Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa
File:                     3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa (raw, json)
Hash identifier:          hGtqfNBc08fI6UDnanKagUGH73xMkSwdU/INR2emxcg=
Subject key identifier:   AF:77:98:FA:0E:BD:FD:BB:3E:C8:F8:05:F7:C2:9F:EB:CF:23:30:AF
Certificate issuer:       /CN=B703F8762B9302F126840F9CEAA892F3910476FA
Certificate serial:       3E89290FCEA6696882575CFCD743EE77D430282C
Authority key identifier: B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa
Signing time:             Mon 18 Mar 2024 14:03:29 +0000
ROA not before:           Mon 18 Mar 2024 13:58:29 +0000
ROA not after:            Mon 17 Mar 2025 14:03:29 +0000
asID:                     271090
IP address blocks:        179.48.146.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:89:29:0f:ce:a6:69:68:82:57:5c:fc:d7:43:ee:77:d4:30:28:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B703F8762B9302F126840F9CEAA892F3910476FA
        Validity
            Not Before: Mar 18 13:58:29 2024 GMT
            Not After : Mar 17 14:03:29 2025 GMT
        Subject: CN=AF7798FA0EBDFDBB3EC8F805F7C29FEBCF2330AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:9f:75:e7:58:21:cb:69:d6:1b:31:81:f2:
                    a0:35:92:1a:a8:15:4a:8e:05:63:a4:43:14:2a:36:
                    db:b1:2f:36:98:3c:ac:f9:43:59:d6:b7:f9:4f:60:
                    c1:3f:7e:7e:72:7a:06:52:28:9a:61:a8:4c:ce:35:
                    58:82:b0:9c:8c:19:72:97:42:92:09:85:45:42:9b:
                    a1:43:8b:5f:c5:47:38:5b:56:d6:9d:e1:9b:5d:1b:
                    c3:2b:58:0f:72:6f:15:c5:98:bf:8b:2b:27:56:d7:
                    9c:ea:8b:ce:40:34:12:c7:a6:b0:cf:61:cb:cb:a7:
                    07:d5:12:c8:a4:2e:4b:ca:a8:09:03:4e:ba:c6:1b:
                    ce:7f:fe:d9:05:7c:ca:8b:92:9d:98:88:b9:46:65:
                    90:7d:29:0a:d2:82:81:30:6d:c9:5f:91:29:31:74:
                    0a:3f:9c:d3:96:2f:98:d2:72:65:1b:74:a9:4c:0b:
                    b7:9e:23:7e:8a:c1:32:5b:6f:d9:2a:cc:a3:6e:5b:
                    35:cc:1c:2d:79:4d:78:8e:71:03:15:a0:ea:a4:ba:
                    f6:5f:87:08:11:e7:44:22:b3:df:ae:cb:73:44:a8:
                    0b:2b:67:c7:b4:c1:88:01:8c:b0:05:4a:07:96:73:
                    f0:fa:6b:b2:3f:00:1b:fe:98:d1:89:fe:f4:a4:6f:
                    30:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:77:98:FA:0E:BD:FD:BB:3E:C8:F8:05:F7:C2:9F:EB:CF:23:30:AF
            X509v3 Authority Key Identifier:
                keyid:B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/B703F8762B9302F126840F9CEAA892F3910476FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:ab:52:aa:a5:af:18:e0:88:d3:6a:29:da:bc:46:d1:a3:
         21:a8:2a:ea:dc:50:47:28:6a:c8:e0:d9:0a:a0:b0:f9:f0:f5:
         f1:7f:2b:d9:fa:ba:0e:95:2e:74:c8:bb:4c:c9:2b:ef:c2:52:
         8e:6f:f7:f7:b0:62:bb:71:f8:80:45:d7:2c:ae:06:5d:35:48:
         54:00:17:70:15:3c:61:da:a3:c0:86:95:2e:7c:c8:f5:7d:9e:
         a5:4a:04:d0:a0:64:54:09:62:00:72:7d:9c:34:35:89:13:ef:
         69:81:5e:19:43:bf:91:cd:1d:62:22:7b:f8:3b:8e:b6:4b:82:
         d3:92:ed:b6:79:d2:71:fd:6f:81:c0:2c:0f:4b:e7:4e:e0:f5:
         0c:58:ca:c3:b9:6e:ca:58:68:54:cd:7c:4a:50:50:6b:32:2f:
         7c:7a:74:7f:3f:28:91:a1:cc:68:1a:d3:d9:95:4b:7b:5b:a0:
         22:82:be:0d:51:ee:5f:6f:4a:f4:e5:9c:91:ed:1b:22:68:2e:
         10:7c:e7:1d:09:c5:33:95:e7:5c:50:66:a2:91:67:0c:04:c2:
         65:0b:2f:15:e9:a1:b2:43:2b:70:1e:d2:f8:a7:ea:5f:cc:d2:
         2f:cb:f1:d2:ec:75:54:50:16:8a:71:db:e1:80:5b:d6:c0:15:
         7b:a0:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org