Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137392e39362e3132382e302f32342d3234203d3e203238363334.roa
File:                     3137392e39362e3132382e302f32342d3234203d3e203238363334.roa (raw, json)
Hash identifier:          QMCyXShHpLI8gK36uppsy/JwRxOYzbYb/4ca+EolSHs=
Subject key identifier:   55:68:E9:60:71:12:4C:CE:12:3C:1C:8A:4D:3F:BF:40:84:7D:B5:E0
Certificate issuer:       /CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
Certificate serial:       030F7FCB24E3E02F97CA4F73A1ADE6A281A2E34B
Authority key identifier: 2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137392e39362e3132382e302f32342d3234203d3e203238363334.roa
Signing time:             Mon 08 May 2023 15:16:39 +0000
ROA not before:           Mon 08 May 2023 15:11:39 +0000
ROA not after:            Mon 06 May 2024 15:16:39 +0000
asID:                     28634
IP address blocks:        179.96.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0f:7f:cb:24:e3:e0:2f:97:ca:4f:73:a1:ad:e6:a2:81:a2:e3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
        Validity
            Not Before: May  8 15:11:39 2023 GMT
            Not After : May  6 15:16:39 2024 GMT
        Subject: CN=5568E96071124CCE123C1C8A4D3FBF40847DB5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:5d:2b:72:cb:1e:2b:e2:22:9f:d3:d3:53:
                    3f:12:03:f0:3f:22:2c:69:f5:db:32:e7:b2:4c:73:
                    9f:b2:ab:a3:3b:3b:8f:4b:3c:b2:2f:a8:92:3b:32:
                    e3:c2:04:e8:60:39:d2:38:7b:86:30:ec:a5:9b:96:
                    2c:d8:1f:b0:85:4a:ed:0d:bc:f4:e2:4f:d7:3c:2f:
                    e9:9e:19:0b:3d:cf:8f:da:cd:2a:60:43:46:99:60:
                    c1:e5:c3:35:fb:6f:81:43:d1:b5:f5:0b:b7:41:15:
                    70:f4:d7:33:a4:8c:37:44:fa:e4:e2:6e:6e:77:c8:
                    d0:96:f1:51:8c:27:1a:6b:85:4b:61:5b:92:c6:84:
                    60:3d:87:19:ab:f3:b0:5f:77:b9:09:b9:2c:c0:f6:
                    3a:36:23:5e:13:03:23:42:df:37:54:49:12:ff:0d:
                    90:30:b4:6d:4f:a5:66:bd:74:d2:00:b7:f9:77:1a:
                    33:9a:9e:8c:dc:08:1c:4b:28:fb:35:cc:0c:78:db:
                    6b:55:c6:ef:4c:2b:0c:e1:e0:1c:cf:4e:58:5e:6f:
                    24:d7:49:e2:16:96:bd:1b:8a:0a:43:36:96:49:5e:
                    33:68:48:6e:d7:dc:a8:96:01:13:f5:38:4d:ef:f5:
                    00:fe:52:c2:94:7c:79:4b:f0:32:4a:f6:cb:28:9d:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:68:E9:60:71:12:4C:CE:12:3C:1C:8A:4D:3F:BF:40:84:7D:B5:E0
            X509v3 Authority Key Identifier:
                keyid:2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137392e39362e3132382e302f32342d3234203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:ce:b7:99:3d:9c:27:82:df:08:b9:1d:1e:0c:2b:e1:c4:03:
         90:8f:69:8c:85:6c:80:28:f6:12:c5:ce:a4:30:3a:ad:40:75:
         80:12:c0:91:0b:84:e9:53:b5:02:72:3d:f9:03:2d:02:4a:b5:
         f5:c4:35:d4:1b:38:b1:b1:8c:39:87:cb:0c:b8:32:a7:2a:ec:
         99:fc:1b:24:1f:41:4d:d3:b0:8c:09:a0:8f:4d:5a:12:61:26:
         bf:f5:42:f8:4f:f1:d4:bb:ca:ec:69:c9:b8:91:a8:c2:23:dd:
         c6:68:a9:de:09:7a:aa:ee:42:8c:4a:b7:b1:6b:fe:ca:3d:18:
         8d:4e:63:e8:17:bf:72:cd:39:90:05:4c:ef:e3:e4:bb:12:1e:
         15:00:2c:84:2e:c0:da:22:66:c7:7b:9b:31:05:71:e3:d9:3d:
         b0:d8:07:56:83:de:e8:05:90:19:09:50:63:92:9a:e2:b2:29:
         c5:cb:54:c9:34:fc:7c:96:d7:78:0f:d8:db:a6:46:b4:55:4d:
         51:0b:66:27:07:f2:e7:7f:7e:9e:aa:f2:d7:e4:ba:00:6b:c3:
         a9:d8:50:7a:85:a5:c8:e6:73:51:62:b5:6a:b1:01:d1:44:4d:
         09:d1:08:10:37:28:6a:df:ff:2d:4b:2b:24:47:66:ff:c3:e7:
         d0:7a:6c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:39 2023 by rpki-client on console.sobornost.net