Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa
File:                     3137392e34332e342e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          0sX0a9XEQwooI9XSTUHRz1z+rxsdxhVhbmU92ZGKJk4=
Subject key identifier:   1A:CB:45:1B:2E:9D:93:CA:4E:00:00:9E:F3:C9:6B:0F:02:08:3F:99
Certificate issuer:       /CN=40209EB56DBE9B90721379291AA6F10A592354FB
Certificate serial:       739DD1CAC07293CA1A93CAF3FD645CF80BD1DAA3
Authority key identifier: 40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa
Signing time:             Tue 02 Apr 2024 14:18:49 +0000
ROA not before:           Tue 02 Apr 2024 14:13:49 +0000
ROA not after:            Tue 01 Apr 2025 14:18:49 +0000
asID:                     262417
IP address blocks:        179.43.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9d:d1:ca:c0:72:93:ca:1a:93:ca:f3:fd:64:5c:f8:0b:d1:da:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40209EB56DBE9B90721379291AA6F10A592354FB
        Validity
            Not Before: Apr  2 14:13:49 2024 GMT
            Not After : Apr  1 14:18:49 2025 GMT
        Subject: CN=1ACB451B2E9D93CA4E00009EF3C96B0F02083F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:02:a3:79:b0:ec:1a:b9:53:70:d5:fe:59:fb:
                    99:9d:53:58:bf:04:93:36:3e:0b:cc:a2:38:25:74:
                    97:09:7c:e7:59:13:3c:54:f0:1c:95:88:cb:13:1f:
                    44:9f:b4:a5:ec:49:83:17:db:33:0a:f7:6d:c4:fc:
                    6c:73:a3:e7:7c:de:66:13:97:d1:1a:62:52:0a:3a:
                    7f:2e:98:fd:a0:a5:dd:40:30:c3:cb:f5:dc:e6:0e:
                    a2:88:7c:7f:4b:11:86:20:44:c2:a8:2e:a5:c6:ae:
                    62:ed:0f:50:3f:a0:4b:b8:20:4f:34:c0:3c:a8:3b:
                    17:b2:05:2b:83:d8:67:21:53:b3:0f:20:e9:71:a8:
                    92:e1:e3:12:15:cf:5e:2f:4b:0c:f3:f8:40:3a:e5:
                    0a:1b:dc:64:13:e5:0c:93:af:60:0b:72:a1:68:36:
                    69:ad:c1:ed:4f:05:ba:4d:1f:be:91:48:14:40:72:
                    46:33:56:6e:5e:68:1e:47:b7:47:ba:e1:91:49:3f:
                    64:69:fc:91:01:ce:14:9e:cb:64:e5:23:b9:8c:27:
                    31:6e:8f:8a:21:28:b2:36:6a:2c:5a:28:86:5e:ec:
                    7b:2e:63:43:2b:f2:1e:76:b1:e6:08:87:5e:d7:17:
                    02:61:f5:36:7b:5b:eb:18:01:d1:c4:6c:a1:2e:2c:
                    24:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CB:45:1B:2E:9D:93:CA:4E:00:00:9E:F3:C9:6B:0F:02:08:3F:99
            X509v3 Authority Key Identifier:
                keyid:40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/40209EB56DBE9B90721379291AA6F10A592354FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:ad:fc:ac:6d:d2:da:8c:9b:94:7e:77:ee:ab:7d:3c:43:
         8b:e4:61:be:55:80:9d:6c:48:f5:1e:ef:c8:b6:5b:31:ea:5c:
         e0:52:04:b7:51:45:e5:9c:ed:bd:b7:b2:87:a6:7a:9d:16:00:
         e1:a9:96:21:96:d5:be:a8:fb:24:26:8b:88:07:3a:ec:14:4f:
         26:63:83:96:12:eb:0d:90:b6:bf:89:36:de:c2:5a:d3:4f:30:
         55:8b:5c:8c:f6:47:57:8f:72:62:00:56:ca:96:e6:30:18:19:
         58:43:6e:87:3e:c8:fb:e7:03:2a:86:18:1c:0c:2c:5a:ca:2f:
         64:9f:1b:11:73:af:b1:29:05:de:5c:8b:6e:0d:0c:51:d6:48:
         79:bb:9d:bf:b7:3d:58:9f:b8:d4:28:da:b2:c1:ff:07:71:8a:
         ef:d3:1a:05:e3:c7:2c:38:4b:9d:4c:9a:df:0d:e1:ce:80:26:
         f0:3b:09:75:69:66:3d:a7:3d:db:69:5e:ff:09:b7:7a:01:47:
         40:b0:e3:25:68:a0:11:89:05:9d:28:13:6b:49:40:2f:17:d7:
         9c:11:8c:ff:dd:a8:38:37:14:80:90:28:ee:c2:a0:3a:27:9e:
         d1:1d:58:46:3e:70:6a:c2:43:61:d7:e8:4e:fd:09:14:14:10:
         88:af:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org