Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32312d3231203d3e203238333630.roa
File:                     3137392e3132342e3233322e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier:          jcCLrHbbkGQmg3Rj8+E6eU6DmNYuohHfTVdIl1ibwJ0=
Subject key identifier:   CA:7E:2A:0F:9D:D0:71:38:F3:86:C8:DD:44:D6:8A:62:17:1A:A1:75
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       1276BB1D177E4882B8C080E92AAACE506924A9BD
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32312d3231203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:35 +0000
ROA not before:           Thu 17 Nov 2022 17:58:35 +0000
ROA not after:            Thu 16 Nov 2023 18:03:35 +0000
asID:                     28360
IP address blocks:        179.124.232.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:76:bb:1d:17:7e:48:82:b8:c0:80:e9:2a:aa:ce:50:69:24:a9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:35 2022 GMT
            Not After : Nov 16 18:03:35 2023 GMT
        Subject: CN=CA7E2A0F9DD07138F386C8DD44D68A62171AA175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:8d:6a:d8:82:2d:a1:05:7c:b7:20:12:5b:
                    4f:cd:35:81:f8:b3:dc:de:5d:1d:40:7e:51:94:32:
                    2e:4e:31:b3:63:ea:d1:6c:5f:2c:22:51:f1:26:b4:
                    a9:c7:96:af:3d:aa:37:e7:71:1a:54:1c:55:81:11:
                    fd:e1:de:88:95:2c:a7:92:dd:f4:9d:21:ab:d5:56:
                    4a:b6:1d:a1:57:72:a3:f0:a2:03:2f:8a:1d:4c:d4:
                    d1:57:da:cf:ca:bd:0e:52:27:af:f8:22:bb:a5:79:
                    20:40:ba:e2:91:c6:be:aa:96:01:26:10:3f:7e:8a:
                    bf:9e:24:d8:2e:95:9c:4f:35:ab:25:71:56:20:ec:
                    17:70:6c:bf:6c:ca:e2:c8:96:8b:c8:03:e9:c8:b9:
                    7b:da:66:e3:dc:99:b3:c1:3e:31:2f:b7:34:f9:ad:
                    58:f8:01:18:94:f8:42:2f:8c:af:54:c8:20:ca:fb:
                    39:a8:6d:a7:0e:5b:c1:63:c8:7f:e2:62:9b:67:9a:
                    11:8e:4a:37:c8:ee:59:a2:08:3a:0b:ca:40:85:42:
                    e6:8c:e9:14:08:6c:f4:cf:c4:db:38:9a:ff:97:8f:
                    6b:d2:66:8c:53:bc:88:a5:14:d0:8b:8c:7e:9b:4b:
                    3d:f3:de:e9:3f:c7:08:e1:bb:d4:32:d0:f8:15:69:
                    c3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7E:2A:0F:9D:D0:71:38:F3:86:C8:DD:44:D6:8A:62:17:1A:A1:75
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32312d3231203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:91:ca:c4:4e:ba:c3:cc:89:f7:f2:a8:43:5e:18:81:f6:04:
         bc:48:02:c6:8b:8d:36:27:ea:8f:44:fe:e1:5f:df:fe:f1:a4:
         77:2a:8e:7a:27:36:65:e3:f7:de:6c:3d:29:c1:af:06:b3:c7:
         5a:e1:95:4c:32:f1:5c:04:d9:65:2e:75:47:61:05:7e:f4:c1:
         98:8f:b4:30:38:3c:56:82:ba:54:58:21:b5:00:b6:98:30:25:
         6d:dc:ef:3a:07:77:4f:75:de:16:21:4a:c9:18:24:da:4b:bd:
         d0:77:6e:57:43:4f:a5:7b:be:82:33:1c:ef:ba:b8:13:b2:e1:
         b6:4c:88:e6:11:ff:62:c0:95:60:37:32:e0:9f:1b:86:4f:96:
         a3:ee:eb:e2:73:ca:7f:fd:df:b7:3d:44:a9:0e:ab:9c:00:fd:
         d9:fd:3d:f8:b9:ac:f4:0f:7e:42:a5:b5:3b:4c:66:69:cd:75:
         e0:ef:2d:53:3a:42:03:44:3e:73:af:37:09:67:22:19:6a:67:
         6f:df:a8:50:85:fc:e8:35:74:a6:b4:e5:bf:7d:e1:30:c0:3e:
         dc:69:19:31:07:7c:04:c6:b0:ae:e6:d6:9e:58:32:49:b4:72:
         87:6a:3a:47:3d:85:5a:74:5f:11:c3:e6:98:b4:fd:a7:6d:89:
         b2:9b:ab:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net