Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137392e3139312e39362e302f31392d3234203d3e203137323232.roa
File:                     3137392e3139312e39362e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          LcSvkNNvpGSv1UXFiowt4h9bEM7GOUdwMrH8bJF6rNs=
Subject key identifier:   8A:64:2C:04:05:59:69:6B:F8:81:13:56:6D:C8:5D:C8:76:55:14:B3
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       182FDE9E4B462FCCFACC9479E9FDFB3441E6A66C
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137392e3139312e39362e302f31392d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        179.191.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2f:de:9e:4b:46:2f:cc:fa:cc:94:79:e9:fd:fb:34:41:e6:a6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=8A642C040559696BF88113566DC85DC8765514B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:56:b6:d1:9c:24:1b:68:d0:ff:61:32:5f:
                    36:28:61:4c:47:61:08:d0:f8:02:e8:13:19:a8:dd:
                    48:75:67:6e:55:ce:92:9e:c8:62:cb:fe:a1:9d:f4:
                    96:1e:3d:cd:b3:8c:88:59:9a:cc:11:a9:7d:8a:da:
                    f1:8d:03:18:1e:16:37:ea:61:7b:a8:6a:55:81:44:
                    a6:68:a4:35:fd:a4:55:16:58:22:83:8a:36:12:8b:
                    2a:58:cc:84:f1:27:f9:c3:35:b9:b9:55:95:e3:a5:
                    d5:6f:0b:3f:1a:0b:a0:ea:71:97:ba:d9:82:fe:a0:
                    04:bc:e9:cc:7c:43:8f:ed:48:52:23:95:5a:f4:1d:
                    b5:57:47:39:82:e5:7c:a8:84:93:3b:99:af:16:9a:
                    69:99:14:c9:b6:1c:dd:30:00:84:3a:43:10:ad:c4:
                    c9:b4:4a:5d:b2:32:7e:6e:6d:cb:aa:6d:8e:92:2c:
                    3b:73:25:48:35:96:17:a8:7d:e9:a0:18:c3:86:42:
                    de:f0:99:bb:3f:d6:3a:9a:af:e2:5e:bd:a0:5c:4f:
                    61:df:51:b5:f1:d2:00:d3:bb:da:c6:ab:76:98:70:
                    5c:f8:8c:0d:1b:ac:78:54:a1:97:0e:75:f4:7b:f1:
                    ad:ac:3c:93:75:9c:47:62:9d:6e:fb:57:ab:2a:64:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:64:2C:04:05:59:69:6B:F8:81:13:56:6D:C8:5D:C8:76:55:14:B3
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137392e3139312e39362e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:62:b1:77:1c:be:3d:17:40:b6:41:0e:72:a5:71:2b:62:23:
         34:a7:b6:57:a0:13:d8:d4:88:6c:73:ac:e9:ea:99:0a:65:50:
         c6:0d:af:ca:04:82:cc:bf:8e:52:8e:41:01:6d:e6:83:4d:d4:
         93:7a:d9:46:ea:a2:a7:6c:bd:fd:1c:60:6c:be:70:f1:b2:66:
         8f:82:cd:7f:24:85:58:d5:53:ea:fb:2c:79:81:6c:58:d7:83:
         a8:28:24:b9:5e:2f:08:94:94:e4:71:7a:9a:17:ed:c0:a9:68:
         af:a6:af:58:2d:59:d9:c5:7b:1e:14:86:15:4a:05:90:f7:ab:
         cb:da:96:e8:b4:e5:03:4e:9a:9f:9a:a9:90:73:73:59:94:3f:
         93:85:06:31:bb:80:96:6b:8c:c6:78:0e:92:27:36:3a:dd:d4:
         10:63:fd:c6:09:a7:c7:65:48:ce:26:99:c4:c6:37:12:98:75:
         3b:fa:3c:09:8a:75:b4:a1:a4:33:64:54:94:58:75:50:e5:77:
         35:02:4a:d2:96:a5:8d:9c:a9:92:66:19:03:42:5a:6a:31:b4:
         c5:98:dc:46:e9:a6:92:73:58:75:d9:61:44:91:46:c6:4c:a2:
         3c:2a:de:0b:43:db:df:7e:1e:7d:b4:51:bf:30:f9:0c:a4:8f:
         6e:ce:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org