Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/3137392e3132372e3234382e302f32312d3332203d3e20323633363435.roa
File:                     3137392e3132372e3234382e302f32312d3332203d3e20323633363435.roa (raw, json)
Hash identifier:          GsPdVe29PChw5B7JiT/gSdalSE5NlJGcjWpXcQ95en8=
Subject key identifier:   14:0D:84:F5:BA:6A:58:49:68:3D:16:30:71:6B:4F:DE:0A:10:51:1B
Certificate issuer:       /CN=F29AFCEEECA608E1BCB2DEC93EC96356DB7FC31A
Certificate serial:       3F1F7F3A747F5328E5C3D91BBB4A0036C10EC2D1
Authority key identifier: F2:9A:FC:EE:EC:A6:08:E1:BC:B2:DE:C9:3E:C9:63:56:DB:7F:C3:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29AFCEEECA608E1BCB2DEC93EC96356DB7FC31A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/3137392e3132372e3234382e302f32312d3332203d3e20323633363435.roa
Signing time:             Tue 08 Nov 2022 16:01:12 +0000
ROA not before:           Tue 08 Nov 2022 15:56:12 +0000
ROA not after:            Tue 07 Nov 2023 16:01:12 +0000
asID:                     263645
IP address blocks:        179.127.248.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1f:7f:3a:74:7f:53:28:e5:c3:d9:1b:bb:4a:00:36:c1:0e:c2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29AFCEEECA608E1BCB2DEC93EC96356DB7FC31A
        Validity
            Not Before: Nov  8 15:56:12 2022 GMT
            Not After : Nov  7 16:01:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:4a:1d:c5:19:85:9d:f0:42:ff:75:92:f2:
                    61:0b:30:13:c4:70:22:7a:18:66:85:f3:5c:99:2f:
                    0c:cb:64:53:9e:f1:48:54:86:a6:d9:88:d1:8d:0c:
                    b6:0d:db:69:b4:37:47:22:74:14:7c:d7:b3:55:9c:
                    76:5a:3a:40:0c:74:6e:f2:5a:24:ff:2f:f3:9a:49:
                    10:ee:ac:23:87:58:6b:97:50:b3:f0:6f:9f:0f:fe:
                    9e:e6:0c:24:f2:81:a6:63:f2:b6:a8:bb:a1:4f:df:
                    99:24:83:91:37:a1:3b:18:50:ec:2e:e4:c6:c5:54:
                    ba:73:9f:4d:bf:1e:b4:7e:54:0a:1e:2c:c2:12:58:
                    4d:93:61:d1:bd:9a:4b:ef:37:b9:85:36:30:f6:5f:
                    ee:bd:cc:77:59:6c:bb:ac:03:3b:4d:f1:72:63:6c:
                    a7:ac:5d:87:ca:c4:32:34:16:5d:ff:8b:b7:6a:32:
                    fb:f2:fc:1b:49:9b:cd:28:9f:d0:a5:d4:b8:08:1d:
                    25:7f:57:c4:d4:af:fd:e8:73:20:1b:aa:9d:ad:88:
                    0d:2c:d7:63:7a:1f:95:94:1a:d5:07:5b:e2:79:4e:
                    52:1e:e4:27:4c:a6:fa:ce:76:55:88:72:5d:4c:6b:
                    63:4f:b6:ec:e7:0c:46:fa:c2:08:42:da:39:26:ee:
                    1c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0D:84:F5:BA:6A:58:49:68:3D:16:30:71:6B:4F:DE:0A:10:51:1B
            X509v3 Authority Key Identifier:
                keyid:F2:9A:FC:EE:EC:A6:08:E1:BC:B2:DE:C9:3E:C9:63:56:DB:7F:C3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/F29AFCEEECA608E1BCB2DEC93EC96356DB7FC31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29AFCEEECA608E1BCB2DEC93EC96356DB7FC31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/0/3137392e3132372e3234382e302f32312d3332203d3e20323633363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:46:fa:7e:c3:38:f5:97:26:9d:bd:a0:87:fc:b2:4f:8a:36:
         c5:b2:58:e7:43:ea:f8:7b:6d:e0:39:1c:ce:e3:9b:bd:e7:1f:
         94:87:34:bb:eb:24:51:6c:a2:2d:f6:6e:ad:bf:ed:81:44:75:
         b0:db:f5:a0:00:64:bc:64:b0:4f:7c:ad:4a:73:54:c4:d7:f9:
         1f:b4:d8:a2:04:23:91:0f:46:17:f8:cb:bd:be:35:6d:fb:bc:
         c8:80:91:6a:3e:3d:51:52:86:7b:93:bb:78:da:ab:9a:9a:a5:
         9a:6d:f1:63:a8:3b:b5:ee:d6:b6:be:c8:5d:4d:96:bc:d9:3a:
         56:9b:28:8c:6b:cf:c4:34:53:ad:a8:fb:46:ba:be:25:52:fb:
         b1:8c:be:c7:e6:c0:a5:43:83:c7:ae:4e:69:25:9b:9b:0d:cf:
         bb:54:81:c4:f7:f0:33:26:24:15:c3:1e:8c:ad:27:b1:41:d4:
         c5:9f:d2:92:c2:46:f4:a0:af:8c:d5:12:70:29:56:1a:94:a7:
         ac:5a:81:7f:0f:92:5e:21:a1:7f:1a:6f:1c:6c:16:29:b3:83:
         f4:bf:25:3f:0e:cf:86:99:2e:4e:76:14:70:05:75:ca:ae:43:
         1e:23:f0:4b:e8:96:58:57:62:8b:06:1b:06:ac:b5:d1:13:f7:
         ca:a4:29:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org