Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e35342e302f32332d3234203d3e203532353936.roa
File:                     3137392e3139312e35342e302f32332d3234203d3e203532353936.roa (raw, json)
Hash identifier:          6COn1L3fXtHW6D4IsNZ6f0VRfoB7Wg/sf+PQTiRPMrM=
Subject key identifier:   5D:13:06:8E:19:0F:7C:EB:83:48:05:10:E6:C4:B5:B0:FF:A0:D2:62
Certificate issuer:       /CN=7A8942A662D9E41ECC5A48C1806F0D27DA9EC231
Certificate serial:       2FFA8766F5D55D0154556DFE2E8125B653F803AA
Authority key identifier: 7A:89:42:A6:62:D9:E4:1E:CC:5A:48:C1:80:6F:0D:27:DA:9E:C2:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e35342e302f32332d3234203d3e203532353936.roa
Signing time:             Thu 04 Apr 2024 11:38:41 +0000
ROA not before:           Thu 04 Apr 2024 11:33:41 +0000
ROA not after:            Thu 03 Apr 2025 11:38:41 +0000
asID:                     52596
IP address blocks:        179.191.54.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fa:87:66:f5:d5:5d:01:54:55:6d:fe:2e:81:25:b6:53:f8:03:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8942A662D9E41ECC5A48C1806F0D27DA9EC231
        Validity
            Not Before: Apr  4 11:33:41 2024 GMT
            Not After : Apr  3 11:38:41 2025 GMT
        Subject: CN=5D13068E190F7CEB83480510E6C4B5B0FFA0D262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f3:6a:9c:06:bf:62:dd:f1:c4:94:88:a5:ac:
                    1c:46:1d:c0:d0:d0:2a:52:dd:e7:45:b9:86:a9:25:
                    21:42:e7:1e:ca:39:64:d2:c9:08:85:ee:ca:a1:41:
                    31:3b:ae:09:bf:2b:21:0f:f5:58:1f:42:05:a8:1a:
                    e8:90:2c:c6:51:c3:18:54:ef:83:60:c4:7a:63:f6:
                    76:68:72:56:c2:46:77:fc:1e:d6:7b:cc:76:74:c8:
                    10:68:21:1c:71:6c:3a:ca:41:20:ce:e3:c2:32:cc:
                    15:03:af:6e:4f:6f:4a:6d:13:df:a4:19:8b:2e:21:
                    3d:aa:fe:32:c5:fc:ab:2e:2f:f2:38:05:af:5b:f9:
                    30:bf:19:6d:69:26:d3:54:81:8b:c8:92:97:d8:c1:
                    63:15:4e:c6:89:d3:65:96:3c:4b:ad:05:45:ca:8f:
                    45:5a:07:45:31:cf:ed:20:41:28:c3:4f:e2:03:de:
                    4e:65:bc:cb:0d:10:14:ca:b5:5d:fc:62:c3:87:b2:
                    dc:27:99:7b:89:7a:ae:a1:0f:67:ff:ad:fc:ff:78:
                    71:b4:1a:c1:85:35:97:bb:ba:7a:b0:c7:97:86:88:
                    f6:b5:65:1b:f8:12:21:6f:11:98:36:c1:8c:55:b0:
                    17:ae:b7:9c:99:a8:4e:91:1b:f6:d6:86:dd:32:ea:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:13:06:8E:19:0F:7C:EB:83:48:05:10:E6:C4:B5:B0:FF:A0:D2:62
            X509v3 Authority Key Identifier:
                keyid:7A:89:42:A6:62:D9:E4:1E:CC:5A:48:C1:80:6F:0D:27:DA:9E:C2:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A8942A662D9E41ECC5A48C1806F0D27DA9EC231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/1/3137392e3139312e35342e302f32332d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:43:f6:6d:a0:8e:7e:19:20:5b:cd:70:ac:0b:20:e3:d1:
         f0:06:70:ea:79:ea:8d:67:f3:8d:82:f9:1d:e9:2f:10:a9:e9:
         15:41:29:4d:b7:bb:94:50:82:ff:83:3d:3d:f7:ea:91:c0:2f:
         8d:c9:ea:40:4f:6e:28:34:52:4f:5c:9d:19:a4:e2:d3:e2:b5:
         24:2b:cd:c1:f7:c8:c5:cd:96:a6:6f:6b:aa:56:47:52:b2:98:
         bc:8e:c0:2e:93:72:c3:f9:bc:c9:e2:3f:7f:bf:a3:cb:32:a4:
         57:69:eb:3f:3d:eb:ad:cf:38:72:8e:ae:53:29:da:28:b0:bd:
         f7:34:83:04:e4:72:1f:0d:42:21:ae:84:09:4f:58:00:2b:b9:
         22:c8:37:6c:5c:7e:cc:a7:ea:41:33:f3:91:c6:02:68:08:29:
         a6:6c:06:ba:ae:37:df:6d:47:14:a8:41:6d:05:c1:4a:7a:30:
         36:af:d3:35:e2:18:f2:87:d7:9e:26:bb:fb:d6:25:df:87:01:
         0a:be:b0:60:b4:98:31:60:c2:5a:a3:b3:6a:79:5a:be:d6:3d:
         d1:b5:7b:c4:c9:ea:8e:f6:99:66:8b:62:45:48:0e:15:bb:03:
         89:5c:27:24:32:32:a0:73:61:7a:74:23:d0:db:39:48:91:58:
         22:ad:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 20:41:16 2024 by rpki-client on console-fra.rpki-client.org