Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134362e302f32342d3234203d3e20323731303930.roa
File:                     3137392e34382e3134362e302f32342d3234203d3e20323731303930.roa (raw, json)
Hash identifier:          YJgqHRntfZoV8FzGOao4t02pDpMYdggOeIqJq7a3//E=
Subject key identifier:   9F:2D:A5:AB:63:7B:4D:CA:2E:92:9E:E0:F2:38:A2:D4:9C:EF:80:CA
Certificate issuer:       /CN=B703F8762B9302F126840F9CEAA892F3910476FA
Certificate serial:       7BC1592CF74A1DA2B12F743FA2FBB70FE86EB7AE
Authority key identifier: B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134362e302f32342d3234203d3e20323731303930.roa
Signing time:             Mon 18 Mar 2024 14:03:29 +0000
ROA not before:           Mon 18 Mar 2024 13:58:29 +0000
ROA not after:            Mon 17 Mar 2025 14:03:29 +0000
asID:                     271090
IP address blocks:        179.48.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c1:59:2c:f7:4a:1d:a2:b1:2f:74:3f:a2:fb:b7:0f:e8:6e:b7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B703F8762B9302F126840F9CEAA892F3910476FA
        Validity
            Not Before: Mar 18 13:58:29 2024 GMT
            Not After : Mar 17 14:03:29 2025 GMT
        Subject: CN=9F2DA5AB637B4DCA2E929EE0F238A2D49CEF80CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:9c:2a:f2:75:c7:d1:c4:3f:76:58:49:bf:
                    53:fe:58:d7:2d:e3:29:73:3c:9e:21:ba:79:1d:40:
                    83:a0:8e:dd:fe:0f:91:c9:31:b9:8c:8a:bc:75:68:
                    d1:21:1f:37:7f:ab:9c:da:05:7f:ed:47:02:98:0d:
                    15:d6:ca:6d:bc:5e:13:cd:15:e3:99:f8:19:02:20:
                    43:34:fa:1d:d1:e0:e8:5c:8b:f8:4a:4d:d1:f5:8f:
                    45:0d:f5:24:5a:92:4f:77:f1:fa:3e:53:af:ff:e6:
                    c6:a0:c2:be:be:1f:c2:85:5a:80:09:83:66:14:f8:
                    75:6a:07:c7:6b:17:a1:cd:ad:71:2e:42:63:99:2d:
                    e4:24:1a:ca:78:15:48:48:d0:24:c4:c7:9a:09:d5:
                    21:43:39:32:1e:9c:2a:04:8f:9e:3a:16:9a:36:26:
                    6b:93:59:d6:98:1b:d9:6c:6d:86:b9:d5:f2:59:a4:
                    6d:77:7b:e1:98:f2:d2:60:da:6a:b6:3c:42:46:51:
                    51:12:d8:06:2c:9c:85:77:08:80:0e:fe:19:17:c8:
                    13:ac:4d:47:91:5c:4e:97:bd:d2:f3:99:f7:ed:3f:
                    84:34:a9:d4:1e:ab:18:e6:56:30:fd:89:56:e9:36:
                    79:53:1f:5c:bc:a2:a6:49:22:44:a5:4b:24:a4:d2:
                    7d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2D:A5:AB:63:7B:4D:CA:2E:92:9E:E0:F2:38:A2:D4:9C:EF:80:CA
            X509v3 Authority Key Identifier:
                keyid:B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/B703F8762B9302F126840F9CEAA892F3910476FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134362e302f32342d3234203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:cd:54:d4:57:47:29:51:c8:b4:f3:c2:8f:56:e7:86:bf:da:
         5f:74:2a:3c:51:7f:b5:b4:f0:fd:26:6b:a5:e9:73:09:a6:f7:
         f5:8a:47:3e:de:f2:85:1d:82:f3:54:75:dd:70:00:9a:d1:3e:
         c6:b4:15:e4:66:f4:0f:13:9f:13:fe:26:7a:aa:eb:61:3b:f1:
         1f:c6:eb:93:22:8e:7a:13:23:b4:0c:8c:02:54:27:b1:4e:41:
         de:a5:ce:d8:67:71:ed:99:52:2e:5a:f3:9d:97:6f:d2:53:fd:
         ee:50:92:99:0e:9c:f6:fc:b3:1b:6f:36:50:94:fd:1c:f7:67:
         9c:63:9f:7b:7c:ad:15:ae:d5:ed:7f:c0:6a:b8:8b:08:e8:90:
         17:02:bb:7a:c3:bd:92:f4:a9:8c:a7:d6:ec:58:24:e8:b8:de:
         87:6a:cc:f9:99:f0:8c:9d:5f:3e:52:ac:b6:83:29:a4:48:fd:
         d9:16:9c:2c:02:ed:3c:ad:ff:f5:fe:c6:f0:01:16:90:52:e3:
         b9:31:b1:11:28:0a:58:6a:5e:cb:59:3f:27:7d:bc:3c:fb:74:
         66:b0:29:0a:4c:35:87:15:90:82:a2:67:e6:1d:55:91:90:77:
         44:10:09:06:f0:42:c7:eb:2f:34:0b:12:db:db:c9:40:4c:8f:
         d9:bf:ae:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org