Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/3137392e34382e37322e302f32342d3234203d3e20323731303638.roa
File:                     3137392e34382e37322e302f32342d3234203d3e20323731303638.roa (raw, json)
Hash identifier:          DMtIOwiq0tyrSTtAvvZ6yrkhAlq4jhSkA+mqQLF2rl4=
Subject key identifier:   9D:40:F1:CA:A7:93:45:DB:05:6E:32:D7:AE:7E:C3:D2:43:7E:16:C5
Certificate issuer:       /CN=6D6415DE588E3A2B572813616F55A1C1F2E9FF42
Certificate serial:       5D9F767FD264FA2DFA43D21BBCF222C1C02F77A4
Authority key identifier: 6D:64:15:DE:58:8E:3A:2B:57:28:13:61:6F:55:A1:C1:F2:E9:FF:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D6415DE588E3A2B572813616F55A1C1F2E9FF42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/3137392e34382e37322e302f32342d3234203d3e20323731303638.roa
Signing time:             Sat 09 Sep 2023 13:02:19 +0000
ROA not before:           Sat 09 Sep 2023 12:57:19 +0000
ROA not after:            Sat 07 Sep 2024 13:02:19 +0000
asID:                     271068
IP address blocks:        179.48.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9f:76:7f:d2:64:fa:2d:fa:43:d2:1b:bc:f2:22:c1:c0:2f:77:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6415DE588E3A2B572813616F55A1C1F2E9FF42
        Validity
            Not Before: Sep  9 12:57:19 2023 GMT
            Not After : Sep  7 13:02:19 2024 GMT
        Subject: CN=9D40F1CAA79345DB056E32D7AE7EC3D2437E16C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:fa:f3:44:e4:34:30:d6:9f:32:83:71:d9:
                    f9:60:a4:d5:68:13:ea:43:02:7d:39:7c:85:58:71:
                    90:ac:ab:de:ae:55:46:7a:6c:5d:e9:09:10:da:54:
                    aa:d3:d0:27:77:7c:3c:cd:0b:14:40:63:8c:67:6a:
                    9d:88:ca:43:ed:e1:f6:f2:4b:62:e7:e3:e3:e8:26:
                    a7:15:97:75:97:3b:2e:34:d0:87:5e:e1:0c:39:63:
                    8d:5b:ec:b2:d0:b6:45:b1:c7:93:8a:2d:93:64:74:
                    90:86:4a:d7:b9:48:96:52:f5:51:2c:74:b1:3b:eb:
                    b5:ed:4d:7c:fc:be:49:e7:ee:98:2d:04:69:63:79:
                    0a:da:02:eb:d6:74:11:5a:6f:11:c4:75:be:33:8e:
                    a0:71:96:b1:ea:89:d5:10:93:b8:c3:3e:06:47:8f:
                    69:2c:12:52:30:49:67:d4:92:9a:46:ad:6c:ab:02:
                    b4:24:d5:c1:db:cc:d7:61:04:60:7b:a5:31:75:d4:
                    87:78:46:6f:5b:19:9e:81:2e:8f:2c:26:d3:05:2a:
                    91:57:14:36:90:01:a2:8a:92:68:26:f5:75:4a:5c:
                    75:0a:73:61:a5:4e:5c:70:4e:e1:d8:39:5d:0e:a8:
                    ea:91:3b:08:ec:d9:cf:1a:df:78:55:18:b3:9f:3f:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:40:F1:CA:A7:93:45:DB:05:6E:32:D7:AE:7E:C3:D2:43:7E:16:C5
            X509v3 Authority Key Identifier:
                keyid:6D:64:15:DE:58:8E:3A:2B:57:28:13:61:6F:55:A1:C1:F2:E9:FF:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/6D6415DE588E3A2B572813616F55A1C1F2E9FF42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D6415DE588E3A2B572813616F55A1C1F2E9FF42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/3137392e34382e37322e302f32342d3234203d3e20323731303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:e7:aa:38:57:be:81:b3:e9:32:ea:13:27:8a:99:7c:78:
         4d:70:e4:5a:ad:9d:b3:0c:80:f7:ce:7f:63:20:c5:6c:6a:a1:
         71:aa:f1:d9:2f:5d:ab:55:be:db:aa:45:f4:78:53:a2:61:08:
         ad:6f:f0:b0:3d:6f:b6:ef:84:88:b1:ba:e7:62:c6:1f:c2:69:
         a9:b2:0a:04:c1:38:76:95:7c:6e:a7:5b:d9:c3:89:00:87:10:
         6e:42:db:43:3e:22:5a:ae:fe:3f:ec:bd:fe:fb:7e:7a:ad:b0:
         db:38:c8:7f:bf:07:2e:be:df:50:9c:f5:d6:c3:0c:99:0f:f6:
         9e:85:b5:7c:d5:35:3a:7c:fe:e6:00:0f:0d:ef:ae:ca:87:53:
         4b:9a:e0:9e:7d:44:65:c0:f9:ee:83:19:da:0c:f5:a8:88:f1:
         9a:57:95:42:d8:98:42:5f:db:97:fa:8b:5b:27:a2:9a:ff:58:
         c6:bd:92:e3:f8:4e:e3:82:94:6d:b2:39:b5:88:aa:c4:aa:d7:
         1a:33:3c:c8:78:a1:f5:52:a3:46:9f:15:bf:7c:65:93:64:14:
         01:98:bc:03:04:72:97:89:7e:11:ae:d2:4c:ca:40:f1:f0:4d:
         8c:35:2f:f7:67:e3:08:af:97:41:ef:ff:1b:bf:ad:20:f3:4d:
         d0:3c:62:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org