Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa
File:                     3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa (raw, json)
Hash identifier:          84qnGnZctmZf7yNbLJ/8nBx3tD7LoPGl0iGhpUo0+Rs=
Subject key identifier:   EF:7B:ED:8C:3E:01:13:D4:49:61:DC:D8:C7:F8:FA:13:70:5D:B9:1E
Certificate issuer:       /CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
Certificate serial:       5D014281DC25EA7FA34EBFCD8C608829E9E2ED3D
Authority key identifier: 7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa
Signing time:             Fri 29 Dec 2023 18:38:39 +0000
ROA not before:           Fri 29 Dec 2023 18:33:39 +0000
ROA not after:            Fri 27 Dec 2024 18:38:39 +0000
asID:                     262847
IP address blocks:        179.125.32.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:01:42:81:dc:25:ea:7f:a3:4e:bf:cd:8c:60:88:29:e9:e2:ed:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E89C742D551BF248E147A7AC13D94D12B15C8F6
        Validity
            Not Before: Dec 29 18:33:39 2023 GMT
            Not After : Dec 27 18:38:39 2024 GMT
        Subject: CN=EF7BED8C3E0113D44961DCD8C7F8FA13705DB91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:3f:8d:02:7a:0a:18:fc:ed:82:e5:e3:8d:
                    f9:0f:97:e5:56:6d:14:f4:71:c6:35:5f:b1:1f:27:
                    16:ad:40:66:20:06:db:96:3e:56:eb:bf:3a:5f:9e:
                    a6:9c:f2:ac:a4:49:39:60:67:5a:ba:36:dd:97:ff:
                    15:b9:89:93:7c:85:a6:40:71:a6:61:8a:66:5a:e2:
                    73:75:ca:d2:68:67:13:77:29:da:c1:74:8c:34:db:
                    79:05:03:ca:00:69:ab:37:1a:b7:08:75:67:a7:e5:
                    a5:5c:67:f0:f3:14:23:66:ac:63:28:df:46:d6:f7:
                    0e:54:8d:d3:a0:db:be:e9:6a:06:85:c0:df:25:bb:
                    0f:85:a2:59:53:52:f1:d6:4e:f6:2b:e0:6f:84:1b:
                    4e:9e:2f:0b:30:20:7b:08:53:3d:16:c7:e4:c5:76:
                    e4:a3:0c:01:b8:83:d9:d0:e3:7f:a0:4f:a6:e1:b4:
                    1c:b7:be:e0:97:15:86:38:af:a5:0b:71:75:ba:a7:
                    e1:67:9b:9f:b8:5c:4d:72:37:b0:cb:15:7f:ff:92:
                    90:45:da:23:54:a9:94:c6:01:ab:e4:4b:3e:45:d9:
                    16:88:ed:f6:e7:fe:63:d4:03:65:fe:41:a8:59:19:
                    5d:e4:d8:ba:00:d6:0a:bb:3b:39:ac:6e:9d:5e:48:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7B:ED:8C:3E:01:13:D4:49:61:DC:D8:C7:F8:FA:13:70:5D:B9:1E
            X509v3 Authority Key Identifier:
                keyid:7E:89:C7:42:D5:51:BF:24:8E:14:7A:7A:C1:3D:94:D1:2B:15:C8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/7E89C742D551BF248E147A7AC13D94D12B15C8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E89C742D551BF248E147A7AC13D94D12B15C8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/1/3137392e3132352e33322e302f32312d3234203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:62:f0:58:19:5a:b9:e0:df:de:c7:ed:d3:1d:a1:b6:1e:5c:
         fd:74:18:6e:e9:24:29:40:e7:26:a3:e8:96:c4:38:70:b0:21:
         68:a8:47:83:02:20:00:9d:16:67:90:f4:7d:e5:49:10:e4:7f:
         59:9c:7e:64:df:45:54:64:8e:9e:67:27:f0:e1:21:3e:a3:50:
         2e:b5:8c:f3:38:e1:77:01:48:63:a5:06:dc:60:3a:ac:12:17:
         18:52:41:de:ea:d7:ce:1b:2b:27:79:d7:ad:65:06:02:ce:4c:
         f7:5a:50:af:4c:59:a0:c6:a9:ea:2e:a4:40:1e:2c:d7:50:ca:
         76:28:5d:62:fa:e2:be:1c:80:0d:1c:2d:fc:6a:f0:de:02:da:
         6e:b3:26:dd:a4:44:4a:63:95:af:77:f9:ca:61:7e:ac:09:8c:
         70:c1:64:99:7a:4d:04:a1:ce:18:bc:24:9c:e2:4e:36:bb:29:
         a9:7b:61:a3:5f:55:6d:fd:f8:a4:04:1b:cd:33:87:8a:3c:eb:
         6f:81:55:87:6a:dc:21:16:d6:cc:15:fc:2e:80:89:ee:b9:e8:
         c1:4c:56:84:9d:fb:9b:1c:97:39:9d:0c:8d:de:e3:b9:46:3c:
         37:51:fa:94:16:d4:b7:7a:25:48:ca:85:f2:4e:c2:87:74:0b:
         69:1a:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:51 2024 by rpki-client on console.sobornost.net