Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e35362e302f32342d3234203d3e20323632343638.roa
File:                     3137392e3130382e35362e302f32342d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          qDYdQKago6T4Sgf3OFweoQOzak+X9zarzEoz/BBWaes=
Subject key identifier:   43:65:78:5B:88:BA:EF:F6:3D:69:AE:88:76:CC:9C:3E:55:2C:8E:D5
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       43508A12EECB898043E13D318C8CFD0C280C0ED3
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e35362e302f32342d3234203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:10:03 +0000
ROA not before:           Tue 20 Dec 2022 15:05:03 +0000
ROA not after:            Tue 19 Dec 2023 15:10:03 +0000
asID:                     262468
IP address blocks:        179.108.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:50:8a:12:ee:cb:89:80:43:e1:3d:31:8c:8c:fd:0c:28:0c:0e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:05:03 2022 GMT
            Not After : Dec 19 15:10:03 2023 GMT
        Subject: CN=4365785B88BAEFF63D69AE8876CC9C3E552C8ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:ca:17:cd:77:37:3e:68:2f:a2:28:b7:5d:
                    99:f1:72:e5:f7:53:5f:0d:2d:2a:c7:dd:a3:ca:69:
                    19:33:80:c5:48:67:86:94:3a:3a:c6:45:c5:14:c5:
                    72:90:ea:b0:78:f8:3f:e1:59:cc:d5:3e:03:6f:cd:
                    2f:8a:44:97:0e:35:f9:7f:a6:40:94:5d:6d:34:cd:
                    80:52:aa:8c:94:66:91:03:a9:e8:20:6e:da:97:43:
                    f4:b8:0f:57:58:f3:9e:83:0c:de:31:21:b2:b7:ec:
                    d7:5d:a2:c0:8b:1e:70:ef:47:79:5c:e7:d3:64:80:
                    5c:29:a0:23:e7:f6:92:fd:48:2b:38:96:64:25:2a:
                    6d:09:05:9e:6b:29:a1:aa:d8:82:cf:fc:85:ef:b1:
                    eb:c4:f5:f6:83:1d:ae:70:e6:72:39:83:38:45:86:
                    7e:49:2d:31:00:34:07:e1:5f:bc:eb:fe:af:20:16:
                    32:b3:38:40:f5:60:4a:1a:68:df:70:14:4b:2d:09:
                    c4:13:cf:24:48:5d:36:5c:10:00:b9:c5:3c:75:07:
                    e2:61:f0:7a:96:04:37:81:7a:64:81:61:84:66:54:
                    8f:31:26:20:23:77:b0:38:9d:14:62:3d:9a:fa:ca:
                    80:66:1e:d6:d4:85:9b:61:f3:fc:0d:3a:3b:4b:14:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:65:78:5B:88:BA:EF:F6:3D:69:AE:88:76:CC:9C:3E:55:2C:8E:D5
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/3137392e3130382e35362e302f32342d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:fd:81:76:d1:e2:dc:7e:a3:de:73:18:95:df:c0:2b:3f:f4:
         6a:7d:29:27:ce:ae:50:c2:e9:85:bb:42:f0:af:b6:8c:29:ce:
         d5:b4:93:39:42:94:f1:db:ce:50:b0:ec:10:4b:25:b3:b7:41:
         93:e2:b2:91:0b:64:86:f3:b9:5c:5c:51:9c:45:fb:d4:35:ea:
         09:43:90:6b:a6:09:f2:26:24:b5:1b:f9:0a:ac:08:8d:88:7a:
         3b:c0:d4:35:86:e2:dd:9b:f8:74:5e:d5:5b:f3:d0:51:82:68:
         67:c4:c4:1b:78:fe:d4:8a:ed:91:7b:97:32:a7:0b:1f:ab:07:
         ef:78:a9:81:60:37:c7:21:9f:86:63:77:90:fc:63:33:d4:ba:
         e1:cb:4a:ba:bb:21:7f:da:2e:78:93:87:46:f8:0f:cf:e5:bf:
         63:a6:f1:45:8b:4c:27:61:06:04:c7:ca:29:c8:d8:a6:88:02:
         36:d9:64:5b:70:f0:c9:2c:6e:7c:7e:ab:c4:1b:03:5c:6f:dc:
         f1:9c:47:9d:72:1b:d6:96:33:81:f4:b5:56:6b:8a:52:5b:1d:
         b3:a0:d6:ed:f9:b8:f1:90:fe:b1:64:cd:09:fa:33:56:48:41:
         9a:db:fc:ce:b9:f2:0b:ad:93:b0:4d:26:3c:af:4b:0f:01:f4:
         0d:4a:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org