Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/0/3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa
File:                     3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (raw, json)
Hash identifier:          Y8L6KH3Pvbbk2KqJ4EIwfGAn33pxtgO4ccmyPEmr0d4=
Subject key identifier:   82:A5:24:FF:9E:2E:9A:0E:9B:5A:AA:CF:D4:D3:EC:5F:74:95:95:C8
Certificate issuer:       /CN=BF5582CD642E6E69BB0917BB324B8145EB6E543B
Certificate serial:       2937EDBC0F0055E6E02464B5DAF87752F0E0F234
Authority key identifier: BF:55:82:CD:64:2E:6E:69:BB:09:17:BB:32:4B:81:45:EB:6E:54:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF5582CD642E6E69BB0917BB324B8145EB6E543B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/0/3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa
Signing time:             Fri 15 Dec 2023 23:07:38 +0000
ROA not before:           Fri 15 Dec 2023 23:02:38 +0000
ROA not after:            Fri 13 Dec 2024 23:07:38 +0000
asID:                     263284
IP address blocks:        179.107.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:37:ed:bc:0f:00:55:e6:e0:24:64:b5:da:f8:77:52:f0:e0:f2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF5582CD642E6E69BB0917BB324B8145EB6E543B
        Validity
            Not Before: Dec 15 23:02:38 2023 GMT
            Not After : Dec 13 23:07:38 2024 GMT
        Subject: CN=82A524FF9E2E9A0E9B5AAACFD4D3EC5F749595C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:38:e4:a5:c0:ef:7e:cd:eb:7c:a8:a6:ef:
                    64:8d:be:12:b7:de:39:74:e9:d1:3d:52:40:26:6a:
                    13:c8:fd:ac:67:26:79:4f:c2:e9:13:69:d6:1f:da:
                    4e:5f:83:a2:57:b5:3e:9d:53:6b:c8:ea:a0:6a:e7:
                    fc:5c:ee:f3:d0:73:9e:78:a4:1a:81:40:48:03:88:
                    f0:8f:54:62:ed:3b:41:5c:38:83:c2:fb:1d:08:63:
                    f4:9f:ab:46:9b:d1:4f:56:87:ea:c7:9d:29:f5:8b:
                    31:5a:4f:1e:a9:89:4d:ac:20:ec:2b:24:cf:fc:df:
                    56:1c:b3:c9:3f:69:07:ff:cf:4b:bf:ab:29:eb:1a:
                    08:2e:f6:d3:74:4d:c2:13:bc:d7:71:8d:63:df:6b:
                    dd:02:fa:c8:22:64:73:82:17:0d:8c:34:78:69:0c:
                    dc:1c:d3:a8:10:96:c7:ee:36:c7:71:bf:f8:99:9b:
                    cb:1b:00:b5:24:ce:f2:e8:8b:dc:f7:e0:7a:58:81:
                    08:e1:f9:c6:08:2c:1e:77:26:c8:ec:29:e5:46:d2:
                    e2:50:d1:43:d7:af:08:72:6d:23:1b:03:8a:0a:98:
                    7d:86:ac:56:f7:bb:c7:19:63:8e:fb:5b:8d:df:d3:
                    b9:dd:69:a7:71:b0:6c:32:9c:71:80:b7:3e:d7:63:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A5:24:FF:9E:2E:9A:0E:9B:5A:AA:CF:D4:D3:EC:5F:74:95:95:C8
            X509v3 Authority Key Identifier:
                keyid:BF:55:82:CD:64:2E:6E:69:BB:09:17:BB:32:4B:81:45:EB:6E:54:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/0/BF5582CD642E6E69BB0917BB324B8145EB6E543B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF5582CD642E6E69BB0917BB324B8145EB6E543B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/0/3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:1c:0e:00:62:44:d2:bf:50:32:63:24:db:fd:71:68:c9:8b:
         22:06:fa:de:27:a4:35:7d:88:fe:52:f4:c8:85:ae:24:f4:e1:
         e2:46:6e:c7:a3:b0:4b:71:ae:c2:60:15:6d:62:75:7d:83:4f:
         d7:72:38:f1:91:d9:0b:69:b3:47:61:ba:77:f5:26:3e:cb:21:
         6d:bf:30:2f:6d:a3:76:24:9c:6d:47:44:d0:ac:c9:ed:f5:fb:
         8e:9b:3c:3d:1f:57:f2:97:01:0f:f4:dd:53:95:8a:de:40:0d:
         ec:dd:f0:d6:12:4a:7b:87:c8:7d:15:b7:5b:21:48:e3:eb:69:
         26:29:9b:ae:3e:36:36:f6:35:e4:b5:e9:13:d2:a3:8e:15:de:
         ae:7f:2c:9f:2e:07:1a:a1:79:ab:86:b1:54:c7:77:74:3d:dd:
         a1:b5:ed:1b:7c:61:47:b1:ab:f9:54:14:57:15:cb:9f:b1:5d:
         44:4d:c6:99:bb:79:ee:5d:f4:e3:45:78:59:9a:ce:9f:0c:5b:
         94:6e:3f:8b:d0:e2:fd:99:43:69:82:60:5b:ca:1f:3e:67:8d:
         01:1a:d0:98:b4:a1:0e:4e:0c:aa:f2:16:41:85:da:b1:25:fe:
         54:5b:f8:c6:ca:2e:4e:b3:1e:91:e4:86:c0:8e:29:5f:69:b4:
         bc:51:50:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org