Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32322d3232203d3e20323731313034.roa
File:                     3137392e34322e342e302f32322d3232203d3e20323731313034.roa (raw, json)
Hash identifier:          JdCQnln5yY7YHyNyUT9XTTtbd4qMVM3In9kNniEBPaE=
Subject key identifier:   C5:6E:8E:C5:20:DA:A7:E7:38:28:56:EA:D8:7A:71:7A:DB:B4:AD:5D
Certificate issuer:       /CN=696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C
Certificate serial:       7E34257C596AF4D7AB0A9D22A713B1C59C68AC0E
Authority key identifier: 69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32322d3232203d3e20323731313034.roa
Signing time:             Tue 18 Apr 2023 23:42:15 +0000
ROA not before:           Tue 18 Apr 2023 23:37:15 +0000
ROA not after:            Tue 16 Apr 2024 23:42:15 +0000
asID:                     271104
IP address blocks:        179.42.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:34:25:7c:59:6a:f4:d7:ab:0a:9d:22:a7:13:b1:c5:9c:68:ac:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C
        Validity
            Not Before: Apr 18 23:37:15 2023 GMT
            Not After : Apr 16 23:42:15 2024 GMT
        Subject: CN=C56E8EC520DAA7E7382856EAD87A717ADBB4AD5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ad:94:b6:79:d7:d8:1b:bf:27:0e:cf:42:53:
                    c2:86:c4:96:4e:70:8c:2e:09:e1:a8:98:75:de:f3:
                    57:4e:39:03:8b:3b:ad:af:b0:ed:10:1a:06:e5:54:
                    e7:7e:36:44:48:38:e3:c3:1b:a0:df:77:44:92:52:
                    e8:b3:03:60:ec:2b:8f:99:b5:29:66:50:a9:07:04:
                    6a:55:d6:e0:32:2d:4a:f3:1e:02:a0:e6:52:c5:58:
                    af:d7:6b:7a:59:27:be:2d:4f:47:28:08:3c:1e:4f:
                    e7:9a:09:6b:fb:89:ff:b6:6f:8f:8a:2e:27:43:dd:
                    10:74:af:9e:be:e2:15:0d:7f:42:ea:5d:98:d7:43:
                    91:7e:36:4f:89:f6:86:18:e3:43:ac:b0:a6:47:8a:
                    e7:9e:93:32:55:37:cd:b8:e0:e2:22:74:84:aa:a8:
                    83:44:2b:d1:41:d4:77:81:99:6f:45:23:1d:a0:00:
                    63:5f:69:d3:ea:fe:28:7b:23:ab:52:5c:c0:c6:be:
                    30:9a:6d:f6:1d:a9:5e:16:ff:89:99:76:2a:c0:f4:
                    67:56:aa:4c:49:93:c1:f5:b6:11:88:a1:77:51:54:
                    23:08:f7:57:0e:1f:1f:f2:6c:8d:c2:62:cd:5e:7d:
                    83:bf:80:81:9f:60:de:fe:db:d8:3e:e5:f1:95:62:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6E:8E:C5:20:DA:A7:E7:38:28:56:EA:D8:7A:71:7A:DB:B4:AD:5D
            X509v3 Authority Key Identifier:
                keyid:69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32322d3232203d3e20323731313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:31:3d:8b:98:70:15:21:48:68:19:32:7e:43:7e:cf:4e:
         86:3d:f5:aa:34:c4:98:2f:9b:70:36:de:a9:ac:2d:c2:8e:73:
         7f:2c:bb:1a:90:5e:c4:fb:15:2b:d6:1c:cd:d2:4b:4a:2c:49:
         e9:0e:c2:71:15:dc:53:68:19:16:e1:0f:cd:f5:b5:a0:d8:92:
         67:95:37:f4:37:be:c6:e9:ac:a1:1a:fd:34:5c:34:b8:26:0f:
         d3:66:60:47:ba:ca:c8:44:24:48:40:7d:8b:e3:fd:ec:36:dc:
         ae:95:62:4c:de:37:ee:b0:e3:03:dc:ff:11:df:7d:2b:af:bb:
         f4:d3:ec:2d:18:a9:06:9a:11:21:c7:d1:e7:89:24:c4:d5:1d:
         86:b5:90:0f:cc:95:55:e4:eb:82:65:18:00:20:43:79:72:be:
         28:90:1e:5a:9a:d3:2f:c3:7a:bc:bd:a1:9e:c5:2c:a8:95:49:
         72:2a:7c:77:c7:7d:40:e1:e2:fe:de:4f:8a:0e:49:20:b0:35:
         da:fa:82:22:90:f9:5f:c9:a0:3c:76:83:99:ed:26:da:61:d7:
         8c:83:fb:c6:9b:0a:11:68:6c:e1:aa:be:e4:bc:b8:ad:4a:03:
         7f:87:54:ec:3d:03:c0:1c:34:b6:29:e6:50:8a:5b:5e:db:e7:
         58:68:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net