Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa
File:                     3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa (raw, json)
Hash identifier:          RwwrnNoNmwcd6i+WXBKCzIy00d7dcvdB6v15owJwkDU=
Subject key identifier:   C5:E2:14:61:32:79:CB:F4:FD:CB:EC:50:A7:FC:D9:F9:AA:4D:6D:70
Certificate issuer:       /CN=B703F8762B9302F126840F9CEAA892F3910476FA
Certificate serial:       1760553AF0F7A3BE31F48F6248FBA4A6FED161C8
Authority key identifier: B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa
Signing time:             Mon 18 Mar 2024 14:03:31 +0000
ROA not before:           Mon 18 Mar 2024 13:58:31 +0000
ROA not after:            Mon 17 Mar 2025 14:03:31 +0000
asID:                     271090
IP address blocks:        179.48.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:60:55:3a:f0:f7:a3:be:31:f4:8f:62:48:fb:a4:a6:fe:d1:61:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B703F8762B9302F126840F9CEAA892F3910476FA
        Validity
            Not Before: Mar 18 13:58:31 2024 GMT
            Not After : Mar 17 14:03:31 2025 GMT
        Subject: CN=C5E214613279CBF4FDCBEC50A7FCD9F9AA4D6D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:bb:84:ea:ca:70:c3:18:ce:a5:bb:0f:99:
                    88:d4:ca:ac:24:c9:0d:96:5d:77:00:b9:46:e3:d7:
                    61:8e:5d:52:8f:07:22:f5:d5:63:db:5e:af:43:9b:
                    24:4f:d8:17:54:3f:c9:16:75:2a:0a:cc:7a:2e:a5:
                    88:2a:c7:e6:b7:bf:f3:0c:d1:27:9e:60:90:bd:1b:
                    9f:94:ba:08:19:39:ce:6d:20:6e:85:04:4a:26:af:
                    47:19:ec:b3:17:22:f8:f1:27:7d:0b:e8:82:7c:ea:
                    3f:0a:15:3a:23:65:31:9e:bf:9d:f1:11:5f:e0:5c:
                    aa:7b:5f:45:db:01:21:10:e6:23:9b:7e:b2:3d:23:
                    56:54:cb:4a:c6:bf:39:1b:1f:c0:7d:17:ff:2f:73:
                    de:1e:0e:35:29:68:f4:e0:1a:c1:b0:7d:ca:18:bb:
                    01:16:0b:64:fe:4f:57:4f:58:9f:c9:92:5c:d5:0d:
                    54:1d:d2:ce:c1:f2:c0:33:dd:24:c6:d6:39:40:f2:
                    0e:79:ac:5e:47:ba:91:a6:18:3b:07:40:be:30:c0:
                    09:07:ae:65:d0:cd:60:d6:b1:26:03:2d:09:d9:77:
                    3c:3c:18:78:52:a5:f5:aa:cc:f1:9d:f4:5f:ce:fb:
                    a3:f0:31:76:c2:e6:ca:19:83:3a:77:d8:28:09:5d:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E2:14:61:32:79:CB:F4:FD:CB:EC:50:A7:FC:D9:F9:AA:4D:6D:70
            X509v3 Authority Key Identifier:
                keyid:B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/B703F8762B9302F126840F9CEAA892F3910476FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134342e302f32322d3232203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:a8:12:28:53:ac:f9:eb:04:60:47:b1:9b:11:88:d7:79:cf:
         21:a9:ae:47:1d:05:e1:95:68:bc:67:9c:69:62:76:3a:e6:e0:
         4a:fa:b1:b8:37:64:94:c9:f6:be:ea:45:45:2d:62:46:66:52:
         89:56:e7:9d:8e:cb:2c:35:0e:5c:e7:c2:6b:7b:4e:cd:19:d2:
         47:f1:c3:88:31:65:8f:a0:bc:ee:c5:6f:64:a2:7b:3a:5d:61:
         59:88:88:9e:c7:fe:29:01:5b:66:d1:9f:44:73:6a:cd:43:2c:
         2a:83:e2:ee:14:20:c6:1b:33:e1:a0:57:12:80:ff:f4:77:eb:
         50:45:64:b4:4c:0e:fc:90:1b:14:a9:66:1d:c9:10:eb:79:eb:
         03:d3:d0:1b:cb:5d:62:f6:d1:2d:8f:50:96:ca:72:7d:51:f0:
         cf:0f:2d:37:12:20:65:30:4e:eb:2f:46:4c:35:29:59:97:2c:
         72:8f:10:8e:86:ef:c7:b6:d5:57:ad:b0:9a:12:e1:6d:54:64:
         e2:f7:3d:84:ef:19:dd:6b:fb:2a:f4:9a:53:d9:1f:b3:93:2d:
         85:5d:52:8e:27:61:1a:03:09:3e:f9:2d:35:a5:d1:56:cd:da:
         7b:62:78:fb:0c:51:c2:08:dd:29:5b:26:48:44:c7:e7:9a:cf:
         ad:b9:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org