Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32312d3234203d3e20323633343131.roa
File:                     3137392e39372e32342e302f32312d3234203d3e20323633343131.roa (raw, json)
Hash identifier:          UCcFTrELygLLsKdY/FZ2RQvFIyht1TR/3ZZLfDzHMcc=
Subject key identifier:   9F:5E:EC:60:7A:2D:E6:9B:9C:88:A6:3C:19:10:03:B9:90:BD:A1:CE
Certificate issuer:       /CN=7C9AEAFC6F02C611FEAC84D565E8668D1C98210B
Certificate serial:       3E06A3D294183752E99D60E7E1153FDD8943249B
Authority key identifier: 7C:9A:EA:FC:6F:02:C6:11:FE:AC:84:D5:65:E8:66:8D:1C:98:21:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C9AEAFC6F02C611FEAC84D565E8668D1C98210B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32312d3234203d3e20323633343131.roa
Signing time:             Tue 10 Jan 2023 19:00:00 +0000
ROA not before:           Tue 10 Jan 2023 18:55:00 +0000
ROA not after:            Tue 09 Jan 2024 19:00:00 +0000
asID:                     263411
IP address blocks:        179.97.24.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:06:a3:d2:94:18:37:52:e9:9d:60:e7:e1:15:3f:dd:89:43:24:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C9AEAFC6F02C611FEAC84D565E8668D1C98210B
        Validity
            Not Before: Jan 10 18:55:00 2023 GMT
            Not After : Jan  9 19:00:00 2024 GMT
        Subject: CN=9F5EEC607A2DE69B9C88A63C191003B990BDA1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:77:a9:5f:c9:ea:52:b6:c7:69:fb:93:9a:
                    db:df:f3:9b:24:d7:16:e3:86:a3:68:8b:07:e8:4b:
                    73:a9:b2:55:e8:c1:1a:d1:a5:59:e7:5a:5a:48:25:
                    5c:a7:4d:8a:84:d3:4e:51:61:bf:89:0d:8c:d8:4c:
                    0d:9f:6d:27:1c:d6:09:33:fd:c6:ba:71:81:b2:9f:
                    d9:3c:ac:86:02:c6:c2:a2:63:8a:c2:e9:86:64:b0:
                    d9:ed:08:e8:cc:3a:45:e4:1a:72:ed:ca:a7:e2:ec:
                    e3:d8:9a:a6:7d:8a:02:93:ed:50:7c:9c:45:f0:cc:
                    30:f8:2b:c7:79:ed:f7:87:25:ae:4f:34:ac:bb:bb:
                    74:2e:21:84:16:27:e7:fb:df:48:8d:6b:4c:1a:9b:
                    54:ce:48:f3:7a:63:fe:0a:2f:69:95:8e:17:50:82:
                    0a:ac:a3:b0:96:f6:7b:3c:d6:a7:eb:ec:0f:2a:95:
                    92:e7:67:41:ef:59:c3:4f:39:be:97:84:3c:77:bb:
                    49:25:ee:3c:4f:63:2d:aa:33:b3:50:4a:87:26:da:
                    db:67:09:08:24:e9:31:01:07:3a:de:9e:03:73:82:
                    10:aa:af:4e:d6:ff:dd:83:38:4a:48:b9:4e:66:72:
                    80:cb:d5:85:e2:f9:b1:a8:e4:f7:a8:05:16:65:1d:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5E:EC:60:7A:2D:E6:9B:9C:88:A6:3C:19:10:03:B9:90:BD:A1:CE
            X509v3 Authority Key Identifier:
                keyid:7C:9A:EA:FC:6F:02:C6:11:FE:AC:84:D5:65:E8:66:8D:1C:98:21:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/7C9AEAFC6F02C611FEAC84D565E8668D1C98210B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C9AEAFC6F02C611FEAC84D565E8668D1C98210B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32312d3234203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:ed:dd:fb:c4:56:63:0b:13:f1:df:98:90:ce:4b:7c:93:80:
         61:cf:b1:33:82:cd:de:c3:4c:c6:e8:77:8c:bb:e2:10:4f:30:
         2c:5c:f4:24:1d:d0:9c:a4:ce:b0:2c:a2:0c:0f:07:3e:15:ec:
         6a:57:4c:a9:81:18:0a:a4:f8:cb:60:1d:d1:26:04:e2:83:89:
         74:7b:ed:1f:14:bb:9f:05:52:dc:d4:5f:98:f6:74:30:61:75:
         a4:7c:c0:b9:37:d5:44:a9:32:6e:f7:f8:d4:96:53:00:29:a3:
         44:d3:94:f3:41:da:e4:77:62:c3:c4:a7:d7:a6:52:46:c5:a3:
         ee:c3:dd:76:42:01:07:08:62:fb:e8:2d:f0:8c:3e:80:03:c1:
         7c:45:45:6e:cd:1d:8e:d7:aa:18:7d:66:5c:15:0a:ea:9a:9e:
         1a:62:c3:3d:17:5b:84:96:e1:a6:65:ec:4f:4c:b2:89:bd:f4:
         78:fb:17:b2:8b:52:f3:f3:d6:9f:ea:6e:39:46:02:71:3f:18:
         81:58:39:3b:67:5d:71:3a:97:f7:92:5f:9d:cc:47:41:7c:f2:
         6b:6b:d8:ce:80:d3:89:cb:73:50:c4:9b:97:0c:f8:6d:3c:cd:
         15:d5:31:94:bf:48:92:65:2d:6d:6b:af:30:0e:e4:1f:87:64:
         f2:16:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org