Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3134342e302f32302d3234203d3e20323731373234.roa
File:                     3137392e3139312e3134342e302f32302d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          xiU7PrZO/Zd4UYQl3eKxeZ0YOXgVQp+TfiFjjbehpH0=
Subject key identifier:   07:03:E6:9C:09:4F:36:02:64:FC:5A:FF:A9:D2:C5:8D:1D:BC:54:B5
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       58CB7FC0AB0A11505B56492AB7DB2BC45E0C54B7
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3134342e302f32302d3234203d3e20323731373234.roa
Signing time:             Wed 31 Jan 2024 14:31:15 +0000
ROA not before:           Wed 31 Jan 2024 14:26:15 +0000
ROA not after:            Wed 29 Jan 2025 14:31:15 +0000
asID:                     271724
IP address blocks:        179.191.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cb:7f:c0:ab:0a:11:50:5b:56:49:2a:b7:db:2b:c4:5e:0c:54:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 14:26:15 2024 GMT
            Not After : Jan 29 14:31:15 2025 GMT
        Subject: CN=0703E69C094F360264FC5AFFA9D2C58D1DBC54B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:07:07:80:4a:ef:9d:9b:df:ee:3c:f6:d7:
                    56:34:c0:c0:c1:b6:f6:84:6a:be:89:22:0a:ef:cd:
                    de:43:dd:99:db:f6:a7:e5:9d:f3:02:d1:a1:39:8b:
                    43:89:5c:f7:05:87:75:19:6f:2e:a4:40:83:c6:50:
                    40:e3:66:22:94:f6:29:0c:d1:09:d0:71:87:38:db:
                    78:ac:00:e7:4e:79:5a:f7:65:43:53:53:48:76:f2:
                    ef:51:19:88:ad:a3:c8:19:5d:46:8e:15:79:c9:c6:
                    8c:b1:08:31:44:49:64:78:3b:c9:4b:43:7c:ac:c6:
                    38:52:67:49:6f:ae:6f:1f:fb:e2:68:ba:12:7f:7d:
                    7a:b9:16:7c:42:6b:be:1e:a6:68:a5:09:44:c9:86:
                    b1:78:16:62:ba:22:fb:73:d8:ed:e8:ce:52:0b:94:
                    95:52:90:55:ce:af:e9:3e:6d:03:be:b6:4a:66:d3:
                    71:12:a4:87:0e:51:17:ab:ea:6c:27:13:89:5c:b8:
                    35:74:24:38:bf:63:a8:7c:ce:07:2a:af:75:eb:6f:
                    44:c4:66:24:c2:d2:6c:8c:69:30:9b:07:75:94:a3:
                    70:b3:3a:b1:e6:07:6b:d0:ef:c9:c3:61:6b:49:ce:
                    07:3f:3c:5d:e4:c3:e4:48:d6:2b:e2:9a:40:14:64:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:03:E6:9C:09:4F:36:02:64:FC:5A:FF:A9:D2:C5:8D:1D:BC:54:B5
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3134342e302f32302d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:23:a5:02:7c:fa:0f:6f:fe:d8:88:af:f1:40:8f:24:52:38:
         ec:71:c8:25:ca:16:3a:35:8c:52:0b:e3:16:5f:c0:24:64:67:
         36:4c:b0:7a:3b:3c:f4:7f:ef:b1:cd:0d:d7:ce:fb:42:2d:d3:
         4d:07:e5:eb:79:4e:32:56:02:bd:62:55:55:63:80:52:52:f7:
         d4:34:d7:01:1f:1d:18:84:32:82:43:45:0b:e1:09:d8:37:ae:
         0b:e9:7d:9e:2c:2e:29:14:65:38:1d:38:69:27:71:5e:88:fd:
         bc:9b:cc:c1:d6:85:a4:a6:4d:a7:70:e4:09:75:84:ef:07:86:
         70:e0:3e:d7:5b:88:8e:44:86:29:5e:bb:2e:55:bf:bf:8d:03:
         0a:5f:4f:c4:b4:7d:17:e9:ba:d4:b0:b1:48:92:00:15:06:89:
         c3:c2:86:62:d9:9f:85:98:28:20:28:6d:a5:64:87:fc:ed:cd:
         d1:53:ff:bb:69:6b:a5:c1:19:d9:7f:c4:5e:41:71:25:b8:3a:
         44:70:27:b3:c5:b5:01:94:6b:de:b6:95:af:00:0d:0a:77:8f:
         85:f6:11:11:a2:bb:0a:e4:54:55:d2:27:28:fe:0d:f4:0a:9a:
         22:eb:59:90:fa:28:d7:8b:e1:d4:66:f0:a1:34:4f:ac:ab:b0:
         5a:79:2f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org