Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/3230302e302e3137392e302f32342d3234203d3e20323731353733.roa
File:                     3230302e302e3137392e302f32342d3234203d3e20323731353733.roa (raw, json)
Hash identifier:          AzBSHS823rYmbmornRVY7eBUOWZ+31K4kYAcVidm2qM=
Subject key identifier:   A9:C2:0A:F6:E2:D5:38:44:2F:EF:EC:C4:4D:78:FC:73:64:5B:0B:5E
Certificate issuer:       /CN=5A3F0107992B5594AAC8127D2D4984343707D1A1
Certificate serial:       18021AA90508EC2740D9B531F9CE9BB9DBAA5809
Authority key identifier: 5A:3F:01:07:99:2B:55:94:AA:C8:12:7D:2D:49:84:34:37:07:D1:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/3230302e302e3137392e302f32342d3234203d3e20323731353733.roa
Signing time:             Thu 04 Apr 2024 05:19:59 +0000
ROA not before:           Thu 04 Apr 2024 05:14:59 +0000
ROA not after:            Thu 03 Apr 2025 05:19:59 +0000
asID:                     271573
IP address blocks:        200.0.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:02:1a:a9:05:08:ec:27:40:d9:b5:31:f9:ce:9b:b9:db:aa:58:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3F0107992B5594AAC8127D2D4984343707D1A1
        Validity
            Not Before: Apr  4 05:14:59 2024 GMT
            Not After : Apr  3 05:19:59 2025 GMT
        Subject: CN=A9C20AF6E2D538442FEFECC44D78FC73645B0B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:06:e5:6e:e1:3a:57:cc:1a:10:60:ea:c0:33:
                    81:a4:c1:a5:7e:44:2b:6a:a2:d1:7d:0d:f6:47:e4:
                    ea:53:fc:68:54:99:79:9b:17:cf:f9:1b:0d:16:eb:
                    d9:99:7b:55:4b:ae:a7:17:5d:65:ba:d4:81:76:26:
                    2b:2b:e1:8b:75:37:03:bc:50:7f:45:55:4d:f3:8b:
                    93:19:9a:1d:66:73:26:38:66:f5:89:2f:c9:b3:fd:
                    bd:89:11:cc:7b:60:f7:3f:b8:64:60:2b:70:f8:e4:
                    f4:d1:78:ad:2b:0e:8e:a8:c5:a1:6f:7d:18:55:1c:
                    76:ed:79:7d:1b:15:46:4f:ba:8a:99:50:00:9c:7b:
                    ff:d3:f1:23:74:28:5b:ab:0b:8a:9a:e8:bd:0b:24:
                    df:f9:a7:c8:70:c9:1f:e7:75:ee:5d:5a:6b:57:49:
                    75:31:b3:55:5a:12:ad:6e:cf:66:2a:e1:e0:37:c3:
                    a6:50:88:a3:35:e4:a9:98:a4:da:bd:72:13:22:a4:
                    f4:97:99:8c:37:d3:5c:1b:51:12:13:d1:bd:5c:8d:
                    db:bf:a4:6f:cd:4f:0c:86:d2:37:86:ea:9c:2b:0d:
                    d6:5f:1a:e2:2b:29:14:ab:cc:78:e5:ef:b4:91:29:
                    81:80:3b:97:87:f8:f6:22:18:0b:1d:68:57:83:ec:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C2:0A:F6:E2:D5:38:44:2F:EF:EC:C4:4D:78:FC:73:64:5B:0B:5E
            X509v3 Authority Key Identifier:
                keyid:5A:3F:01:07:99:2B:55:94:AA:C8:12:7D:2D:49:84:34:37:07:D1:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/3230302e302e3137392e302f32342d3234203d3e20323731353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:2f:f7:5e:03:95:95:48:6a:47:17:57:c8:cf:c1:69:a9:77:
         7a:29:bc:4d:2c:31:f2:04:b9:9b:f3:5e:b0:05:e0:8f:1a:30:
         a3:55:fc:bc:94:a3:f4:8a:2e:6a:09:0a:0d:b6:a1:3a:f8:8d:
         e2:96:5e:b3:a0:b5:3b:74:8c:31:67:9b:40:52:a9:a1:84:cb:
         15:e7:2f:2a:12:41:71:d2:56:3a:4a:1c:be:be:db:bc:48:46:
         7b:31:9c:69:2c:70:b9:8e:3c:7f:74:83:da:cb:03:12:cf:80:
         77:7c:d2:f5:b9:8b:2d:ce:76:70:ee:10:3c:62:d1:5c:30:c6:
         37:03:1d:76:a7:8e:c3:7c:72:56:c9:2e:87:3d:a3:08:cf:ba:
         ee:90:86:9c:27:a5:43:50:56:38:c8:8e:20:17:43:53:e7:4c:
         60:3a:d7:ed:a3:70:2d:79:a1:c8:d0:89:c4:4c:6f:e0:89:4e:
         a9:b2:36:8e:aa:bc:ee:a7:cc:35:97:f2:94:41:9a:57:88:ad:
         1a:1e:4d:06:6f:64:4f:a3:84:2e:fc:1b:c9:40:35:bf:50:ef:
         5d:df:8f:04:b0:c1:46:24:9e:e7:8a:84:be:bf:32:9f:0d:51:
         dc:c1:eb:65:fc:31:49:4b:09:14:6c:cb:80:b2:f1:fe:7b:da:
         3a:b8:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org