Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137392e39362e3134342e302f32302d3234203d3e203238363334.roa
File:                     3137392e39362e3134342e302f32302d3234203d3e203238363334.roa (raw, json)
Hash identifier:          oFra/Q3goOqhellCXTQDYLbaJuHG65x+tYre1TgE9+4=
Subject key identifier:   4D:10:79:54:19:9F:25:94:BE:1D:6B:DF:D5:64:22:8E:51:13:9A:48
Certificate issuer:       /CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
Certificate serial:       624BDFA8AAE92EEDB60329B78CFBC6CF6C4050D6
Authority key identifier: 2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137392e39362e3134342e302f32302d3234203d3e203238363334.roa
Signing time:             Thu 09 Feb 2023 20:00:00 +0000
ROA not before:           Thu 09 Feb 2023 19:55:00 +0000
ROA not after:            Thu 08 Feb 2024 20:00:00 +0000
asID:                     28634
IP address blocks:        179.96.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4b:df:a8:aa:e9:2e:ed:b6:03:29:b7:8c:fb:c6:cf:6c:40:50:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
        Validity
            Not Before: Feb  9 19:55:00 2023 GMT
            Not After : Feb  8 20:00:00 2024 GMT
        Subject: CN=4D107954199F2594BE1D6BDFD564228E51139A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:6e:a9:55:7b:d5:7d:8e:d1:4c:24:45:34:
                    10:6d:51:8a:ce:7a:60:46:1e:44:f0:2b:fb:2a:84:
                    e2:92:da:8e:9f:cc:b4:7c:87:4c:92:7a:51:d7:3c:
                    0c:9a:f7:bd:8d:35:7a:ad:08:29:4b:ce:bc:61:9f:
                    a5:d9:67:b1:56:45:9c:88:86:ea:21:d4:13:85:e5:
                    ce:84:16:0a:1f:ce:af:32:cf:2e:4e:f3:4b:50:70:
                    61:5c:65:0f:a1:c1:cb:ea:34:aa:1b:07:35:cf:f4:
                    f2:32:96:05:91:c5:c4:e6:77:c7:ec:49:fe:85:16:
                    d1:67:dc:29:23:2f:4f:0f:ca:2e:ef:75:8f:59:23:
                    3c:b5:2d:e0:6c:9e:9a:1c:b9:90:9d:b1:79:ad:77:
                    06:44:6c:83:31:86:13:fd:fe:94:4d:2f:4b:17:24:
                    04:1c:d5:97:a0:75:b0:04:fe:e5:0a:e3:75:e0:db:
                    f9:68:fe:4f:6f:7f:24:b9:f8:e0:45:fa:3a:6a:3a:
                    fe:27:4f:41:a3:12:fa:e5:ef:d5:58:54:67:b6:f6:
                    77:18:28:95:59:5a:cb:93:9c:d4:55:e8:1f:84:cc:
                    a6:e0:35:6a:2b:25:ff:5a:ef:98:95:8f:ba:be:6e:
                    a5:b7:cd:d9:85:c3:57:9a:29:d6:14:be:fb:f7:d3:
                    17:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:10:79:54:19:9F:25:94:BE:1D:6B:DF:D5:64:22:8E:51:13:9A:48
            X509v3 Authority Key Identifier:
                keyid:2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137392e39362e3134342e302f32302d3234203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:39:09:89:30:52:01:6e:15:6a:30:d1:63:9e:77:6c:79:7d:
         a2:e9:e5:be:ea:7e:cf:3f:63:be:09:5a:d8:2c:8f:2b:85:81:
         7e:e5:cd:21:ef:f7:ed:bf:63:41:1e:3e:a3:77:b6:18:32:c1:
         ff:0d:58:35:0e:64:cb:ce:a5:94:9b:ed:fa:ca:f9:52:eb:b3:
         5a:f8:46:9b:ee:76:b0:de:ab:51:67:ed:5b:4b:fc:08:2f:ce:
         8f:c9:6a:7a:a6:e7:fe:8c:20:f1:8d:77:fc:f6:76:4a:88:a1:
         1e:08:e8:79:fa:0c:17:65:3d:f7:37:b7:c0:0c:37:a1:5f:ae:
         15:a1:7f:6c:3b:a2:48:fb:3e:75:66:26:3d:da:14:ee:af:9b:
         d4:05:10:e3:45:ca:57:1f:9d:23:d3:2c:99:7a:53:e4:6e:59:
         e4:c1:ba:7c:df:84:59:11:5a:76:b2:a5:94:d0:e8:4f:da:f2:
         1a:b0:44:0b:2e:aa:d2:99:2a:84:a3:7f:29:14:8d:e7:5f:15:
         08:b2:a0:a1:11:98:18:99:bb:4e:70:ea:b3:6e:29:c5:6b:c0:
         40:4b:f9:d6:d2:40:28:3e:6e:8d:74:4a:ef:58:31:6c:78:8f:
         a5:5c:72:fc:06:c7:28:13:3e:1a:52:a3:a8:6d:f7:75:c6:b2:
         5b:ae:19:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:39 2023 by rpki-client on console.sobornost.net