Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/3137392e34382e38342e302f32322d3234203d3e20323731303734.roa
File:                     3137392e34382e38342e302f32322d3234203d3e20323731303734.roa (raw, json)
Hash identifier:          DIPQqd54OTGAbX+wBl6jV9q42AeGN3gF4mp5HRgJqww=
Subject key identifier:   93:9E:BD:50:6D:7E:05:9F:1B:F3:7C:09:A0:6C:49:18:11:68:97:23
Certificate issuer:       /CN=BA657BA9E7EF447FE8515348926AE1FE539F0EA5
Certificate serial:       2626C0F7FDCF149B371259D913DEEA36E2FAB91A
Authority key identifier: BA:65:7B:A9:E7:EF:44:7F:E8:51:53:48:92:6A:E1:FE:53:9F:0E:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA657BA9E7EF447FE8515348926AE1FE539F0EA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/3137392e34382e38342e302f32322d3234203d3e20323731303734.roa
Signing time:             Thu 17 Mar 2022 15:00:01 +0000
ROA not before:           Thu 17 Mar 2022 14:55:01 +0000
ROA not after:            Thu 16 Mar 2023 15:00:01 +0000
asID:                     271074
IP address blocks:        179.48.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:26:c0:f7:fd:cf:14:9b:37:12:59:d9:13:de:ea:36:e2:fa:b9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA657BA9E7EF447FE8515348926AE1FE539F0EA5
        Validity
            Not Before: Mar 17 14:55:01 2022 GMT
            Not After : Mar 16 15:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:b3:05:91:4c:1f:bf:eb:ce:27:8a:01:ee:
                    da:1a:83:02:bc:bc:c8:57:65:42:3e:96:a6:c4:4f:
                    1b:d5:e3:72:81:c3:ed:d1:74:7d:f3:01:d8:11:8d:
                    b1:0f:7e:a2:9b:58:49:57:f6:e7:15:dd:cb:86:8b:
                    58:50:d0:a4:42:64:6f:6c:95:11:87:b9:fb:49:cf:
                    47:ac:7e:46:14:c0:e3:5a:dd:ab:a9:3f:56:3b:70:
                    ce:9f:e9:49:77:9e:72:c0:b9:c9:d1:99:d6:f0:6d:
                    cf:fe:c4:b1:07:5f:29:20:7f:26:2c:cd:92:51:e7:
                    8f:1c:04:df:c7:fe:48:38:32:f9:f6:37:8e:3b:2d:
                    53:c8:04:c4:89:66:d0:53:05:51:0b:0b:76:e7:cc:
                    c0:87:e5:a3:1f:04:3b:02:66:e9:ae:92:23:a1:83:
                    2d:4c:27:fc:48:ea:5d:d2:af:e4:65:6d:79:74:b7:
                    85:98:3a:1e:ae:09:bc:6a:59:7b:a9:30:4a:84:2d:
                    04:ef:62:d4:23:28:a9:35:e3:bf:b8:1e:c5:91:ec:
                    e3:62:f0:97:00:7c:d0:9d:59:95:23:3c:4b:c8:f4:
                    2f:97:52:fd:dd:80:04:49:a3:44:6f:ca:c5:a3:1d:
                    0c:14:17:a1:0e:fd:8c:98:a2:ff:67:20:e1:d3:ff:
                    bb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9E:BD:50:6D:7E:05:9F:1B:F3:7C:09:A0:6C:49:18:11:68:97:23
            X509v3 Authority Key Identifier:
                keyid:BA:65:7B:A9:E7:EF:44:7F:E8:51:53:48:92:6A:E1:FE:53:9F:0E:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/BA657BA9E7EF447FE8515348926AE1FE539F0EA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA657BA9E7EF447FE8515348926AE1FE539F0EA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdoHKou8jAw1N458ZhsPPidp8wsYUtWg8ohy6PizqnLi/0/3137392e34382e38342e302f32322d3234203d3e20323731303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:de:9e:57:b3:ff:6e:a1:2f:79:ad:06:3d:7a:c7:04:2f:69:
         7d:97:ca:7a:2c:7f:3a:ad:e8:41:2b:60:a2:5a:a3:d3:6b:de:
         cb:66:d6:08:5e:a9:92:ba:d8:0e:bd:3c:97:fd:a7:19:d5:94:
         ae:f3:85:2c:3f:66:e2:6f:95:c1:75:b0:24:bd:90:17:e0:4f:
         3a:eb:b3:ca:b7:ee:06:4b:8f:12:55:48:59:e2:b3:39:0e:17:
         a9:4a:64:c1:32:ba:2a:a2:ab:d3:b9:04:30:8d:f6:63:04:67:
         ec:c8:34:6d:ee:61:67:4f:8c:84:74:7b:30:46:e9:42:0b:82:
         bc:51:db:f7:4e:7c:ae:13:c5:3b:b4:d5:cd:7a:35:6a:2e:bd:
         3e:0d:79:79:91:0f:86:98:f1:9c:49:9f:da:93:cd:bd:f0:2f:
         22:8d:6f:03:a2:ab:33:06:2b:4a:9b:3e:ba:12:ca:f1:23:de:
         67:18:9a:ca:61:6f:fa:e6:88:e7:d7:b1:27:56:20:4d:3d:1b:
         f1:53:ae:30:1c:b7:fb:43:aa:a1:a1:7c:19:e4:06:0a:cc:51:
         00:c2:ce:9b:a4:ac:fb:e1:71:dd:09:e7:f7:26:4f:74:c1:fe:
         3e:a5:ef:cf:7d:d8:b8:14:eb:0a:3d:ac:58:07:a9:55:40:3f:
         71:14:04:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org