Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32382e302f32322d3232203d3e20323633343131.roa
File:                     3137392e39372e32382e302f32322d3232203d3e20323633343131.roa (raw, json)
Hash identifier:          bKEdMOt8aw8gGXtzkAYBpuz0McevlPzc3/Q2rhoMLfU=
Subject key identifier:   B2:42:F8:4E:E0:8D:D5:E2:C8:8D:A9:1E:32:2C:6E:64:B3:26:9E:F8
Certificate issuer:       /CN=F68C7F0BEF0DB5B575D96CE62D537007F901B942
Certificate serial:       5A9F5800241B734CCE570F458BBE9B495806DAE3
Authority key identifier: F6:8C:7F:0B:EF:0D:B5:B5:75:D9:6C:E6:2D:53:70:07:F9:01:B9:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F68C7F0BEF0DB5B575D96CE62D537007F901B942.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32382e302f32322d3232203d3e20323633343131.roa
Signing time:             Wed 08 Feb 2023 21:23:34 +0000
ROA not before:           Wed 08 Feb 2023 21:18:34 +0000
ROA not after:            Wed 07 Feb 2024 21:23:34 +0000
asID:                     263411
IP address blocks:        179.97.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9f:58:00:24:1b:73:4c:ce:57:0f:45:8b:be:9b:49:58:06:da:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F68C7F0BEF0DB5B575D96CE62D537007F901B942
        Validity
            Not Before: Feb  8 21:18:34 2023 GMT
            Not After : Feb  7 21:23:34 2024 GMT
        Subject: CN=B242F84EE08DD5E2C88DA91E322C6E64B3269EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:17:57:98:ce:ac:ba:9e:52:6e:10:01:e8:
                    e0:35:48:47:b0:95:6f:02:33:b5:15:ee:c3:01:91:
                    b1:85:70:35:28:ea:48:f0:e0:eb:49:86:86:01:e4:
                    61:fa:d5:f1:2f:82:99:ec:8f:00:0c:e7:b0:49:dc:
                    da:d5:7f:bf:68:28:ff:30:60:9a:65:e1:6c:7a:85:
                    1e:4c:b5:38:e8:9a:d7:0e:a9:af:04:9b:ce:c7:35:
                    61:28:4c:80:a3:14:c3:9f:92:ae:b2:14:18:f7:97:
                    18:26:7e:bd:95:f1:67:43:23:11:4a:ee:08:bd:63:
                    bc:49:03:b9:5d:93:31:0d:a6:b9:b8:20:30:a6:31:
                    4d:e1:b8:dd:f1:00:5a:74:4d:27:e3:e8:d6:18:9b:
                    b8:11:56:dc:31:69:26:71:cc:c9:bb:6d:a2:79:8d:
                    88:f2:e8:76:f4:f8:6a:c0:8e:cc:4e:8a:8b:90:b1:
                    4a:0a:f6:41:62:4b:7a:98:01:dc:db:9a:28:b9:aa:
                    57:d2:75:0f:14:97:09:4d:dd:4a:b2:ac:41:b0:f3:
                    ab:6b:58:bb:35:9a:9b:01:58:68:1e:e8:62:d8:85:
                    5e:59:fc:c3:2e:db:2a:a7:06:c2:3a:90:21:79:9f:
                    ff:98:69:bb:13:07:f0:d2:09:9e:fe:97:3c:40:24:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:42:F8:4E:E0:8D:D5:E2:C8:8D:A9:1E:32:2C:6E:64:B3:26:9E:F8
            X509v3 Authority Key Identifier:
                keyid:F6:8C:7F:0B:EF:0D:B5:B5:75:D9:6C:E6:2D:53:70:07:F9:01:B9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/F68C7F0BEF0DB5B575D96CE62D537007F901B942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F68C7F0BEF0DB5B575D96CE62D537007F901B942.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32382e302f32322d3232203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:b0:5b:4e:5b:92:d3:d9:47:ac:88:96:4b:54:6b:aa:fc:00:
         fa:a0:7d:30:c9:af:78:9f:31:d0:1d:ee:ec:75:7d:22:c5:30:
         7c:82:78:68:8b:ce:95:e2:fe:43:3e:ca:fd:13:df:8a:53:86:
         4a:6f:c3:76:73:11:b9:05:b3:80:cd:b2:f7:a2:b3:4b:22:99:
         4f:1b:fa:25:bc:d2:84:5c:71:0d:62:9e:b3:d1:aa:a2:23:71:
         d1:e6:9c:c8:87:b0:1a:c8:99:d1:df:f1:84:4b:f5:98:30:5c:
         2b:49:d1:96:0e:4b:e7:62:56:6d:c5:7a:1f:98:6c:eb:23:6b:
         2e:d5:5d:01:55:37:4e:48:66:f5:2d:bb:26:4d:08:32:75:91:
         33:20:73:30:23:bf:d1:0d:e5:85:5e:6d:1d:cb:4f:51:66:29:
         26:0b:fc:d2:60:ae:94:e6:0c:da:cd:2b:6b:3d:2e:61:9a:45:
         3a:57:a5:d7:14:1d:93:03:f2:6b:ab:e9:4d:e6:f8:32:77:78:
         91:f9:44:d8:ae:13:fd:89:7d:c6:a6:4a:b5:72:e9:b9:21:fc:
         ef:ee:d3:2f:03:bc:6d:7d:d4:81:dd:f7:c4:e0:79:ab:e3:fc:
         a8:29:b3:71:f5:79:0d:6f:54:be:5f:19:66:63:2f:76:cd:da:
         31:da:b9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org