Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/0/3137392e3138392e3230382e302f32322d3234203d3e203238313333.roa
File:                     3137392e3138392e3230382e302f32322d3234203d3e203238313333.roa (raw, json)
Hash identifier:          OBkmwWWvIpxv03LsC28bkq8wfL3vsBwTd4GLZflwSGg=
Subject key identifier:   07:4F:56:23:08:59:31:1C:68:33:74:EC:A7:FD:74:8C:6B:0B:53:65
Certificate issuer:       /CN=D08678723E848C1EEBE8372210FC47DB5A6B5B62
Certificate serial:       402CF19FABF5484905D71597CD55CA8A78606BC1
Authority key identifier: D0:86:78:72:3E:84:8C:1E:EB:E8:37:22:10:FC:47:DB:5A:6B:5B:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D08678723E848C1EEBE8372210FC47DB5A6B5B62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/0/3137392e3138392e3230382e302f32322d3234203d3e203238313333.roa
Signing time:             Wed 17 May 2023 03:45:42 +0000
ROA not before:           Wed 17 May 2023 03:40:42 +0000
ROA not after:            Wed 15 May 2024 03:45:42 +0000
asID:                     28133
IP address blocks:        179.189.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2c:f1:9f:ab:f5:48:49:05:d7:15:97:cd:55:ca:8a:78:60:6b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D08678723E848C1EEBE8372210FC47DB5A6B5B62
        Validity
            Not Before: May 17 03:40:42 2023 GMT
            Not After : May 15 03:45:42 2024 GMT
        Subject: CN=074F56230859311C683374ECA7FD748C6B0B5365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:4c:c2:61:2b:b0:72:c0:6d:4a:55:06:11:
                    d8:90:ff:6d:a8:be:bf:4d:70:dd:b8:82:0b:8d:74:
                    f5:0f:f0:d9:5f:4e:f0:31:5e:14:b2:93:d3:31:45:
                    f8:46:2c:f4:03:97:4a:a8:0b:c4:c5:1b:c3:25:89:
                    9a:b8:a8:27:04:b3:db:d7:5a:62:da:3f:25:13:5e:
                    b4:af:cb:f4:63:52:f8:00:1f:b4:51:ee:6a:b2:87:
                    ba:55:00:92:83:63:09:59:ab:7b:15:d9:7e:5b:bc:
                    37:98:47:a3:d4:fa:7b:d2:e2:d0:98:18:7f:4a:82:
                    c0:63:9d:a8:d0:14:59:7a:04:78:33:9e:b9:64:8d:
                    28:33:17:a9:a9:a6:1c:66:af:36:27:d2:3c:77:8f:
                    e9:4f:ba:8b:a2:81:dc:63:37:e3:f8:e6:e2:c3:2c:
                    13:4a:38:02:61:a1:76:6d:74:5a:a0:fc:fb:0b:84:
                    ed:e1:50:14:ae:6d:78:7d:d0:30:21:fb:1e:bc:eb:
                    4c:f5:a9:04:23:0b:1c:1a:4e:f4:bd:27:3c:34:79:
                    43:09:5a:ba:8e:9f:02:13:3a:00:c5:86:ca:ad:da:
                    70:29:0e:83:11:f5:4c:66:66:d6:0f:63:0e:fb:58:
                    18:6d:48:e1:26:0c:38:83:09:1b:a0:21:2e:35:7b:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4F:56:23:08:59:31:1C:68:33:74:EC:A7:FD:74:8C:6B:0B:53:65
            X509v3 Authority Key Identifier:
                keyid:D0:86:78:72:3E:84:8C:1E:EB:E8:37:22:10:FC:47:DB:5A:6B:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/0/D08678723E848C1EEBE8372210FC47DB5A6B5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D08678723E848C1EEBE8372210FC47DB5A6B5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/0/3137392e3138392e3230382e302f32322d3234203d3e203238313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:ab:fb:ff:9d:cf:05:49:1c:e5:43:ee:87:3a:d5:e2:97:9c:
         ed:b5:e9:7f:54:9b:e8:e1:18:3c:4e:eb:15:12:b2:e8:12:f3:
         e2:72:a7:39:ef:8f:bb:b7:ae:38:d8:4c:25:03:68:91:db:28:
         b4:41:1e:ba:eb:0d:e6:96:c1:aa:da:19:c0:1f:1d:8c:a2:a2:
         4e:3b:d7:79:41:1d:fa:b2:5f:b0:12:bd:63:39:85:c8:e8:eb:
         59:41:23:3e:bd:93:1c:ef:00:d3:ca:53:d3:e8:a3:a8:74:91:
         2d:40:c7:ad:96:3a:aa:f1:27:73:e7:c5:90:eb:14:82:60:70:
         2f:34:e0:c5:c7:8b:43:b9:11:d5:38:0d:09:4c:2a:95:b4:cd:
         b8:3e:d8:32:f5:8d:d6:d6:11:89:92:15:49:16:ec:61:40:69:
         1d:f9:67:2c:81:30:69:a7:c5:b8:86:5b:17:a9:44:5e:36:52:
         5a:e5:a9:a5:7e:24:d8:f8:75:32:12:0d:61:f6:3c:e1:dd:9b:
         fd:86:fd:84:ff:50:b1:df:4b:05:9e:5e:4e:9a:51:79:ff:f0:
         15:07:60:e8:92:1a:91:d7:9c:8a:9d:14:89:ee:2f:d5:78:43:
         9c:b2:24:7e:4a:87:11:03:19:74:5c:c4:4b:4d:ea:3a:bf:d8:
         fc:95:42:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org