Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa
File:                     3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa (raw, json)
Hash identifier:          bKXmXj3HVF3fMNkBtKin2yPj6gxpBI2q3evq+tkriXY=
Subject key identifier:   74:32:33:94:6C:C9:93:7F:EA:2B:66:BD:43:5C:10:E0:CA:CF:CE:17
Certificate issuer:       /CN=3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6
Certificate serial:       02368AACE5D72F29655178EC6FF895B3883265C9
Authority key identifier: 3A:5E:AC:93:0C:5E:91:DC:AA:01:57:3B:44:ED:54:C8:E9:DD:6D:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa
Signing time:             Sun 10 Sep 2023 21:00:02 +0000
ROA not before:           Sun 10 Sep 2023 20:55:02 +0000
ROA not after:            Sun 08 Sep 2024 21:00:02 +0000
asID:                     263631
IP address blocks:        179.125.48.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:36:8a:ac:e5:d7:2f:29:65:51:78:ec:6f:f8:95:b3:88:32:65:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6
        Validity
            Not Before: Sep 10 20:55:02 2023 GMT
            Not After : Sep  8 21:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:84:d2:46:ec:ba:94:9b:60:46:50:79:43:
                    7c:69:1d:2b:2e:d6:c9:1b:eb:ee:ca:a6:59:e2:2c:
                    95:12:4d:6c:13:e6:28:2d:29:2b:b2:eb:3e:fc:64:
                    a4:82:16:e1:97:9f:4d:f6:33:da:5c:24:e3:0f:40:
                    20:b4:0d:1b:4b:31:f0:28:78:07:18:d5:d2:13:eb:
                    64:fa:2e:47:fa:32:de:7e:8a:a6:f3:f3:a7:20:37:
                    bc:7e:0f:8a:db:4d:6a:ce:e7:67:5d:d7:b3:9a:e8:
                    2f:9d:4b:c9:a0:57:3f:d8:fc:ab:92:28:8f:b6:fd:
                    eb:e8:93:29:0b:fa:39:da:06:db:18:43:ec:e5:2a:
                    f3:ae:6a:b7:bf:e8:5f:97:c2:ce:26:93:59:5e:13:
                    4f:e2:5f:a1:11:69:88:5d:b5:97:8f:5c:c2:7a:ec:
                    6d:64:2c:78:fc:f5:05:f9:9b:a5:d0:a6:76:90:05:
                    d2:56:dc:a4:18:9a:aa:fe:75:67:91:c6:54:4a:96:
                    07:92:5e:39:cf:87:a9:ec:19:f8:55:98:6e:f7:84:
                    27:a4:cd:03:cb:16:7d:46:3f:70:70:a9:35:96:26:
                    e0:25:95:b2:12:0d:8c:84:df:af:e6:d4:16:9e:08:
                    f3:7c:12:fc:4a:32:33:a4:ff:28:50:90:e9:de:c9:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:32:33:94:6C:C9:93:7F:EA:2B:66:BD:43:5C:10:E0:CA:CF:CE:17
            X509v3 Authority Key Identifier:
                keyid:3A:5E:AC:93:0C:5E:91:DC:AA:01:57:3B:44:ED:54:C8:E9:DD:6D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A5EAC930C5E91DCAA01573B44ED54C8E9DD6DB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:5e:73:b4:79:41:86:38:93:8b:b6:7e:9f:60:c0:d7:70:71:
         18:22:f8:0d:3b:f6:52:65:19:ba:30:07:38:21:2f:e1:81:d9:
         da:a4:9c:42:b1:62:a0:96:9f:c9:da:91:3b:c5:2b:27:39:f5:
         d7:2b:b7:14:68:1a:99:ce:0e:43:f8:73:eb:ea:57:fe:33:ee:
         00:d9:73:40:6b:07:64:b3:a9:77:a7:75:9f:b6:7a:51:36:36:
         95:1b:ea:0e:5a:1c:f1:d6:9d:a8:0c:eb:df:bf:6c:32:12:a3:
         c3:f6:a6:39:94:2e:15:74:71:d9:96:9d:4c:dc:76:81:09:4e:
         f3:08:36:a3:2f:6d:12:f9:79:8b:55:82:bf:4b:a3:15:ab:11:
         9f:3b:20:73:0d:a7:8b:06:e1:3f:52:43:1d:74:dc:ef:12:c2:
         e8:b0:dd:01:a8:36:29:b2:25:2d:a1:b8:ac:1a:0c:54:1e:87:
         1f:06:b7:29:9a:68:84:74:f5:fe:70:6e:95:14:82:b1:2a:47:
         43:1d:0d:02:c9:1f:31:bd:83:98:93:57:de:ae:5d:40:0d:20:
         c9:7b:54:f4:cb:aa:fb:06:19:87:73:4e:3e:35:b2:57:ab:ba:
         b4:26:17:7b:5d:6f:49:7d:72:e9:47:66:5b:bd:f3:e9:8a:5b:
         85:88:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org