Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/3137392e3132372e3234382e302f32312d3234203d3e20323633363435.roa
File:                     3137392e3132372e3234382e302f32312d3234203d3e20323633363435.roa (raw, json)
Hash identifier:          crLpzBImMdkuKd9qxcnE7BdLX4GWI+AvG5DOCDafJss=
Subject key identifier:   13:FA:14:29:27:64:BE:98:B5:5E:A6:D7:D4:41:94:13:E0:10:6D:59
Certificate issuer:       /CN=1984CC02A5637825AD7FAEC9DD136668D74F5C70
Certificate serial:       10A00D586B8D473A63A3903DA137BB1A118F1640
Authority key identifier: 19:84:CC:02:A5:63:78:25:AD:7F:AE:C9:DD:13:66:68:D7:4F:5C:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1984CC02A5637825AD7FAEC9DD136668D74F5C70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/3137392e3132372e3234382e302f32312d3234203d3e20323633363435.roa
Signing time:             Mon 22 Jul 2024 18:20:40 +0000
ROA not before:           Mon 22 Jul 2024 18:15:40 +0000
ROA not after:            Mon 21 Jul 2025 18:20:40 +0000
asID:                     263645
IP address blocks:        179.127.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a0:0d:58:6b:8d:47:3a:63:a3:90:3d:a1:37:bb:1a:11:8f:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1984CC02A5637825AD7FAEC9DD136668D74F5C70
        Validity
            Not Before: Jul 22 18:15:40 2024 GMT
            Not After : Jul 21 18:20:40 2025 GMT
        Subject: CN=13FA14292764BE98B55EA6D7D4419413E0106D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:5e:98:d3:b9:52:c0:e6:b8:67:0d:9d:0b:
                    fa:84:7e:71:9c:06:08:b9:67:14:fc:8c:0c:82:ec:
                    50:74:72:c1:88:1a:c7:6f:f8:0e:1b:9e:23:a9:2c:
                    c5:68:bd:6c:36:41:71:1a:85:29:a4:13:66:31:83:
                    aa:fe:6a:6a:a5:8f:c1:4d:cb:e7:0e:be:b6:b2:4a:
                    aa:6d:d6:01:31:f0:ef:88:a1:0c:21:8b:5a:85:8b:
                    f8:38:ab:64:9b:e4:05:69:e1:80:53:b4:71:2d:ec:
                    26:8f:c3:ac:eb:22:9d:43:fb:c5:ad:4f:49:28:34:
                    d2:0e:2f:63:eb:a9:eb:f9:60:ce:d1:35:6d:57:83:
                    ee:5b:94:6f:26:2e:33:0d:5e:5f:97:b2:84:3d:fc:
                    a9:cd:f8:04:b4:c5:e7:7d:77:ef:bf:ab:74:87:e1:
                    68:52:29:d5:ca:74:c1:ab:70:67:71:10:c9:85:d8:
                    07:20:3b:d7:c9:33:fe:ca:4d:68:62:cc:7b:98:a1:
                    b6:cf:77:30:5d:c1:4c:d1:2a:86:22:f5:c6:3d:21:
                    99:5d:73:e7:57:cc:fe:d9:4a:8a:b3:68:76:8e:9d:
                    fb:1e:78:87:16:62:f3:00:d2:4e:c2:90:3f:dd:5b:
                    bd:bb:e2:53:0b:f6:8b:a3:56:50:04:e9:78:00:94:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FA:14:29:27:64:BE:98:B5:5E:A6:D7:D4:41:94:13:E0:10:6D:59
            X509v3 Authority Key Identifier:
                keyid:19:84:CC:02:A5:63:78:25:AD:7F:AE:C9:DD:13:66:68:D7:4F:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/1984CC02A5637825AD7FAEC9DD136668D74F5C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1984CC02A5637825AD7FAEC9DD136668D74F5C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cs7MLsKNVrMsfGhBAeeDuNJmVG6gYi1T58iWyCUzDZX/2/3137392e3132372e3234382e302f32312d3234203d3e20323633363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:0c:43:6e:ef:f5:4f:55:f2:d5:3b:0d:ea:da:9b:d4:b3:5f:
         53:f4:7e:64:d8:ac:5e:6f:00:d3:bf:94:29:56:55:cc:2b:c0:
         1b:9b:27:6e:ed:20:a7:f8:fb:c5:96:b3:76:4d:2d:63:56:6f:
         3c:ff:3e:7a:8b:05:0d:15:45:b8:a9:ae:9e:34:bb:dd:24:c2:
         ca:97:4a:b6:ce:ed:de:11:20:57:84:41:0a:d6:18:5a:65:68:
         0c:82:eb:11:93:b3:ad:98:73:2c:84:2c:d9:63:a7:d7:ae:91:
         ec:9f:91:b9:be:70:6f:96:63:25:3c:06:12:a3:e5:49:7a:e0:
         4b:54:c3:eb:83:29:26:6e:3e:c2:6f:6b:85:dd:71:b1:0b:22:
         fa:69:7c:47:18:a9:bf:2f:60:c6:9c:69:b3:84:b4:35:d9:1d:
         6e:0d:1a:c5:47:5b:a0:61:cc:22:dc:e6:2a:89:28:f1:91:c1:
         ea:c5:93:5b:e6:01:0d:f6:4b:e5:82:c3:2d:1e:35:ce:4e:90:
         b1:b7:5c:8e:c5:11:38:f8:50:77:5e:df:c3:46:06:5d:44:4b:
         37:bb:38:4c:04:13:2e:66:35:0f:54:d9:30:47:e8:10:dc:df:
         d7:4a:ba:0f:76:90:b3:13:8b:d9:d9:cb:46:c3:05:7a:dc:ac:
         be:36:bb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:29:21 2024 by rpki-client on console-fra.rpki-client.org