Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135312e302f32342d3234203d3e203631353837.roa
File:                     3137392e34382e3135312e302f32342d3234203d3e203631353837.roa (raw, json)
Hash identifier:          lN+phOCgT5cxuRl+v/mGQuwXuZwlabueorKLVUBr9V4=
Subject key identifier:   3C:E0:B7:06:19:0B:95:8F:69:2A:90:E9:98:F6:8C:F1:50:A1:DD:AB
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       256C5DDDAD6B2A19E6C5598E46E02D38A62F774D
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135312e302f32342d3234203d3e203631353837.roa
Signing time:             Mon 18 Sep 2023 13:55:56 +0000
ROA not before:           Mon 18 Sep 2023 13:50:56 +0000
ROA not after:            Mon 16 Sep 2024 13:55:56 +0000
asID:                     61587
IP address blocks:        179.48.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6c:5d:dd:ad:6b:2a:19:e6:c5:59:8e:46:e0:2d:38:a6:2f:77:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Sep 18 13:50:56 2023 GMT
            Not After : Sep 16 13:55:56 2024 GMT
        Subject: CN=3CE0B706190B958F692A90E998F68CF150A1DDAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7f:b0:57:fd:70:3e:0f:d8:56:58:6c:a7:e2:
                    06:df:f9:73:97:71:23:8a:23:95:13:b2:53:3e:dd:
                    61:e6:72:d6:ec:af:8a:5c:bd:a0:b8:16:11:b9:87:
                    30:f1:dd:48:32:e5:62:81:da:78:d8:e7:a7:ed:c4:
                    4a:f6:da:d7:40:79:61:df:8d:a2:ff:db:e2:82:07:
                    e2:97:04:7c:6e:fa:bd:9a:89:e7:b9:83:f2:c8:e7:
                    8c:38:6e:2d:3b:f3:0a:af:c1:ea:d6:d9:71:db:97:
                    5a:38:24:07:38:e0:61:bc:e3:8f:d5:60:2d:05:06:
                    64:70:f2:ef:19:f2:fc:77:03:52:5e:2e:01:8d:6d:
                    2b:b4:8a:03:f8:84:cc:52:78:70:a7:46:35:b4:30:
                    da:8c:8c:62:ad:b5:bf:01:8b:1c:ac:12:98:de:0a:
                    94:35:2a:47:b7:c2:24:45:a1:8e:b7:0b:2e:d7:94:
                    5a:04:14:e8:fb:ae:9c:e3:a8:6c:75:d7:c3:2d:b1:
                    f7:74:74:56:aa:a6:e8:11:cf:96:1b:c4:ef:fd:f7:
                    7d:5f:46:08:dc:1c:83:d7:d7:d9:d2:f3:8e:04:13:
                    d8:d4:f5:79:d3:eb:bc:a8:46:f4:ca:4e:50:fa:a4:
                    0a:f4:32:5d:b2:66:e8:56:5e:3a:37:bf:36:49:c7:
                    3e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E0:B7:06:19:0B:95:8F:69:2A:90:E9:98:F6:8C:F1:50:A1:DD:AB
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135312e302f32342d3234203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:29:9a:56:62:56:6d:ed:6a:e2:00:22:40:56:77:40:c7:0d:
         e6:c1:4a:33:91:17:2b:d1:49:3c:fa:4f:5a:db:00:66:c3:5d:
         09:e9:e5:e1:13:f7:c2:30:0c:d3:d5:a4:93:46:98:e6:3b:ee:
         f2:9a:19:49:74:5e:36:dd:a4:b1:90:90:79:98:fb:1e:a5:56:
         29:f4:c3:9d:c8:14:64:d3:c9:ff:ef:92:07:96:3b:7e:60:90:
         c9:f6:0d:05:6e:38:a5:92:05:59:8e:8c:93:8f:e8:91:ea:42:
         bd:78:fe:ba:46:d8:f9:0c:46:22:02:05:99:cd:ef:58:37:9a:
         b6:a3:9a:80:77:60:6e:f5:02:eb:7c:c0:de:3c:d1:2d:9d:46:
         32:29:c7:23:50:01:d4:ea:3f:bb:5b:f5:eb:77:8c:b1:5f:db:
         64:03:25:ef:71:be:d0:54:ff:55:ce:c8:75:26:89:9c:af:bf:
         66:55:df:0d:7a:19:0d:f9:6b:32:b4:2c:af:fd:63:2d:45:69:
         a6:49:d5:85:84:68:4e:83:a5:1e:7b:fd:47:c0:62:43:2a:9d:
         0a:10:fc:b4:9f:f1:24:e8:d1:51:70:6e:39:84:42:b0:3e:75:
         5d:18:4b:61:4f:6f:63:07:0a:c5:fd:6e:b3:9a:26:e0:89:5e:
         04:de:55:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org