Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137302e37392e38302e302f32322d3234203d3e20323633363530.roa
File:                     3137302e37392e38302e302f32322d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          tIM4jRYfwUx59IuvjB0eLeOXZBjlOro8n7+t04eEO6Q=
Subject key identifier:   04:19:2F:B5:F7:42:61:54:CF:8E:0B:77:98:8C:1A:89:7F:9B:20:35
Certificate issuer:       /CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
Certificate serial:       678D5D3F7A2F4F821AF4907E61D044301A5409F2
Authority key identifier: D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137302e37392e38302e302f32322d3234203d3e20323633363530.roa
Signing time:             Fri 15 Mar 2024 19:32:30 +0000
ROA not before:           Fri 15 Mar 2024 19:27:30 +0000
ROA not after:            Fri 14 Mar 2025 19:32:30 +0000
asID:                     263650
IP address blocks:        170.79.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8d:5d:3f:7a:2f:4f:82:1a:f4:90:7e:61:d0:44:30:1a:54:09:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
        Validity
            Not Before: Mar 15 19:27:30 2024 GMT
            Not After : Mar 14 19:32:30 2025 GMT
        Subject: CN=04192FB5F7426154CF8E0B77988C1A897F9B2035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:f0:8e:41:6a:fd:55:7d:ff:9b:97:43:39:
                    9a:1d:78:b5:9f:d8:70:3f:28:8c:72:38:1e:8b:15:
                    2d:17:c3:35:a9:06:f3:53:c5:a2:7a:0c:6c:43:ba:
                    e3:45:86:b6:0f:7e:32:4a:16:fb:d7:53:42:68:fe:
                    30:5b:51:a5:d1:44:b1:f9:e2:b9:27:6e:0a:34:93:
                    db:d4:03:a4:1f:50:36:7b:01:3c:b2:7b:dd:e3:5c:
                    b0:aa:42:4e:83:ca:2c:66:81:ad:5a:e9:58:f5:d1:
                    67:cf:be:ed:0d:c4:96:c3:1f:2e:7d:fa:a5:b5:35:
                    9b:57:92:20:a9:25:80:dd:e1:fd:af:e0:fc:20:3a:
                    f3:fa:c9:ab:b5:cf:3e:f6:dc:4e:41:66:58:51:29:
                    9c:c7:f3:6b:46:f8:14:0c:38:d4:03:62:7b:83:26:
                    81:f1:48:b6:f0:60:58:84:0c:e7:bb:52:c5:98:1b:
                    07:a4:66:1d:49:3e:7f:b2:1d:5e:59:58:6b:b2:bc:
                    f0:fc:3b:80:6b:09:1a:e9:bf:4c:ee:b9:f7:c3:5a:
                    79:a1:7e:41:bc:e9:4b:e9:0b:e8:70:ac:da:a5:f9:
                    a9:d9:15:f0:7d:e3:18:7b:55:cb:97:7e:2d:a5:50:
                    f6:d0:4e:80:05:df:b5:f0:80:3a:aa:e4:44:ba:fd:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:19:2F:B5:F7:42:61:54:CF:8E:0B:77:98:8C:1A:89:7F:9B:20:35
            X509v3 Authority Key Identifier:
                keyid:D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137302e37392e38302e302f32322d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:1a:cf:26:cf:ae:3f:7b:b4:04:09:7d:3d:e5:e6:6b:21:79:
         01:6b:46:4f:0b:0f:28:ba:1b:1b:1f:45:8e:2b:05:2f:1c:9f:
         92:27:7e:76:8c:a0:5e:6c:44:5f:a2:44:bf:94:4f:92:a7:e0:
         65:5e:d0:4f:ee:91:b7:25:1f:41:51:ec:9e:5b:ae:09:48:80:
         ac:a9:34:7c:1a:d4:f3:13:0c:a1:80:f2:e9:4a:a0:fc:dd:c7:
         e7:fb:3e:c2:f8:e4:3d:47:10:5b:18:f3:ca:b2:72:ec:89:4b:
         61:24:c9:a3:bd:a4:50:d1:8d:76:e5:af:46:a7:d0:e0:4c:3c:
         85:03:dc:ff:fa:69:21:1b:e2:26:f3:71:50:75:a9:9e:3a:76:
         30:a9:73:11:c4:6d:f2:73:3c:e8:8d:86:14:f2:ae:e4:25:22:
         56:27:34:73:41:a0:f5:b0:85:32:bf:f0:57:96:9c:5b:c2:a0:
         b5:31:4f:65:4b:f9:28:6f:b8:7f:8d:2a:e5:ed:3f:38:be:8a:
         09:74:38:d6:71:b8:df:d9:c9:0d:14:ec:65:37:a8:04:11:e9:
         0f:4a:b3:91:7c:4c:b0:44:06:52:78:d3:7d:7d:3f:97:2c:ca:
         da:04:02:9e:b2:eb:23:80:ea:f6:7b:64:ea:79:20:21:b7:65:
         d4:ed:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org