Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39372e302f32342d3234203d3e20323731303437.roa
File:                     3137392e34382e39372e302f32342d3234203d3e20323731303437.roa (raw, json)
Hash identifier:          GfEq812oLQ2j1jPjt4XBtExbkn65dPV5eWzsFFOOj9o=
Subject key identifier:   46:8C:03:5C:B5:41:EF:A6:9A:C2:48:9A:E1:0B:14:D9:91:B7:5F:F1
Certificate issuer:       /CN=AC89DEEFE07897FE929D3329B9B053F7C49DBD4C
Certificate serial:       029508ACD426D0E3D1C9661E30D76A2F00CE45EE
Authority key identifier: AC:89:DE:EF:E0:78:97:FE:92:9D:33:29:B9:B0:53:F7:C4:9D:BD:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39372e302f32342d3234203d3e20323731303437.roa
Signing time:             Wed 19 Jul 2023 14:00:00 +0000
ROA not before:           Wed 19 Jul 2023 13:55:00 +0000
ROA not after:            Wed 17 Jul 2024 14:00:00 +0000
asID:                     271047
IP address blocks:        179.48.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:95:08:ac:d4:26:d0:e3:d1:c9:66:1e:30:d7:6a:2f:00:ce:45:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC89DEEFE07897FE929D3329B9B053F7C49DBD4C
        Validity
            Not Before: Jul 19 13:55:00 2023 GMT
            Not After : Jul 17 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100A29CA3E8A5F21FEC923FC2710BCCD500C0985AA6D11814D1AD7DAAAA106F4F7DF6F6D68C4F795BA291A482970636D77A27B4AD8F0E0A7E7A8F742207D9A70E75C6B01DDCC833C24B8899765A64BC89A81066BC933E7D0D60D76AA15F5DD37BE53218983C5EB2BB75F8CE84A49AB3684FCF865DEB7D124A7E0B966B6AF097C68B037CD1C6A895A880776FEA4805F823FF0B81C6A54B5EDA780332A9487A8111A52385EA96FD3097DD9F5DDBF220EF39A82826B12CE8B0C398832CE8CFB689073ACDF2BC96B096A7475FC2374DC565C0401E159103788BC1FF6E85E6FC7FE014D263E25E4CFCCBD8BC983BD28A826F9880E792C8FA1BEC71EF75308502E8A7405D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:a3:e8:a5:f2:1f:ec:92:3f:c2:71:0b:cc:
                    d5:00:c0:98:5a:a6:d1:18:14:d1:ad:7d:aa:aa:10:
                    6f:4f:7d:f6:f6:d6:8c:4f:79:5b:a2:91:a4:82:97:
                    06:36:d7:7a:27:b4:ad:8f:0e:0a:7e:7a:8f:74:22:
                    07:d9:a7:0e:75:c6:b0:1d:dc:c8:33:c2:4b:88:99:
                    76:5a:64:bc:89:a8:10:66:bc:93:3e:7d:0d:60:d7:
                    6a:a1:5f:5d:d3:7b:e5:32:18:98:3c:5e:b2:bb:75:
                    f8:ce:84:a4:9a:b3:68:4f:cf:86:5d:eb:7d:12:4a:
                    7e:0b:96:6b:6a:f0:97:c6:8b:03:7c:d1:c6:a8:95:
                    a8:80:77:6f:ea:48:05:f8:23:ff:0b:81:c6:a5:4b:
                    5e:da:78:03:32:a9:48:7a:81:11:a5:23:85:ea:96:
                    fd:30:97:dd:9f:5d:db:f2:20:ef:39:a8:28:26:b1:
                    2c:e8:b0:c3:98:83:2c:e8:cf:b6:89:07:3a:cd:f2:
                    bc:96:b0:96:a7:47:5f:c2:37:4d:c5:65:c0:40:1e:
                    15:91:03:78:8b:c1:ff:6e:85:e6:fc:7f:e0:14:d2:
                    63:e2:5e:4c:fc:cb:d8:bc:98:3b:d2:8a:82:6f:98:
                    80:e7:92:c8:fa:1b:ec:71:ef:75:30:85:02:e8:a7:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8C:03:5C:B5:41:EF:A6:9A:C2:48:9A:E1:0B:14:D9:91:B7:5F:F1
            X509v3 Authority Key Identifier:
                keyid:AC:89:DE:EF:E0:78:97:FE:92:9D:33:29:B9:B0:53:F7:C4:9D:BD:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39372e302f32342d3234203d3e20323731303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:c5:b8:5d:41:b9:da:71:78:41:05:ba:c9:6f:66:1c:65:88:
         48:18:eb:91:af:ab:6f:f1:4c:d7:1c:60:3a:d4:ff:63:1a:d7:
         b7:b4:ec:af:53:e9:56:34:77:9e:ca:81:5b:af:30:1f:43:3a:
         52:b7:18:0d:09:19:18:47:d8:9d:a3:52:5b:ec:5f:a2:7f:2b:
         a5:5d:d1:be:dd:93:5a:83:4c:7f:4c:01:2b:7e:04:49:1b:62:
         85:d0:89:2a:05:c7:c8:32:08:e5:27:f2:ce:0c:74:d6:e1:1a:
         40:c4:7a:07:8d:04:6a:fa:20:bb:8e:92:aa:71:2c:4d:df:ed:
         2c:7b:0b:c9:87:b1:4c:05:82:40:40:ac:e3:c2:c6:ff:2c:80:
         ab:43:40:91:c4:84:7c:9e:1b:34:0f:05:c0:1d:ab:82:ba:a7:
         48:06:18:fc:94:38:67:bb:8a:08:13:7b:08:b6:5f:e2:79:8e:
         24:69:cf:07:4f:7c:27:9b:92:b3:dc:57:1f:a2:26:f5:52:4b:
         c3:07:9b:db:c9:09:9b:32:e8:0a:2c:46:89:36:00:58:d1:67:
         4a:ea:f2:aa:2e:fb:84:94:ab:9a:72:33:fd:53:fb:4e:3d:85:
         b9:3f:79:5c:7e:f4:1f:da:8d:47:51:71:bc:46:f1:db:a8:1e:
         a2:30:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org