Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/3137392e3130382e38382e302f32312d3234203d3e20323633323639.roa
File:                     3137392e3130382e38382e302f32312d3234203d3e20323633323639.roa (raw, json)
Hash identifier:          d4mFVrkJ+/7Oq/YrIttBIk6Jj35I5dExc7n/wtvXmVo=
Subject key identifier:   17:20:D2:6F:87:15:90:97:1B:88:79:AD:E0:28:1E:24:3E:5C:80:CF
Certificate issuer:       /CN=43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2
Certificate serial:       190B985D3EB99CCC516F700C2E79FA93A69F00E4
Authority key identifier: 43:B1:F8:71:46:E2:16:FB:1E:49:CB:66:AB:D3:F9:4D:DF:C5:FA:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/3137392e3130382e38382e302f32312d3234203d3e20323633323639.roa
Signing time:             Mon 29 Jan 2024 20:56:42 +0000
ROA not before:           Mon 29 Jan 2024 20:51:42 +0000
ROA not after:            Mon 27 Jan 2025 20:56:42 +0000
asID:                     263269
IP address blocks:        179.108.88.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0b:98:5d:3e:b9:9c:cc:51:6f:70:0c:2e:79:fa:93:a6:9f:00:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2
        Validity
            Not Before: Jan 29 20:51:42 2024 GMT
            Not After : Jan 27 20:56:42 2025 GMT
        Subject: CN=1720D26F871590971B8879ADE0281E243E5C80CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:64:11:7b:d2:5c:e8:c2:b3:f6:78:e9:75:
                    db:22:94:5c:7b:c6:51:56:68:a1:fe:af:78:e3:b2:
                    89:45:ca:f0:cb:ff:15:36:f1:30:26:08:14:a6:5e:
                    d2:1d:07:74:db:46:9c:0a:6f:cf:df:76:57:ec:d9:
                    58:71:65:27:55:6b:bc:4a:02:5e:30:ea:54:cd:1d:
                    62:fb:df:a4:84:45:41:e3:7f:58:b1:51:4c:9c:75:
                    a2:88:79:ec:ee:b8:77:bf:69:65:df:95:cf:56:a0:
                    8b:f8:7a:ba:4f:6f:73:48:0a:8c:bc:e2:1c:50:32:
                    17:3e:64:20:c6:7d:81:7c:04:9e:2c:11:bb:06:cb:
                    98:b8:3a:ce:94:9d:04:51:7b:48:f5:e6:48:72:5a:
                    07:a2:0d:c6:f9:5e:ca:1a:7f:fe:65:94:f6:d5:03:
                    11:1e:c0:af:89:fa:be:24:18:d6:bb:77:98:3f:d6:
                    3a:b2:bb:ea:f6:76:d6:94:db:99:9e:da:ad:07:d5:
                    6b:70:d6:b4:a6:26:1d:e0:dc:1f:c1:e3:46:1d:cb:
                    e0:72:b3:72:f3:a7:a8:b5:90:37:a2:08:36:6f:67:
                    c4:11:a2:9b:60:04:15:0b:3d:34:a1:b0:4d:3c:00:
                    24:e1:58:4f:90:c9:79:f2:a6:94:5b:c2:e6:0e:6a:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:20:D2:6F:87:15:90:97:1B:88:79:AD:E0:28:1E:24:3E:5C:80:CF
            X509v3 Authority Key Identifier:
                keyid:43:B1:F8:71:46:E2:16:FB:1E:49:CB:66:AB:D3:F9:4D:DF:C5:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43B1F87146E216FB1E49CB66ABD3F94DDFC5FAD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPAy6dv7eieZg7BXdZMGBZVmzAqzhdUaG6WWvkhUnxuN/0/3137392e3130382e38382e302f32312d3234203d3e20323633323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:e3:d7:f8:b6:dd:d8:64:98:ff:1e:27:eb:2d:80:f9:8d:b0:
         9a:c9:01:a8:46:3d:d2:e0:22:67:40:57:93:8e:f9:d7:13:43:
         c6:1d:81:34:1f:64:5f:1e:7d:17:e2:88:e0:29:e3:2a:bf:64:
         c1:a8:1e:66:c8:0b:fc:b9:13:2d:b5:11:6b:7a:87:16:be:10:
         d2:13:11:ab:c9:c9:47:f1:e8:f0:88:13:71:d2:7a:60:c3:90:
         7c:e1:01:b4:54:0e:4e:d3:64:cf:95:fb:9b:0c:c7:a8:de:cf:
         45:72:f9:98:f1:7a:55:ca:c1:aa:05:ec:43:66:17:ab:0f:04:
         3e:c3:d3:ac:08:05:b4:78:70:87:68:c8:20:1a:4e:8c:56:79:
         ce:3a:6f:c5:f0:a5:62:c6:5a:48:91:c3:c5:15:7b:09:88:07:
         c3:e4:fc:c8:a2:35:99:14:23:05:c5:4a:dd:b6:d4:26:55:74:
         3d:71:70:f2:e2:72:d4:ae:8a:1b:ab:35:86:4f:83:ff:46:d1:
         df:44:b5:af:d3:22:b4:78:e0:52:d5:b9:ef:f3:5c:b2:5a:1b:
         e2:4b:7b:fa:89:d1:ba:da:3e:2c:82:3a:bc:f4:81:27:2e:03:
         a6:d4:3b:39:29:cb:dd:54:2e:5a:59:c6:83:26:5f:51:b2:6e:
         aa:61:0b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org