Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32332d3233203d3e20323634383836.roa
File:                     3137392e3130382e34342e302f32332d3233203d3e20323634383836.roa (raw, json)
Hash identifier:          AFrEiN0pQDIWSogk2EJ9yZZGVJfpkY2DzGKmFztbmaQ=
Subject key identifier:   DA:B0:8E:14:94:0D:77:EC:9D:17:F6:CA:9D:FF:15:20:C5:65:D9:28
Certificate issuer:       /CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
Certificate serial:       602000A19EC1FF136E389E2601CED007D6D1C09F
Authority key identifier: BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32332d3233203d3e20323634383836.roa
Signing time:             Thu 17 Nov 2022 18:25:12 +0000
ROA not before:           Thu 17 Nov 2022 18:20:12 +0000
ROA not after:            Thu 16 Nov 2023 18:25:12 +0000
asID:                     264886
IP address blocks:        179.108.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:20:00:a1:9e:c1:ff:13:6e:38:9e:26:01:ce:d0:07:d6:d1:c0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
        Validity
            Not Before: Nov 17 18:20:12 2022 GMT
            Not After : Nov 16 18:25:12 2023 GMT
        Subject: CN=DAB08E14940D77EC9D17F6CA9DFF1520C565D928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:be:0b:d2:d9:8e:69:2b:56:f1:6c:bb:2d:
                    15:bc:98:e3:e2:f6:c2:22:e3:0c:88:c4:a1:59:bb:
                    02:01:34:7f:b5:78:aa:91:2a:01:ca:51:2e:d0:78:
                    ef:0c:a9:b9:b6:05:23:20:80:5e:db:34:72:94:8a:
                    c4:45:03:e9:8a:23:f1:2f:36:52:7a:31:84:58:93:
                    75:aa:e4:26:90:ea:7b:3f:fc:15:a7:57:61:2f:b4:
                    54:38:a3:be:4f:26:5a:e3:24:1b:f7:63:99:58:84:
                    a0:b9:da:18:71:e2:dd:ed:99:4e:2d:6e:bf:4c:11:
                    ea:d4:6a:3e:a8:50:ec:34:16:5b:41:06:e0:88:c0:
                    4d:42:4e:5a:28:76:4c:5f:de:9e:b4:35:8b:0e:d3:
                    8c:a8:0a:d6:b6:7f:6b:46:6c:d4:92:5d:ed:25:eb:
                    ad:93:07:6b:7e:ad:1b:9a:95:ab:b6:45:b8:f2:8a:
                    d5:cc:84:6a:ce:d8:1e:07:99:34:06:a0:0e:d9:04:
                    ba:8c:4e:58:1e:45:65:a0:68:6d:0d:18:4e:82:6f:
                    43:6f:58:3e:98:8f:1c:76:ae:b6:e7:c3:ee:4c:e0:
                    e8:9b:c4:64:08:7c:04:4f:c7:9b:27:a4:17:48:52:
                    3e:9e:23:30:1e:df:20:84:02:d7:9f:66:1a:fc:f5:
                    82:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B0:8E:14:94:0D:77:EC:9D:17:F6:CA:9D:FF:15:20:C5:65:D9:28
            X509v3 Authority Key Identifier:
                keyid:BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32332d3233203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:d0:ae:f3:84:8c:d9:2c:c9:db:c3:31:af:e0:9d:4e:24:5c:
         67:07:fd:45:da:4b:40:4b:1e:d3:26:cd:d4:fd:58:a8:d1:11:
         f7:fd:ca:b0:60:22:24:01:98:68:ef:fb:7f:db:94:55:af:d8:
         e4:fb:5d:82:5c:31:4d:fe:ac:a2:46:c8:60:87:83:0b:c9:6d:
         07:2b:dc:f1:fa:7d:60:6c:6c:6e:21:11:c4:0e:4d:c2:90:15:
         b6:7f:98:06:6f:98:82:42:ce:d4:37:44:ef:91:6b:82:db:ba:
         ba:62:c6:41:90:da:8b:25:f6:06:cb:06:e2:96:cf:d3:cb:24:
         e3:68:62:27:cb:b1:5e:58:51:d1:f4:e1:28:8b:63:c3:cb:0d:
         13:7f:67:60:83:2b:82:3e:0b:0b:58:32:b8:ea:cc:d3:09:b7:
         a8:66:78:02:0f:7b:79:7f:24:4e:bb:8b:14:01:36:ed:30:8f:
         32:e9:8f:3d:d1:18:88:f3:25:22:41:a0:8f:97:87:53:4a:b1:
         37:59:1c:72:76:9f:27:71:05:35:bb:dd:5e:7a:57:57:94:d4:
         ad:0a:dd:33:13:1a:93:82:39:49:88:f1:5d:55:42:28:8d:76:
         4c:96:98:dd:c5:c4:e2:c1:29:3f:54:96:58:ca:f6:9b:9b:44:
         99:bc:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org