Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32342d3234203d3e20323633343131.roa
File:                     3137392e39372e32342e302f32342d3234203d3e20323633343131.roa (raw, json)
Hash identifier:          kRjxzfgEay4sKunqIHh9EUh98MRaSaJaHJ7eeg9kZUM=
Subject key identifier:   0E:DF:A5:01:8F:A0:55:FC:4D:9E:75:25:F6:A2:F9:6A:EE:78:68:0F
Certificate issuer:       /CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
Certificate serial:       12D1D1662C9A849F06C66A55429D806F561BC09A
Authority key identifier: 8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32342d3234203d3e20323633343131.roa
Signing time:             Tue 30 Jan 2024 14:56:06 +0000
ROA not before:           Tue 30 Jan 2024 14:51:06 +0000
ROA not after:            Tue 28 Jan 2025 14:56:06 +0000
asID:                     263411
IP address blocks:        179.97.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d1:d1:66:2c:9a:84:9f:06:c6:6a:55:42:9d:80:6f:56:1b:c0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
        Validity
            Not Before: Jan 30 14:51:06 2024 GMT
            Not After : Jan 28 14:56:06 2025 GMT
        Subject: CN=0EDFA5018FA055FC4D9E7525F6A2F96AEE78680F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:8f:e7:87:b6:92:98:c7:3c:9c:32:3d:1f:
                    58:18:66:3c:60:62:43:fa:67:39:c9:b4:9c:eb:71:
                    0e:05:9c:6b:d6:75:c1:98:1e:7d:e8:f3:5d:d3:d7:
                    dc:5f:a7:c9:81:21:cb:18:a4:88:ce:2e:ad:ba:3b:
                    62:97:bc:0e:b8:e6:0f:02:7a:69:7c:b2:4a:2d:f6:
                    c3:e3:a8:30:50:29:fe:ea:dc:5e:3e:0a:c3:71:9b:
                    18:73:03:93:8a:b6:95:59:92:7e:d6:10:5d:a2:6e:
                    72:e8:bc:25:39:80:63:86:8e:f7:bc:97:b5:e0:94:
                    73:dd:32:97:13:11:56:b4:e9:bf:39:55:29:8a:90:
                    04:98:3e:3f:84:51:01:b3:76:ba:f6:cb:96:7b:26:
                    d4:79:a6:d8:65:93:20:98:b3:67:61:89:07:4c:5a:
                    7d:b4:d1:f1:d9:1b:fa:ab:2d:1e:ae:95:c8:cf:52:
                    f2:06:9f:d2:c9:66:b8:3d:be:69:a0:ef:4d:f7:01:
                    d7:3b:82:73:7d:57:18:ce:82:2e:ac:07:7b:f8:0f:
                    c8:7a:c2:88:71:8e:4b:8b:bf:35:7d:3d:0b:c3:53:
                    0b:ca:43:f4:8d:b5:ef:e9:46:cd:00:f2:79:0c:6e:
                    a3:5a:7d:9b:a0:5a:e0:36:3d:a3:5f:a1:e0:dd:54:
                    cb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DF:A5:01:8F:A0:55:FC:4D:9E:75:25:F6:A2:F9:6A:EE:78:68:0F
            X509v3 Authority Key Identifier:
                keyid:8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32342d3234203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:99:2e:67:36:82:7b:77:6e:43:bb:d5:d8:0d:4d:9d:2a:7a:
         00:0f:fd:55:bb:21:1f:55:d3:a6:68:c9:73:66:79:e0:84:c9:
         16:1f:a4:9a:d8:41:ed:4a:30:a0:6a:4a:de:6c:f5:72:c4:86:
         10:c7:e1:c3:90:69:29:7b:19:2e:92:77:55:b1:ba:52:6c:c3:
         11:36:19:94:66:31:fe:63:ca:34:55:f0:02:67:7c:2a:08:91:
         51:84:6b:fd:2e:7b:da:7d:46:63:af:9f:2b:35:49:91:2f:f0:
         fe:1c:b8:8c:99:8e:7a:ac:c8:f9:a5:30:66:12:42:71:64:00:
         51:3f:8a:08:8e:bc:40:5b:34:6b:18:a0:e3:05:21:42:11:50:
         b7:c2:02:48:70:6e:dc:05:b1:12:3c:8e:94:65:b8:c0:d3:0a:
         7e:4d:44:2c:3b:8c:92:b0:58:e8:ed:00:56:aa:73:1d:3e:3a:
         38:e4:94:a9:9c:61:04:62:d4:cc:18:47:28:a3:93:1c:e0:64:
         ae:b6:73:a0:c7:41:22:f0:b7:2f:84:fd:15:5d:b8:7b:08:16:
         13:7a:0c:a8:01:6e:4e:48:46:8c:38:8d:55:c6:8b:39:a3:0b:
         d3:79:62:21:97:c0:35:ee:09:ab:9a:5c:3e:63:4a:ab:12:a0:
         23:da:bf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org