Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32322d3232203d3e203532353936.roa (raw, json)
Hash identifier:          5+19XczdtL9l4UmbvjGv3etFroMwvDetrP1rBrsHUwU=
Subject key identifier:   C1:0B:3E:3E:1C:29:A6:99:45:94:BB:29:2A:88:36:68:44:C7:5A:A5
Certificate issuer:       /CN=7A8942A662D9E41ECC5A48C1806F0D27DA9EC231
Certificate serial:       564091D6B5F656A5DC936C2A234DBFD63B6DC284
Authority key identifier: 7A:89:42:A6:62:D9:E4:1E:CC:5A:48:C1:80:6F:0D:27:DA:9E:C2:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa
Signing time:             Thu 04 Apr 2024 11:38:41 +0000
ROA not before:           Thu 04 Apr 2024 11:33:41 +0000
ROA not after:            Thu 03 Apr 2025 11:38:41 +0000
asID:                     52596
IP address blocks:        179.191.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:40:91:d6:b5:f6:56:a5:dc:93:6c:2a:23:4d:bf:d6:3b:6d:c2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8942A662D9E41ECC5A48C1806F0D27DA9EC231
        Validity
            Not Before: Apr  4 11:33:41 2024 GMT
            Not After : Apr  3 11:38:41 2025 GMT
        Subject: CN=C10B3E3E1C29A6994594BB292A88366844C75AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:0e:ad:86:d2:d9:fb:2a:6b:5b:d0:e6:f5:
                    93:3a:64:97:15:39:e8:ff:bc:2f:66:9e:09:f3:a8:
                    9f:89:62:8e:e6:05:8c:d8:80:b5:bd:19:09:aa:57:
                    10:ae:b0:6b:60:b3:eb:6b:37:9e:ad:4d:01:ee:b4:
                    7a:a3:d3:4a:14:69:a7:37:a3:2c:e1:b0:4f:7e:40:
                    77:f9:81:87:86:6c:86:2b:09:1c:fa:88:67:a9:f2:
                    a7:fc:c4:cf:0c:b0:98:65:07:66:a2:cb:0b:35:dc:
                    2d:da:14:d8:a1:44:f5:20:71:2c:fc:82:e8:9d:63:
                    0f:ea:ad:f0:cf:51:ce:d4:4b:76:89:af:0d:75:b1:
                    a8:2b:97:ae:3e:c0:b1:8c:ea:63:ee:d6:eb:81:3a:
                    8a:51:09:58:14:32:70:d4:6c:0b:a5:dc:44:b1:7e:
                    65:2d:da:5a:fc:d4:48:f0:a5:c3:46:75:d2:4e:c2:
                    cf:b4:83:09:47:50:36:f3:92:b2:09:77:1e:2a:35:
                    19:d0:55:ac:19:08:56:56:7e:12:44:77:f1:46:f7:
                    49:c4:c5:43:9f:3d:d7:b2:b4:3d:77:f7:30:68:77:
                    2b:88:9f:fd:21:10:1f:f9:b0:15:2a:8d:f7:18:0f:
                    44:c8:8f:08:4e:d6:f4:a8:4c:5b:e2:ca:e1:fd:2b:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0B:3E:3E:1C:29:A6:99:45:94:BB:29:2A:88:36:68:44:C7:5A:A5
            X509v3 Authority Key Identifier:
                keyid:7A:89:42:A6:62:D9:E4:1E:CC:5A:48:C1:80:6F:0D:27:DA:9E:C2:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:5a:e2:da:2a:be:58:88:f0:0b:db:ce:6f:26:21:ee:f2:83:
         37:9c:1c:a4:c9:e4:d5:4f:95:45:76:e7:c0:0d:f0:9d:ae:fc:
         f7:d3:52:3b:3a:48:bc:8d:4b:a6:0d:6c:ea:cc:ac:39:69:bf:
         99:f4:da:3c:be:30:fe:72:b5:f9:a4:8e:00:27:2b:7d:01:d4:
         f6:30:23:0a:87:1a:ad:e9:d4:3e:f1:24:cc:63:b5:9a:f2:60:
         ce:40:46:76:22:86:dc:17:4f:b6:50:3a:99:28:39:a3:bd:6a:
         f5:08:76:8c:a0:23:b3:f5:22:d1:87:3d:25:41:4a:60:31:9f:
         c4:f5:28:0d:1d:90:b9:5f:02:ab:1f:32:e5:ff:9f:62:b0:95:
         c3:42:56:99:26:e8:56:d6:2b:1f:d7:53:8c:b4:48:72:12:6b:
         4f:ba:fa:b1:82:fb:91:f0:c9:d7:30:ef:c9:50:83:00:c4:8e:
         a6:8d:c6:6c:71:a0:19:59:1c:d7:21:9e:fa:34:ff:b9:1b:13:
         a7:88:a5:f1:ca:3e:e2:0e:7c:5c:39:1d:32:6d:fa:a5:06:25:
         c9:92:ab:57:10:83:06:81:c5:6a:3e:4f:a4:fc:fd:20:d8:15:
         d5:8c:36:42:1f:17:34:f5:c2:39:3a:10:5b:f3:88:83:6b:a9:
         86:fb:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 23:23:23 2024 by rpki-client on console-ams.rpki-client.org