Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e34382e302f32312d3231203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32312d3231203d3e203532353936.roa (raw, json)
Hash identifier:          H75MNqJT0l70T2o0v/Ej3kiux5q2qoZ0TyKXUomHLSc=
Subject key identifier:   CE:E6:9C:B4:16:36:96:3F:BE:D4:A0:15:3A:CF:1C:C6:A5:C7:6B:EF
Certificate issuer:       /CN=7A8942A662D9E41ECC5A48C1806F0D27DA9EC231
Certificate serial:       37EC5A503F1132A9F1446B08B652B50D2C70A7A1
Authority key identifier: 7A:89:42:A6:62:D9:E4:1E:CC:5A:48:C1:80:6F:0D:27:DA:9E:C2:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e34382e302f32312d3231203d3e203532353936.roa
Signing time:             Thu 04 Apr 2024 11:38:41 +0000
ROA not before:           Thu 04 Apr 2024 11:33:41 +0000
ROA not after:            Thu 03 Apr 2025 11:38:41 +0000
asID:                     52596
IP address blocks:        179.191.48.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ec:5a:50:3f:11:32:a9:f1:44:6b:08:b6:52:b5:0d:2c:70:a7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8942A662D9E41ECC5A48C1806F0D27DA9EC231
        Validity
            Not Before: Apr  4 11:33:41 2024 GMT
            Not After : Apr  3 11:38:41 2025 GMT
        Subject: CN=CEE69CB41636963FBED4A0153ACF1CC6A5C76BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:10:7d:0c:10:05:6a:e5:19:4c:79:53:44:
                    88:4c:83:e2:e8:06:cd:15:cb:60:e6:99:75:79:49:
                    fc:08:75:70:0d:3a:05:f5:38:95:e5:b7:85:fe:bb:
                    88:6b:4e:f7:76:03:08:74:38:dd:aa:61:d8:fa:30:
                    58:56:6d:76:fc:c4:97:28:90:2c:4e:7a:be:d3:4f:
                    0c:36:19:73:2c:a0:a9:55:c2:40:42:be:75:1a:34:
                    83:d7:03:c6:fd:07:cb:1e:ae:06:f9:60:3f:ed:ae:
                    c1:a5:fe:3a:02:fa:b5:7c:0c:5c:d5:84:81:27:94:
                    84:b2:84:2d:ce:a7:fd:8b:5e:22:24:00:ce:0c:7c:
                    c6:89:20:7d:e2:ba:5f:9f:9b:00:49:61:23:73:0f:
                    c7:3a:ba:94:a1:1b:88:45:28:50:80:ea:d8:42:08:
                    97:f6:bd:c8:72:18:3a:5f:bc:ae:87:6f:20:eb:87:
                    f8:a5:08:4e:a7:0a:49:70:a7:94:ff:74:e5:d9:84:
                    78:94:2b:ba:e0:d4:f2:c1:fb:d2:c8:28:bc:55:94:
                    d8:c3:89:fc:fa:a3:58:f9:30:09:df:79:3d:db:e7:
                    51:80:a9:9a:45:5c:04:8c:6c:c8:b1:3d:2c:94:bf:
                    7c:55:57:20:0c:81:c7:8c:ff:ea:12:b4:85:43:fb:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E6:9C:B4:16:36:96:3F:BE:D4:A0:15:3A:CF:1C:C6:A5:C7:6B:EF
            X509v3 Authority Key Identifier:
                keyid:7A:89:42:A6:62:D9:E4:1E:CC:5A:48:C1:80:6F:0D:27:DA:9E:C2:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e34382e302f32312d3231203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:49:cd:1d:99:11:ed:50:2c:91:74:9f:b4:21:fb:73:73:e9:
         c8:2a:39:e4:45:25:dc:62:e0:a3:ad:7d:fc:1f:6a:85:3d:af:
         74:b8:21:89:32:f7:39:c3:3e:73:a0:ca:96:da:16:07:7f:2a:
         cd:de:d6:33:79:6d:b4:5c:64:62:0d:31:84:f9:3a:9d:02:cc:
         96:90:71:c7:40:a7:95:e0:67:b0:68:ae:bf:c6:2f:58:89:7f:
         f2:f0:88:1e:ad:d0:0f:e4:0e:2e:05:dd:22:7c:8a:57:97:93:
         5d:88:d3:b1:95:5a:14:7b:87:fe:39:24:f3:8d:51:55:7f:23:
         a7:39:1b:86:c7:7a:ec:48:b9:2d:ee:09:0b:9c:e9:11:2b:d7:
         eb:99:2e:aa:e8:8b:fb:e7:02:76:b0:9b:0c:37:11:d9:bf:8f:
         97:61:08:a8:8f:29:93:19:8a:0f:96:68:04:72:c9:56:38:e5:
         e6:4c:f6:38:8a:a8:7e:76:69:c2:7d:2c:36:fa:05:28:9c:b4:
         e0:81:a6:ce:e0:53:b3:d7:34:2e:11:53:d6:bd:1f:72:fb:93:
         d1:68:76:0d:d6:c1:2a:b1:b8:aa:be:c4:86:bf:44:f5:ee:7f:
         4c:48:fd:06:12:84:9a:52:51:08:92:eb:6e:bb:0d:9a:41:bc:
         90:26:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 20:41:16 2024 by rpki-client on console-fra.rpki-client.org