Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32382e302f32342d3234203d3e20323633343131.roa
File:                     3137392e39372e32382e302f32342d3234203d3e20323633343131.roa (raw, json)
Hash identifier:          lrXOhs6nSKcIVt0e8uFDCaLmY5jUX+FgniQtWcvH+mc=
Subject key identifier:   46:2D:8F:47:B0:CE:91:39:95:E8:B9:96:F3:0F:E3:15:D0:27:51:2D
Certificate issuer:       /CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
Certificate serial:       6C73B55D2AA55B5E4FBC11110C0BDED2FB28D898
Authority key identifier: 8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32382e302f32342d3234203d3e20323633343131.roa
Signing time:             Tue 30 Jan 2024 14:56:09 +0000
ROA not before:           Tue 30 Jan 2024 14:51:09 +0000
ROA not after:            Tue 28 Jan 2025 14:56:09 +0000
asID:                     263411
IP address blocks:        179.97.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:73:b5:5d:2a:a5:5b:5e:4f:bc:11:11:0c:0b:de:d2:fb:28:d8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
        Validity
            Not Before: Jan 30 14:51:09 2024 GMT
            Not After : Jan 28 14:56:09 2025 GMT
        Subject: CN=462D8F47B0CE913995E8B996F30FE315D027512D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:86:5f:7d:c4:ac:96:06:62:6b:85:c2:97:
                    68:f8:dc:ec:6c:37:50:d3:d0:27:b0:f4:4c:a5:9f:
                    2b:2e:70:64:7f:96:1b:6d:55:91:9f:c4:1c:10:ad:
                    c8:f0:22:78:32:63:82:1e:d2:e7:19:aa:a4:c6:7a:
                    58:1c:f5:43:64:ac:02:18:69:bf:a2:cd:ad:12:93:
                    4c:7d:4a:77:2e:f5:77:e3:4e:f8:1c:9a:a3:fe:32:
                    23:8e:49:50:a2:56:a3:5c:40:04:c8:bb:1e:83:db:
                    c1:6b:e5:b7:2e:9f:18:29:11:de:95:8e:a9:76:57:
                    e1:c9:ee:c8:d7:20:4d:b9:da:16:68:39:19:d9:97:
                    bb:b9:e5:5a:e0:c8:4f:0a:a6:94:e5:9e:8e:e6:2c:
                    bc:c4:ad:73:5b:8d:b3:89:63:7b:6d:97:e4:56:46:
                    de:14:b1:50:13:e1:3c:b8:c6:f8:47:f7:d8:3b:ca:
                    98:70:cb:11:b4:71:d8:1f:10:ca:8a:df:91:9a:c1:
                    cc:8c:d6:ac:59:01:d6:a8:cd:2c:06:e9:55:65:20:
                    61:ac:ac:00:bc:46:2e:82:78:2b:c4:7a:76:99:e2:
                    78:3e:6d:54:07:66:a4:c8:6f:97:12:8f:f4:e7:4b:
                    8d:27:5c:24:c2:fa:df:92:b7:48:da:cc:3a:1e:97:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2D:8F:47:B0:CE:91:39:95:E8:B9:96:F3:0F:E3:15:D0:27:51:2D
            X509v3 Authority Key Identifier:
                keyid:8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32382e302f32342d3234203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:1a:d0:fa:c8:08:a7:bf:e6:5a:1a:fa:ce:75:02:15:25:d2:
         54:13:53:d3:6f:2a:b9:ea:34:55:75:98:99:a2:bb:26:d6:72:
         18:a2:a6:1e:53:36:0d:7e:be:9c:90:71:e3:af:0c:5c:d2:71:
         66:61:56:19:54:89:b6:ad:ed:6c:6f:92:62:e8:a0:64:91:f3:
         7f:cb:c7:bc:2d:b1:73:c7:f6:4b:1f:cc:e0:c8:27:41:bb:32:
         2f:2a:cb:92:58:83:9e:16:07:60:69:91:fc:5d:84:0e:eb:2e:
         1d:7a:f4:f9:e5:85:d6:c8:01:11:e4:96:0f:48:87:2d:d9:2a:
         6f:d3:1e:17:ad:9d:7f:aa:1c:d9:17:1f:84:95:a6:8d:18:1f:
         26:47:c4:50:4a:dc:18:74:10:a2:15:be:81:04:ec:13:58:e3:
         8a:80:fd:9f:9a:fd:ed:dd:38:5a:90:80:19:b2:5b:55:26:71:
         9f:92:df:f1:6d:6d:a8:aa:86:12:43:a1:c1:73:b4:d2:bf:4a:
         04:9a:55:6a:23:69:0c:8c:ad:a5:77:c3:64:40:2b:24:d6:1d:
         67:5e:4b:34:76:89:2e:5d:b1:a8:0f:5f:d4:ca:a2:c7:fe:6f:
         3a:f2:d7:14:20:ed:4a:b3:23:b4:04:9d:93:c2:2f:23:a3:a8:
         e6:c9:15:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org