7:AB:67:73:46:D8:04:4D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/B4C0FD9D5211263A3D5871F7AB677346D8044DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C0FD9D5211263A3D5871F7AB677346D8044DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3137392e3132342e34382e302f32312d3231203d3e20323633313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:af:78:86:51:e9:49:ac:7e:3b:b3:92:bb:32:e9:d1:49:40:
         3d:c5:f4:99:d1:73:db:90:1c:2f:05:b6:fd:fe:13:80:50:26:
         0b:6f:03:e6:11:d7:50:cd:dd:b9:ba:1b:f9:9f:11:60:e0:28:
         70:9e:b9:d6:74:20:13:ce:1c:9a:60:fa:49:e6:fd:d0:30:2f:
         15:d7:90:d8:df:d5:63:b8:4f:7a:4a:c2:1a:bd:c7:1b:c1:d1:
         a1:4f:25:2e:a0:0a:dd:dd:62:84:05:ae:74:e2:fb:55:24:3e:
         15:9e:40:0f:78:07:92:21:d7:fc:6a:0f:5d:fc:9a:49:b3:b2:
         90:94:06:81:19:ec:45:0f:2e:e6:24:39:15:0e:9c:d9:8c:22:
         0c:12:65:77:fa:5a:b7:66:11:bb:7f:f5:3c:3e:32:cb:94:5b:
         25:4f:07:1b:7e:44:db:4d:71:bd:ba:d1:b3:e7:9a:22:12:57:
         b1:ae:1e:d5:50:3e:4a:a9:7c:2b:b7:92:d8:81:26:81:87:a4:
         14:30:40:37:30:51:71:43:5c:a8:03:7e:59:04:f5:7d:c2:b6:
         0c:77:6a:83:8b:ae:f7:69:b1:6d:1f:c3:d8:84:7b:6b:6f:00:
         00:c0:79:9f:a4:fa:4c:c5:52:a3:5a:41:f9:db:31:e4:db:53:
         96:dd:47:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org