Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32392e302f32342d3234203d3e20323633343131.roa
File:                     3137392e39372e32392e302f32342d3234203d3e20323633343131.roa (raw, json)
Hash identifier:          +scld59ldFOUD2J8bxv9yvBSwtxrWHwcBF+2D7mFKCk=
Subject key identifier:   4D:5D:BF:BE:41:A8:1F:39:93:CC:59:C3:29:AB:88:EE:5B:07:D3:82
Certificate issuer:       /CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
Certificate serial:       46A763F73C1BC6547DC1F994A601F8CAE42DE829
Authority key identifier: 8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32392e302f32342d3234203d3e20323633343131.roa
Signing time:             Tue 30 Jan 2024 14:56:05 +0000
ROA not before:           Tue 30 Jan 2024 14:51:05 +0000
ROA not after:            Tue 28 Jan 2025 14:56:05 +0000
asID:                     263411
IP address blocks:        179.97.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a7:63:f7:3c:1b:c6:54:7d:c1:f9:94:a6:01:f8:ca:e4:2d:e8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
        Validity
            Not Before: Jan 30 14:51:05 2024 GMT
            Not After : Jan 28 14:56:05 2025 GMT
        Subject: CN=4D5DBFBE41A81F3993CC59C329AB88EE5B07D382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:96:58:1a:66:7d:3d:7e:57:f4:d5:19:99:
                    03:af:d4:18:d9:ca:a7:d5:9d:72:00:07:94:17:b5:
                    f3:9e:d4:36:ba:0b:ad:11:75:26:68:43:7c:26:8e:
                    10:f6:6c:24:4c:a5:d3:1e:d8:d2:50:33:cb:cf:a6:
                    b0:e8:68:e7:fa:72:23:c1:c4:49:da:ee:96:32:36:
                    ac:a9:45:5d:d3:bb:bd:4f:df:a5:c9:9e:41:8b:cf:
                    71:07:29:15:7b:f0:04:2d:d8:31:96:9f:4c:b8:a9:
                    dd:7a:0a:9a:bb:7f:9e:76:ad:c9:05:9e:1d:a9:0c:
                    3f:ee:86:bd:02:6c:63:17:3b:be:1b:c7:5a:96:01:
                    19:17:98:b5:dc:c8:65:59:8a:bd:37:d8:bb:40:df:
                    a0:ec:0d:a5:94:b8:a3:5c:7d:51:66:8e:1c:64:1f:
                    af:03:85:5a:66:88:42:ba:17:ad:25:15:37:59:a6:
                    b4:c8:fc:62:02:99:84:03:17:ec:41:3b:8f:16:f4:
                    bc:7b:56:b4:8b:f6:86:eb:c2:66:8a:30:8b:28:c7:
                    13:e4:2b:4e:40:3f:d9:b5:6c:93:42:5a:0f:07:d6:
                    35:e1:7a:c2:dc:e9:a1:4f:d9:a1:f1:fc:94:91:29:
                    1f:a0:64:1a:c3:a3:10:27:d1:bd:78:e2:c7:5f:b7:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5D:BF:BE:41:A8:1F:39:93:CC:59:C3:29:AB:88:EE:5B:07:D3:82
            X509v3 Authority Key Identifier:
                keyid:8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32392e302f32342d3234203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:cd:1c:83:82:d5:10:13:37:60:fe:98:e9:ed:5a:dc:6b:66:
         85:68:43:f7:30:c1:d6:b2:0d:8f:6b:39:5b:ec:ca:fd:c7:69:
         11:25:7b:b5:39:24:5e:3a:dc:ab:bf:be:70:d4:0d:43:fc:6e:
         53:26:60:c1:df:31:30:36:fe:0b:cb:22:63:7a:9f:1e:3c:14:
         b4:88:85:65:6f:b2:08:98:d8:92:75:9e:17:ff:b1:ea:99:75:
         bd:04:a1:09:14:23:95:a6:6f:50:af:c5:99:c6:51:37:be:2d:
         fe:c7:eb:c2:dc:f5:b3:05:05:8b:3f:56:a3:ce:fc:00:a6:e4:
         1b:fe:38:0b:65:ef:91:f5:f5:9d:b0:e2:31:3e:79:82:92:ed:
         1b:d3:e4:fa:78:d5:3c:58:ad:62:8f:7c:99:11:73:f8:29:b9:
         f3:c6:09:fa:1a:3a:b8:83:e0:38:96:21:3a:c6:02:d9:4f:93:
         79:89:59:be:20:f4:a0:b4:bb:c4:1a:94:81:56:d3:48:25:1d:
         f9:0d:01:2e:28:35:79:80:4b:a3:07:ab:ad:0b:01:ca:51:d5:
         3f:54:da:40:db:9a:a9:70:7f:4d:d6:fc:84:cb:88:c9:61:f8:
         c1:76:d3:0f:96:70:2d:ed:0d:bd:e5:af:51:64:16:8c:be:97:
         46:ef:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org