Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa
File:                     3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa (raw, json)
Hash identifier:          vT4t92zXWeE3jo6yyybsaWCfYIvYJ0mD1mxcBzSgLkM=
Subject key identifier:   30:15:1E:51:E2:E0:C1:D2:17:E8:87:A1:29:9D:4E:CF:74:AB:06:A3
Certificate issuer:       /CN=951AE056EA191708C1417B7F9956EA6704D459D0
Certificate serial:       64E8FD4D54AA95F21931B9EE6BAA2946775E2C82
Authority key identifier: 95:1A:E0:56:EA:19:17:08:C1:41:7B:7F:99:56:EA:67:04:D4:59:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/951AE056EA191708C1417B7F9956EA6704D459D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa
Signing time:             Tue 12 Mar 2024 22:00:50 +0000
ROA not before:           Tue 12 Mar 2024 21:55:50 +0000
ROA not after:            Tue 11 Mar 2025 22:00:50 +0000
asID:                     271177
IP address blocks:        179.51.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e8:fd:4d:54:aa:95:f2:19:31:b9:ee:6b:aa:29:46:77:5e:2c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951AE056EA191708C1417B7F9956EA6704D459D0
        Validity
            Not Before: Mar 12 21:55:50 2024 GMT
            Not After : Mar 11 22:00:50 2025 GMT
        Subject: CN=30151E51E2E0C1D217E887A1299D4ECF74AB06A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b9:ae:44:fa:ed:3e:af:81:56:5f:2a:f8:f7:
                    1b:13:11:52:cc:09:80:89:51:2d:16:f4:9c:e2:c1:
                    99:d7:29:7d:24:e4:32:f8:4a:3e:2b:45:fa:b1:aa:
                    d4:7f:8a:5a:c1:32:68:81:03:5e:a8:2e:23:0e:b4:
                    1b:d6:57:d0:da:53:89:f7:13:04:a6:7a:b2:5c:a3:
                    27:a7:a5:8e:a1:a3:8a:28:8b:90:2f:76:12:14:aa:
                    a9:05:16:79:49:77:75:38:06:e1:90:f1:97:0f:d9:
                    99:64:60:10:05:d6:06:31:17:c4:8e:bd:a4:58:ed:
                    53:7d:f0:88:95:0d:6e:ff:ae:47:49:c4:78:2b:05:
                    46:56:b2:af:90:d8:dd:d3:c7:08:6b:fa:ad:d5:5b:
                    16:b2:ee:db:ec:73:52:ce:3a:0c:3d:25:83:de:8c:
                    ab:28:4c:89:0e:33:a7:60:63:a0:eb:67:45:61:a8:
                    85:bc:dc:1e:97:69:e6:e2:a7:ea:ad:0f:45:59:f0:
                    14:9b:d7:6f:c3:86:b9:2b:ae:7e:30:fd:0f:d6:5c:
                    fe:6a:74:d6:a4:a1:99:7d:ef:c8:04:c1:30:63:0b:
                    53:5f:36:78:50:0e:ee:e2:6b:3f:63:36:1b:93:63:
                    d6:75:d6:a7:a2:e8:52:bb:03:87:d0:49:cd:1c:db:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:15:1E:51:E2:E0:C1:D2:17:E8:87:A1:29:9D:4E:CF:74:AB:06:A3
            X509v3 Authority Key Identifier:
                keyid:95:1A:E0:56:EA:19:17:08:C1:41:7B:7F:99:56:EA:67:04:D4:59:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/951AE056EA191708C1417B7F9956EA6704D459D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/951AE056EA191708C1417B7F9956EA6704D459D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:a0:48:16:27:83:07:77:7f:9b:6c:bc:2d:40:2c:c9:08:de:
         ec:8d:92:6b:37:7a:de:41:e0:c9:1f:74:f0:ac:7e:7e:b8:93:
         d9:80:9b:82:a3:65:9d:40:5e:bb:1c:81:a6:83:32:83:98:78:
         10:5f:cf:b6:ad:c7:d7:c6:65:1d:67:89:04:51:83:4c:83:d0:
         c0:ac:65:a3:b0:0f:65:98:41:6c:3e:45:34:87:f2:86:ce:cd:
         2f:6f:3a:66:36:a2:ba:63:25:e1:89:c8:76:13:4c:3b:25:b5:
         b5:07:11:0d:bd:f1:a0:4e:0c:f4:29:94:a6:1c:a1:6f:ce:a5:
         44:05:04:7f:9e:3c:29:d2:33:7c:f8:ff:3c:c7:1b:98:5b:05:
         3f:d1:9c:b5:38:d9:e9:ef:b9:ce:45:76:b0:a7:f4:fe:92:89:
         7f:c3:2d:10:d9:66:e1:e0:a9:6d:bb:56:e9:61:b5:85:06:e4:
         7b:dc:1b:72:8a:cf:c0:9c:4c:6a:e3:da:16:99:33:72:da:56:
         76:e2:1e:d9:50:d6:35:30:73:b8:4e:e4:e0:77:41:93:80:8c:
         fb:10:2b:20:db:37:38:a7:e8:56:12:0a:89:26:ed:80:5e:89:
         b1:ea:a3:12:4a:61:8c:dc:ef:ee:62:0e:77:ad:28:00:e9:c0:
         b2:8e:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:19 2024 by rpki-client on console-ams.rpki-client.org