Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137392e3132372e34302e302f32312d3234203d3e203532393133.roa
File:                     3137392e3132372e34302e302f32312d3234203d3e203532393133.roa (raw, json)
Hash identifier:          WdxhzI+tLUcyN/0qT4l7WZ9uKlwIikrIW7oAJTKAgz8=
Subject key identifier:   7E:D1:D2:12:5C:F0:7C:08:7A:B4:63:AE:A0:5F:7C:10:4A:B8:B1:6D
Certificate issuer:       /CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
Certificate serial:       5DA3D588DF8F3BFB885FB6184D9E856BF25E0E47
Authority key identifier: E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137392e3132372e34302e302f32312d3234203d3e203532393133.roa
Signing time:             Fri 22 Mar 2024 18:59:45 +0000
ROA not before:           Fri 22 Mar 2024 18:54:45 +0000
ROA not after:            Fri 21 Mar 2025 18:59:45 +0000
asID:                     52913
IP address blocks:        179.127.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a3:d5:88:df:8f:3b:fb:88:5f:b6:18:4d:9e:85:6b:f2:5e:0e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Validity
            Not Before: Mar 22 18:54:45 2024 GMT
            Not After : Mar 21 18:59:45 2025 GMT
        Subject: CN=7ED1D2125CF07C087AB463AEA05F7C104AB8B16D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:2d:4b:58:94:db:a3:ba:51:ec:71:ff:cd:
                    12:c4:77:85:e1:6a:4c:f6:99:15:c2:eb:ca:54:25:
                    38:b3:1d:fa:f7:7e:07:4b:ed:ae:a4:d8:90:16:32:
                    84:b4:21:96:b7:1c:78:a2:e0:74:5c:c6:51:80:7c:
                    1b:5d:c4:c2:97:1e:fc:79:6b:5a:a1:62:c1:57:4a:
                    c5:da:dc:94:f6:ed:21:43:1c:bf:f8:de:f5:5f:8d:
                    b2:a8:53:36:f4:b3:2e:42:f2:5f:7a:da:11:40:37:
                    ca:8c:38:ed:bf:1c:ad:8a:b0:98:36:fb:b1:b2:f6:
                    a8:80:54:28:15:a3:1a:b3:66:2b:d7:6e:4e:9d:ce:
                    40:11:19:bb:f3:87:05:4f:e5:2e:26:bc:07:ca:d8:
                    69:7a:d2:58:09:4c:3a:eb:e0:0e:bf:b3:2e:57:1b:
                    fb:f8:a0:f8:55:2b:d9:19:3d:76:bb:18:76:05:f1:
                    fd:69:c1:32:f7:bf:66:a8:40:6e:85:81:d2:3f:6b:
                    ce:01:29:e4:6b:f6:09:8f:d1:a3:1e:c8:26:4a:b5:
                    15:6e:c8:7d:ec:2a:3c:9d:84:43:c5:af:0d:07:9a:
                    99:28:ba:49:48:74:5a:60:b0:80:0a:25:98:0a:40:
                    59:a2:2e:da:34:55:89:a2:e4:86:4d:f1:97:86:03:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D1:D2:12:5C:F0:7C:08:7A:B4:63:AE:A0:5F:7C:10:4A:B8:B1:6D
            X509v3 Authority Key Identifier:
                keyid:E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137392e3132372e34302e302f32312d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:33:37:f5:e4:75:a1:41:f6:fd:03:69:e9:c1:f3:34:17:39:
         79:54:1a:63:dc:98:22:83:bc:69:8d:14:b2:b2:01:72:7b:fc:
         23:e8:15:a3:13:d7:a9:53:66:fa:1e:57:f2:8b:ed:8a:9a:ad:
         a5:b4:01:5d:12:26:17:b0:0f:dd:dd:fc:64:31:21:f6:b0:39:
         86:80:54:92:a9:b4:d6:92:a2:89:e8:bc:90:d1:11:3e:ad:97:
         65:55:70:a0:72:29:28:93:5b:fb:b9:65:cc:07:ec:77:a3:2a:
         27:a7:cf:d6:43:e5:ac:33:4d:96:01:67:98:49:b0:d4:2e:82:
         ae:38:9e:c5:d5:78:4c:3d:40:e4:75:a7:82:d1:87:ee:02:78:
         c6:8a:77:c5:3b:73:96:7f:ab:65:12:0a:ff:b9:cf:90:d9:6b:
         df:3e:0c:ed:bd:01:6a:a7:e1:f1:da:43:ff:db:f8:30:08:fd:
         82:50:31:f7:cf:85:30:9e:b2:6d:12:17:c0:02:28:73:d9:a3:
         0f:e2:4f:76:b5:90:c5:d1:25:bd:ea:fb:82:f2:8a:fa:0e:49:
         3b:16:22:68:64:43:fb:ca:94:4f:a9:89:15:39:2c:14:c3:b3:
         9d:c0:48:f6:fa:91:cd:ab:9b:28:be:f2:c5:e5:8f:e9:bc:8c:
         e1:30:8f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org