Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e34382e302f32332d3234203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32332d3234203d3e203532353936.roa (raw, json)
Hash identifier:          1dDrYm8V5mUWPrfC2rEI/CMZRYk0DoOdi9mI8rwWA84=
Subject key identifier:   B4:8D:2C:59:B7:B8:2D:B7:9F:82:59:08:E3:05:96:19:A4:42:10:1C
Certificate issuer:       /CN=7A8942A662D9E41ECC5A48C1806F0D27DA9EC231
Certificate serial:       0C09D479F05F4945136F249E0D92DAC1D133CF2A
Authority key identifier: 7A:89:42:A6:62:D9:E4:1E:CC:5A:48:C1:80:6F:0D:27:DA:9E:C2:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e34382e302f32332d3234203d3e203532353936.roa
Signing time:             Thu 04 Apr 2024 11:38:40 +0000
ROA not before:           Thu 04 Apr 2024 11:33:40 +0000
ROA not after:            Thu 03 Apr 2025 11:38:40 +0000
asID:                     52596
IP address blocks:        179.191.48.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:09:d4:79:f0:5f:49:45:13:6f:24:9e:0d:92:da:c1:d1:33:cf:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8942A662D9E41ECC5A48C1806F0D27DA9EC231
        Validity
            Not Before: Apr  4 11:33:40 2024 GMT
            Not After : Apr  3 11:38:40 2025 GMT
        Subject: CN=B48D2C59B7B82DB79F825908E3059619A442101C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:84:4b:41:dc:85:6b:2e:94:f7:31:a9:ae:ff:
                    e2:6f:ce:94:35:b5:69:b8:92:2f:76:1c:1f:d9:dd:
                    f3:f4:db:ff:de:52:14:a8:ff:4c:db:bd:d8:bf:29:
                    de:67:16:8b:db:c7:f0:6f:43:3c:47:71:82:0e:05:
                    e0:08:0b:a3:ad:a2:1e:84:0f:77:ab:48:94:3f:3a:
                    73:cb:2b:42:81:0c:f6:2a:ed:06:4f:28:38:c3:02:
                    37:77:1e:ea:5d:b4:9d:63:7b:42:77:4e:21:5a:05:
                    49:bb:21:e7:8a:57:d0:bb:d7:f7:3f:65:d5:59:03:
                    94:82:cc:e1:3c:d4:7a:ac:c3:81:5d:a5:27:fd:0c:
                    83:1d:f8:77:c6:00:37:4a:a9:2f:02:aa:c7:07:fe:
                    e3:0c:b7:b3:cf:6e:a2:aa:6d:1e:76:81:14:e9:48:
                    9c:9d:34:f8:72:54:24:87:cf:94:14:fe:94:fe:e2:
                    b2:56:54:15:69:05:2a:a0:4c:0b:7f:04:2e:0c:5b:
                    d5:83:45:c0:af:67:e0:c1:ba:ea:28:01:ae:3c:ec:
                    4d:f3:62:e7:b0:ca:07:e5:3e:69:ec:4f:2b:20:74:
                    e2:42:0f:c4:17:58:d0:05:e4:39:10:9f:dc:16:a5:
                    2c:b4:06:70:ac:4f:cd:f0:65:ad:0e:d8:18:30:20:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8D:2C:59:B7:B8:2D:B7:9F:82:59:08:E3:05:96:19:A4:42:10:1C
            X509v3 Authority Key Identifier:
                keyid:7A:89:42:A6:62:D9:E4:1E:CC:5A:48:C1:80:6F:0D:27:DA:9E:C2:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e34382e302f32332d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:22:9a:6a:0d:82:46:ef:54:20:5b:24:96:a4:34:06:13:58:
         63:f4:cb:37:ce:1e:7a:34:3f:2a:e1:12:89:63:a3:bd:b9:82:
         76:f9:57:2f:3f:6b:35:d3:06:12:e4:bd:1e:df:cd:97:4e:ec:
         5f:19:4d:cd:63:d5:06:15:dc:59:30:46:c8:4f:da:10:54:a7:
         dd:ca:06:06:07:6b:2a:43:da:2e:ee:e3:97:ab:d1:7f:4b:54:
         40:a0:ae:3b:82:2b:2c:6a:6c:fe:6d:29:14:34:22:f1:67:41:
         c0:96:bf:c1:72:aa:64:6b:ad:98:f8:8c:09:34:76:2f:9d:48:
         13:6b:f1:82:7f:7c:a7:6a:b3:63:90:de:a4:69:fd:64:d7:7d:
         c7:a8:7a:9e:f1:f7:ab:ee:09:32:1b:bf:13:1f:2f:82:00:49:
         0f:fd:56:9f:21:ac:8b:1f:9b:bf:f9:8f:82:62:5b:03:bd:a6:
         f5:a5:48:dc:1c:7e:37:f5:b3:c2:b3:cc:df:cf:a5:f6:b7:e4:
         6c:ec:eb:48:e0:75:85:fa:28:e4:71:d1:b7:8d:1d:a7:fc:bb:
         b3:91:e4:84:d9:23:9a:59:72:e5:13:e3:2c:31:07:93:0e:eb:
         89:46:43:22:71:24:6d:0f:13:df:1f:13:4a:84:17:3b:02:3f:
         8c:c6:d9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 20:41:16 2024 by rpki-client on console-fra.rpki-client.org