Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e33312e302f32342d3234203d3e20323633343131.roa
File:                     3137392e39372e33312e302f32342d3234203d3e20323633343131.roa (raw, json)
Hash identifier:          4r92m/D6NJQXakvSmW9gShuHtD3eH18O/XNuluQRxXE=
Subject key identifier:   11:C6:7A:58:F2:9A:FC:31:52:D6:4D:83:9C:D7:DC:EC:9F:60:5A:AC
Certificate issuer:       /CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
Certificate serial:       6FE61820078D5709D6119B5F8F63C842986CDB8C
Authority key identifier: 8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e33312e302f32342d3234203d3e20323633343131.roa
Signing time:             Tue 30 Jan 2024 14:56:07 +0000
ROA not before:           Tue 30 Jan 2024 14:51:07 +0000
ROA not after:            Tue 28 Jan 2025 14:56:07 +0000
asID:                     263411
IP address blocks:        179.97.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e6:18:20:07:8d:57:09:d6:11:9b:5f:8f:63:c8:42:98:6c:db:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9
        Validity
            Not Before: Jan 30 14:51:07 2024 GMT
            Not After : Jan 28 14:56:07 2025 GMT
        Subject: CN=11C67A58F29AFC3152D64D839CD7DCEC9F605AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4d:08:5d:7c:a4:35:ce:2b:78:91:6c:2a:6e:
                    4a:6a:2c:64:c4:6c:ec:98:bf:76:e1:37:4b:ad:e3:
                    3b:db:81:80:47:a1:16:42:64:86:29:ae:27:59:78:
                    4f:70:da:b1:d0:d8:2b:b7:e0:39:87:ec:de:a0:c3:
                    83:19:6b:cf:d0:56:c6:80:03:d5:ed:6e:93:b9:da:
                    1e:94:c0:e1:45:ad:28:c5:8a:57:69:2a:da:a0:07:
                    1a:7f:a4:3c:ec:9b:74:c1:12:82:2d:33:9a:23:63:
                    93:d6:2e:de:18:a7:ed:97:e5:45:a0:5b:a1:5f:09:
                    70:73:fd:28:89:40:a4:c9:fd:8c:b4:63:f4:c0:95:
                    50:58:3c:b3:71:79:81:65:20:2c:cd:5d:2d:2f:4a:
                    3d:08:4e:cb:2f:92:a3:0e:86:1f:6f:cd:0c:1b:90:
                    19:48:63:b5:26:cd:c3:fa:dc:22:88:e9:ed:94:36:
                    82:e1:7f:03:c6:47:c7:86:75:e7:ca:89:e1:90:45:
                    36:e5:58:82:4b:fc:ce:97:2b:0b:d7:42:db:7a:a4:
                    fa:38:62:3b:ab:95:b1:04:92:d1:c4:4e:15:cd:f3:
                    95:a0:35:59:57:b1:d0:bd:c5:ce:48:20:75:f8:57:
                    8c:60:65:a3:a6:71:b5:b4:9c:63:6b:79:30:79:67:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C6:7A:58:F2:9A:FC:31:52:D6:4D:83:9C:D7:DC:EC:9F:60:5A:AC
            X509v3 Authority Key Identifier:
                keyid:8B:D2:57:0B:5B:ED:55:7C:41:9B:EB:CE:A4:FB:95:AD:83:68:F7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BD2570B5BED557C419BEBCEA4FB95AD8368F7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e33312e302f32342d3234203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e3:93:bb:94:bd:a2:b7:6e:4f:d7:1b:ed:1b:e3:61:e1:57:
         2b:32:14:78:3b:de:bc:63:76:bd:96:17:aa:5f:f9:f6:1b:e9:
         fa:75:aa:be:16:8c:25:17:20:83:7d:ed:26:4f:8c:8c:ca:d0:
         6f:e5:40:14:8a:bb:f5:dc:c1:ba:6b:d6:49:8e:49:92:ca:09:
         0d:cc:e0:98:43:61:d5:d1:de:49:b6:c8:9a:64:ed:26:2e:bc:
         61:d3:d1:8d:d8:5e:64:8e:45:ae:2d:00:e6:e1:b1:39:fb:c5:
         2c:24:ea:3d:58:43:bd:7a:cc:91:f7:3a:46:58:91:85:c7:d4:
         2a:45:b7:91:a6:c5:cf:a7:cf:eb:e3:53:2e:0c:aa:b2:9d:3a:
         c9:9f:6f:32:7e:a9:b3:66:e4:0f:c5:74:0c:0a:0a:db:74:9a:
         dd:db:68:82:39:9f:07:42:7f:de:39:e5:ea:14:e3:14:0d:97:
         cc:67:11:44:fc:2d:24:41:24:28:b7:c1:9c:4a:c2:7e:94:73:
         c5:4e:a3:d3:96:55:7a:12:e3:91:c1:81:db:1e:86:e5:59:6a:
         dc:50:77:b7:9b:7e:d2:90:1d:27:99:e9:85:16:c7:45:92:10:
         15:2e:63:da:6f:e1:0e:e2:8f:2e:af:eb:95:81:24:98:31:e3:
         f7:60:77:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:57 2024 by rpki-client on console-ams.rpki-client.org