Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/3137392e302e36342e302f32322d3234203d3e20323731343539.roa
File:                     3137392e302e36342e302f32322d3234203d3e20323731343539.roa (raw, json)
Hash identifier:          zEFFIjVLDL8Wm6VqYLRRGAzwiTKnjYBzWn1aS+w6e9k=
Subject key identifier:   52:A6:A3:BF:74:75:48:A4:38:5D:7F:59:06:EC:1C:B5:0D:F7:00:F3
Certificate issuer:       /CN=E83D57ED19F07A540C6CC16DC286BB69F1243A1D
Certificate serial:       118C87F2985DEDBC6CA54553475A6196F625ABEA
Authority key identifier: E8:3D:57:ED:19:F0:7A:54:0C:6C:C1:6D:C2:86:BB:69:F1:24:3A:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E83D57ED19F07A540C6CC16DC286BB69F1243A1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/3137392e302e36342e302f32322d3234203d3e20323731343539.roa
Signing time:             Fri 25 Feb 2022 17:36:23 +0000
ROA not before:           Fri 25 Feb 2022 17:31:23 +0000
ROA not after:            Fri 24 Feb 2023 17:36:23 +0000
asID:                     271459
IP address blocks:        179.0.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8c:87:f2:98:5d:ed:bc:6c:a5:45:53:47:5a:61:96:f6:25:ab:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D57ED19F07A540C6CC16DC286BB69F1243A1D
        Validity
            Not Before: Feb 25 17:31:23 2022 GMT
            Not After : Feb 24 17:36:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:bd:80:6b:64:2a:2a:87:f5:47:a0:dc:b6:
                    76:54:3c:27:2a:8b:9d:75:86:45:f5:6d:d8:3e:e4:
                    16:8b:a2:5a:65:91:dc:87:84:c9:ae:46:6d:35:13:
                    ff:50:6b:13:4b:1f:fb:dc:7e:6a:70:32:0c:f3:f3:
                    48:99:79:a4:ec:78:05:47:4d:2e:4c:cd:62:97:fa:
                    38:ea:a2:64:4d:15:69:b6:5f:1e:96:50:34:5f:f9:
                    e7:cb:5d:3d:cc:50:2c:31:64:82:88:a6:b8:7a:d5:
                    53:8a:29:f5:5a:99:d0:c2:08:cc:79:36:56:9f:87:
                    2b:18:36:c3:9c:52:18:f3:28:54:ca:67:1b:9a:8d:
                    d0:80:31:24:83:7b:7e:66:35:47:55:ac:18:d4:a4:
                    f8:c4:58:26:40:b8:c0:69:72:73:c1:4d:3a:2b:39:
                    55:e4:78:b9:35:e2:1d:7f:a2:9c:4b:a3:32:ba:7a:
                    6d:9d:10:45:5b:6e:5e:cd:1d:3b:fe:63:09:39:23:
                    b9:12:e9:4e:11:4f:b7:25:d4:42:57:ba:ba:0c:6c:
                    8c:ba:b7:5f:3d:79:ff:a4:97:22:7b:c9:63:16:59:
                    a5:32:2a:28:64:d1:80:27:b2:77:67:0d:34:3e:b5:
                    9e:16:de:a9:1f:f1:fd:01:ef:68:df:7e:93:a6:23:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A6:A3:BF:74:75:48:A4:38:5D:7F:59:06:EC:1C:B5:0D:F7:00:F3
            X509v3 Authority Key Identifier:
                keyid:E8:3D:57:ED:19:F0:7A:54:0C:6C:C1:6D:C2:86:BB:69:F1:24:3A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/E83D57ED19F07A540C6CC16DC286BB69F1243A1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E83D57ED19F07A540C6CC16DC286BB69F1243A1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/3137392e302e36342e302f32322d3234203d3e20323731343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:63:79:f8:0e:45:0a:ca:3f:d0:d2:04:eb:a2:9c:a2:d2:f7:
         4f:3b:db:09:4c:2d:b4:8a:61:28:2e:a4:cd:15:79:9e:c9:7c:
         02:0d:c0:76:e2:67:6f:de:04:86:24:24:1b:1f:20:1d:65:16:
         01:dc:d3:4a:16:6e:38:d1:62:4d:e9:a6:93:12:68:cd:46:15:
         28:b6:b2:46:7e:e8:88:19:8a:0f:4e:08:b0:b9:36:b1:fb:66:
         13:ce:26:d0:2a:c2:35:e7:31:cc:fc:2b:18:41:d9:23:f8:54:
         0c:53:b7:3d:37:ba:8e:4d:36:91:1d:67:b9:62:76:da:78:1e:
         e2:d7:fe:e2:6d:15:fb:69:00:00:5c:2d:9d:71:d6:5c:da:4b:
         7e:26:b2:2f:91:d1:24:76:4f:37:2c:6a:53:47:93:fb:9d:e7:
         21:38:dc:5f:33:11:5b:16:07:bb:d9:ee:b4:7f:f3:bd:26:83:
         4f:cc:34:b6:d3:cc:54:c4:09:20:3d:68:58:f0:8d:76:81:28:
         e8:52:89:b4:2b:0b:eb:61:f1:b6:97:92:89:f0:80:b3:af:cc:
         37:c4:40:4a:29:67:94:9a:52:a4:54:af:a1:48:89:84:82:f1:
         b4:f5:1d:b3:34:c4:90:46:0b:11:60:1b:bb:c6:92:e3:07:0a:
         c3:4f:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org