Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233392e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233392e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          q8JxBsxaeUwKoDiuwEjhLSkJi3jcdOi4yCstGwAf8Gw=
Subject key identifier:   55:6F:9A:1C:23:9E:CD:0C:74:2C:54:D5:02:A2:FD:BA:1F:F8:6D:57
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       13D2282AB28CAE3815609F0A9F68F9E5EFAF5BED
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233392e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:44 +0000
ROA not before:           Sat 06 Apr 2024 03:31:44 +0000
ROA not after:            Sat 05 Apr 2025 03:36:44 +0000
asID:                     28360
IP address blocks:        179.124.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d2:28:2a:b2:8c:ae:38:15:60:9f:0a:9f:68:f9:e5:ef:af:5b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 03:31:44 2024 GMT
            Not After : Apr  5 03:36:44 2025 GMT
        Subject: CN=556F9A1C239ECD0C742C54D502A2FDBA1FF86D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:ec:ea:23:02:68:1f:ec:93:e4:4b:15:1b:
                    fb:13:33:5d:b5:4e:83:e9:ba:43:94:a3:28:16:b7:
                    97:a9:bc:7c:cc:e6:b9:fb:be:e3:4b:a6:f0:22:d5:
                    74:8f:95:47:6a:68:f4:96:f2:33:c2:6c:8c:ae:c4:
                    c7:4f:0b:a3:13:f1:06:99:b0:62:8e:40:cc:60:2c:
                    24:68:3a:ea:fc:dc:16:1d:01:f2:99:3b:d9:c6:44:
                    94:7b:70:dc:48:99:d5:21:ac:eb:c2:b9:36:6f:7f:
                    00:fe:24:e9:66:9d:96:9b:4b:87:de:27:c6:e5:8a:
                    cb:fb:55:18:3b:e7:ab:ff:72:af:a0:a4:5b:0f:e3:
                    c2:d5:f9:86:c3:7c:c4:85:43:bd:1a:82:c7:23:56:
                    6e:02:64:88:f8:0f:a7:ff:2a:4d:4c:0f:23:7d:4b:
                    e4:da:9d:8f:58:14:be:19:fd:d1:2f:69:77:4a:9f:
                    18:bb:0f:65:32:48:c3:59:9d:69:80:3d:74:aa:79:
                    34:c0:75:d0:25:95:40:7d:b7:a8:4f:be:bf:46:1d:
                    44:1b:bb:c1:39:e6:34:12:14:b3:95:ee:cb:5c:e2:
                    33:f6:c8:8c:48:ef:8f:56:d0:33:c7:a6:92:9a:24:
                    e8:d6:21:12:38:53:50:9c:1a:0d:89:43:fe:36:28:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6F:9A:1C:23:9E:CD:0C:74:2C:54:D5:02:A2:FD:BA:1F:F8:6D:57
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233392e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:29:66:b8:f3:5f:81:cf:ee:35:26:14:f0:30:83:af:94:
         61:b0:5a:0b:fb:3b:e1:55:f4:54:68:5c:3b:79:41:1a:43:2e:
         13:47:56:56:91:9f:b7:08:f0:a1:d3:0f:26:6e:6d:b6:ad:89:
         4d:c1:10:4c:97:19:36:17:4c:c4:09:22:b6:33:5c:dc:ea:e8:
         43:88:7c:4b:09:eb:8b:5c:a0:cc:a1:83:54:35:17:0a:e9:e3:
         2e:c1:0c:e9:2c:08:c0:94:3b:31:f8:28:46:ef:d3:ab:92:07:
         42:c3:29:c2:3e:7f:aa:45:d8:c7:ac:25:de:f4:65:40:67:77:
         c5:db:d4:bf:17:f2:ac:54:a3:51:1b:46:9b:bd:83:64:54:61:
         69:f9:ef:0c:9b:ae:dd:a3:f4:b6:f2:02:58:f0:ec:21:da:83:
         66:5c:c1:a8:6d:c6:d9:3c:8a:d6:a2:34:18:51:cb:72:2c:49:
         41:17:2d:06:a3:bf:1a:04:95:d5:08:e3:07:e3:03:68:1d:1b:
         95:7a:5b:19:01:c2:70:3c:2d:81:40:2f:96:be:60:f1:f2:b4:
         01:95:ab:5e:7a:0f:06:66:83:5b:a6:f0:83:9c:d8:06:db:8e:
         3a:4e:c5:b4:ce:f2:9f:b8:3d:b6:52:e8:3d:51:3b:26:a1:89:
         ac:55:55:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org