Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39382e302f32342d3234203d3e20323731303437.roa
File:                     3137392e34382e39382e302f32342d3234203d3e20323731303437.roa (raw, json)
Hash identifier:          6xlkZWiHydZj8MG3U0suqam9qjJxWxHVWYUDghbXSZ0=
Subject key identifier:   4E:8C:DF:C1:63:3A:FB:E1:88:22:3A:4C:3D:DB:3A:C0:1A:22:F8:D3
Certificate issuer:       /CN=AC89DEEFE07897FE929D3329B9B053F7C49DBD4C
Certificate serial:       41C72952995F0612DD95B340D73BDD34E2865200
Authority key identifier: AC:89:DE:EF:E0:78:97:FE:92:9D:33:29:B9:B0:53:F7:C4:9D:BD:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39382e302f32342d3234203d3e20323731303437.roa
Signing time:             Wed 19 Jul 2023 13:00:00 +0000
ROA not before:           Wed 19 Jul 2023 12:55:00 +0000
ROA not after:            Wed 17 Jul 2024 13:00:00 +0000
asID:                     271047
IP address blocks:        179.48.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c7:29:52:99:5f:06:12:dd:95:b3:40:d7:3b:dd:34:e2:86:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC89DEEFE07897FE929D3329B9B053F7C49DBD4C
        Validity
            Not Before: Jul 19 12:55:00 2023 GMT
            Not After : Jul 17 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:12:68:4c:8c:d3:ee:f1:0c:0f:c8:30:96:
                    d5:70:73:38:af:3c:ba:11:cb:b1:74:94:fc:c6:ce:
                    0a:f9:69:d6:60:46:de:f4:42:4d:c3:28:bc:f9:c7:
                    21:76:ba:1d:e2:4a:c7:f9:d6:23:0f:bc:3c:29:bb:
                    4e:7f:4d:36:a1:e4:6f:ab:bb:7d:9e:cc:d1:7a:54:
                    0d:ae:1d:9c:7d:7a:44:74:72:5d:b5:ec:12:d9:40:
                    fc:47:9e:ac:74:69:ff:3d:9c:69:7d:1b:35:b3:82:
                    8d:56:3d:9d:a1:92:7e:96:35:ee:78:9f:5a:35:80:
                    98:53:77:d9:a6:30:af:a4:e5:9d:f5:ff:ef:14:c3:
                    f7:84:01:4e:64:6b:b0:60:2f:bd:bf:de:55:cd:52:
                    82:d0:48:3e:a9:79:e7:e7:4d:56:77:5e:6e:c9:20:
                    67:cc:17:b3:d0:56:c9:16:e8:f0:82:bf:06:49:ff:
                    2b:07:d9:29:47:95:dc:e2:ee:8b:e3:e9:d6:04:78:
                    a9:77:44:00:07:66:e3:6b:cd:67:33:2a:39:8e:26:
                    c6:d4:23:ac:aa:be:50:53:9f:db:94:64:64:3d:0f:
                    2d:bd:68:04:9a:67:c7:28:a5:79:77:9e:14:80:9b:
                    64:12:fd:39:98:6a:c2:37:33:94:35:cd:a7:80:75:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8C:DF:C1:63:3A:FB:E1:88:22:3A:4C:3D:DB:3A:C0:1A:22:F8:D3
            X509v3 Authority Key Identifier:
                keyid:AC:89:DE:EF:E0:78:97:FE:92:9D:33:29:B9:B0:53:F7:C4:9D:BD:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC89DEEFE07897FE929D3329B9B053F7C49DBD4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39382e302f32342d3234203d3e20323731303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:fc:4d:c9:bb:bf:12:af:33:46:75:5c:d9:54:34:8b:47:54:
         6e:28:cc:98:49:d5:14:e5:37:02:6f:ba:5d:c1:ff:82:51:3a:
         35:72:3e:14:5f:b9:36:07:87:94:32:b7:29:a9:85:42:d1:77:
         af:b6:7f:d6:8e:1e:a4:1e:a8:a8:5f:12:e4:84:b9:ce:75:0d:
         bd:de:f6:6d:5d:fb:fb:fc:f0:7b:f5:55:0e:61:ef:ad:69:1e:
         d1:20:9b:41:ed:f8:2f:9e:f1:79:01:66:98:ce:29:9d:66:c3:
         94:b0:1a:cd:0c:f2:7b:d0:a5:97:0e:34:8d:14:e7:f5:91:e6:
         6e:07:ba:b9:59:c6:a0:d3:80:32:b9:d3:6d:0d:fe:fe:7f:b7:
         c2:5d:0f:79:91:57:3a:50:20:72:c3:0c:e7:0a:39:f0:18:80:
         37:e3:fc:22:a8:1f:e7:cd:73:2d:e3:48:b0:bb:fd:3b:5f:7b:
         f2:2f:eb:74:1c:96:d9:95:47:a7:86:fe:f8:ed:31:22:e2:e0:
         d1:d0:29:8d:ea:dd:af:99:03:d8:36:35:19:b4:24:5f:b8:07:
         67:90:f5:75:84:a4:57:a6:0c:21:c4:04:d5:4d:0b:cf:e0:c8:
         f5:51:24:8c:d7:ba:d5:e7:93:4f:53:87:45:a4:89:6d:d4:d6:
         5d:1b:8e:e8
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUQccpUplfBhLdlbNA1zvdNOKGUgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM4OURFRUZFMDc4OTdGRTkyOUQzMzI5QjlCMDUzRjdD
NDlEQkQ0QzAeFw0yMzA3MTkxMjU1MDBaFw0yNDA3MTcxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkVEODEyNjg0QzhDRDNFRUYx
MEMwRkM4MzA5NkQ1NzA3MzM4QUYzQ0JBMTFDQkIxNzQ5NEZDQzZDRTBBRjk2OUQ2
NjA0NkRFRjQ0MjREQzMyOEJDRjlDNzIxNzZCQTFERTI0QUM3RjlENjIzMEZCQzND
MjlCQjRFN0Y0RDM2QTFFNDZGQUJCQjdEOUVDQ0QxN0E1NDBEQUUxRDlDN0Q3QTQ0
NzQ3MjVEQjVFQzEyRDk0MEZDNDc5RUFDNzQ2OUZGM0Q5QzY5N0QxQjM1QjM4MjhE
NTYzRDlEQTE5MjdFOTYzNUVFNzg5RjVBMzU4MDk4NTM3N0Q5QTYzMEFGQTRFNTlE
RjVGRkVGMTRDM0Y3ODQwMTRFNjQ2QkIwNjAyRkJEQkZERTU1Q0Q1MjgyRDA0ODNF
QTk3OUU3RTc0RDU2Nzc1RTZFQzkyMDY3Q0MxN0IzRDA1NkM5MTZFOEYwODJCRjA2
NDlGRjJCMDdEOTI5NDc5NURDRTJFRThCRTNFOUQ2MDQ3OEE5Nzc0NDAwMDc2NkUz
NkJDRDY3MzMyQTM5OEUyNkM2RDQyM0FDQUFCRTUwNTM5RkRCOTQ2NDY0M0QwRjJE
QkQ2ODA0OUE2N0M3MjhBNTc5Nzc5RTE0ODA5QjY0MTJGRDM5OTg2QUMyMzczMzk0
MzVDREE3ODA3NTE2MjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvtgSaEyM0+7xDA/IMJbVcHM4rzy6EcuxdJT8xs4K+WnWYEbe9EJN
wyi8+cchdrod4krH+dYjD7w8KbtOf002oeRvq7t9nszRelQNrh2cfXpEdHJdtewS
2UD8R56sdGn/PZxpfRs1s4KNVj2doZJ+ljXueJ9aNYCYU3fZpjCvpOWd9f/vFMP3
hAFOZGuwYC+9v95VzVKC0Eg+qXnn501Wd15uySBnzBez0FbJFujwgr8GSf8rB9kp
R5Xc4u6L4+nWBHipd0QAB2bja81nMyo5jibG1COsqr5QU5/blGRkPQ8tvWgEmmfH
KKV5d54UgJtkEv05mGrCNzOUNc2ngHUWJwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FE6M38FjOvvhiCI6TD3bOsAaIvjTMB8GA1UdIwQYMBaAFKyJ3u/geJf+kp0zKbmw
U/fEnb1MMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dDMXMxWUFRTkY0M0Nj
U3RZaDhTWjF2ZXlTZmk5MXhrcUxTcmp1ZjNqWU5LLzAvQUM4OURFRUZFMDc4OTdG
RTkyOUQzMzI5QjlCMDUzRjdDNDlEQkQ0Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BQzg5REVFRkUwNzg5N0ZFOTI5RDMzMjlCOUIwNTNGN0M0OURC
RDRDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HQzFzMVlBUU5GNDNDY1N0WWg4
U1oxdmV5U2ZpOTF4a3FMU3JqdWYzallOSy8wLzMxMzczOTJlMzQzODJlMzkzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMwMzQzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMw
YjANBgkqhkiG9w0BAQsFAAOCAQEAK/xNybu/Eq8zRnVc2VQ0i0dUbijMmEnVFOU3
Am+6XcH/glE6NXI+FF+5NgeHlDK3KamFQtF3r7Z/1o4epB6oqF8S5IS5znUNvd72
bV37+/zwe/VVDmHvrWke0SCbQe34L57xeQFmmM4pnWbDlLAazQzye9Cllw40jRTn
9ZHmbge6uVnGoNOAMrnTbQ3+/n+3wl0PeZFXOlAgcsMM5wo58BiAN+P8Iqgf581z
LeNIsLv9O1978i/rdByW2ZVHp4b++O0xIuLg0dApjerdr5kD2DY1GbQkX7gHZ5D1
dYSkV6YMIcQE1U0Lz+DI9VEkjNe61eeTT1OHRaSJbdTWXRuO6A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org