Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3232203d3e203238333630.roa
File:                     3137392e3132342e3232342e302f32302d3232203d3e203238333630.roa (raw, json)
Hash identifier:          GO5TN75VDBdp7zosaX5Ezj/kGkifMb1ni/g2hvv0rKU=
Subject key identifier:   42:DB:00:8A:29:CC:B7:C7:86:A1:FF:17:6D:2F:B3:8E:54:04:3B:F7
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       1ED65D306C806B072CF878AB0ACCC57E2201C840
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3232203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:08:52 +0000
ROA not before:           Sat 06 Apr 2024 03:03:52 +0000
ROA not after:            Sat 05 Apr 2025 03:08:52 +0000
asID:                     28360
IP address blocks:        179.124.224.0/20 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d6:5d:30:6c:80:6b:07:2c:f8:78:ab:0a:cc:c5:7e:22:01:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 03:03:52 2024 GMT
            Not After : Apr  5 03:08:52 2025 GMT
        Subject: CN=42DB008A29CCB7C786A1FF176D2FB38E54043BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:9c:9d:6a:8a:10:7a:7c:43:12:de:64:ff:
                    d5:7b:a9:c8:4c:c1:71:7a:03:c5:b4:62:28:58:78:
                    b0:9a:ff:94:6a:f1:a7:64:01:92:f0:01:e2:b5:9e:
                    cc:4e:bf:bc:40:ab:02:3d:9e:fe:c0:6e:f4:d8:70:
                    9a:3d:44:bc:dd:20:6f:64:81:12:88:3d:84:b1:33:
                    63:a8:eb:fd:00:ea:9a:94:7f:db:77:54:df:1e:1d:
                    8a:b5:32:90:93:47:c6:e5:a4:83:30:ec:00:d8:4e:
                    d1:95:6d:20:95:5b:a0:d3:41:42:c6:4b:4a:a7:78:
                    7a:38:3a:bc:bf:fd:09:1c:b1:cc:7b:f9:ad:69:b0:
                    34:23:c9:58:92:07:08:af:e3:94:38:54:18:e5:93:
                    f5:a5:b3:57:3d:4f:d4:59:f8:f4:5e:0f:78:5b:b1:
                    41:91:c1:17:5b:3d:dc:6d:d8:0c:83:3a:a1:a6:50:
                    67:d0:6c:ec:25:bb:b6:16:29:27:64:10:fb:f0:00:
                    b7:db:e7:a8:87:9a:9d:77:ad:ff:97:63:7b:17:25:
                    c4:76:1c:b0:39:4a:24:51:28:5e:36:7a:db:1e:64:
                    fa:36:56:f1:a7:86:d0:41:41:60:85:46:8d:39:38:
                    09:c5:2e:37:16:ee:cc:f6:88:d3:5a:f9:d9:ae:28:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DB:00:8A:29:CC:B7:C7:86:A1:FF:17:6D:2F:B3:8E:54:04:3B:F7
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3232203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:05:70:e7:07:d6:73:97:f6:74:c4:47:02:c9:55:2f:2a:b9:
         cd:1d:65:48:2d:f7:19:71:88:0d:0e:d8:ed:eb:5d:a3:ea:c6:
         56:f2:d8:67:61:f1:2f:7b:c9:45:85:fa:8c:96:67:2e:03:22:
         29:19:a7:42:ed:2f:2c:1f:96:a1:75:0e:48:64:18:63:04:22:
         70:9c:f6:c9:8d:ee:d3:e6:e8:66:d6:8d:e6:cf:10:b7:7d:5f:
         9b:12:45:99:7e:a3:70:18:42:16:ce:89:d7:58:1b:9f:52:96:
         80:cd:ea:1c:10:8b:62:0b:be:f5:fd:39:21:6c:48:91:e8:c2:
         0d:90:46:46:eb:bf:59:34:80:76:4d:c2:e4:af:18:f4:ce:1c:
         91:07:33:db:25:92:67:43:74:52:f5:f2:c6:8d:af:b2:75:28:
         92:6d:a1:78:b5:92:85:d1:ba:a4:20:72:9c:97:b9:a2:7e:47:
         35:77:33:0a:92:75:41:d9:75:aa:56:f1:f5:0f:d8:6e:96:c2:
         97:fd:4b:87:d5:5a:85:76:38:ec:6d:48:b7:37:c4:5b:e4:40:
         5a:82:1f:2e:4e:9f:ac:c3:42:d9:46:e4:0c:e4:0e:e7:e1:d5:
         5a:68:1e:11:f4:67:f1:66:9c:c0:08:aa:2e:89:11:e1:4e:a3:
         93:72:ee:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHtZdMGyAawcs+HirCszFfiIByEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QkMwRjE4RjY4NkQ3NDkxMEMwQ0JEMEREMThBQzJD
RTgyQ0JGNzAeFw0yNDA0MDYwMzAzNTJaFw0yNTA0MDUwMzA4NTJaMDMxMTAvBgNV
BAMTKDQyREIwMDhBMjlDQ0I3Qzc4NkExRkYxNzZEMkZCMzhFNTQwNDNCRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCr5ydaooQenxDEt5k/9V7qchM
wXF6A8W0YihYeLCa/5Rq8adkAZLwAeK1nsxOv7xAqwI9nv7AbvTYcJo9RLzdIG9k
gRKIPYSxM2Oo6/0A6pqUf9t3VN8eHYq1MpCTR8blpIMw7ADYTtGVbSCVW6DTQULG
S0qneHo4Ory//Qkcscx7+a1psDQjyViSBwiv45Q4VBjlk/Wls1c9T9RZ+PReD3hb
sUGRwRdbPdxt2AyDOqGmUGfQbOwlu7YWKSdkEPvwALfb56iHmp13rf+XY3sXJcR2
HLA5SiRRKF42etseZPo2VvGnhtBBQWCFRo05OAnFLjcW7sz2iNNa+dmuKOT7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQtsAiinMt8eGof8XbS+zjlQEO/cwHwYDVR0j
BBgwFoAUW1vA8Y9obXSRDAy9DdGKws6Cy/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjVCQzBGMThGNjg2RDc0OTEwQzBDQkQwREQxOEFDMkNFODJDQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUJDMEYxOEY2ODZENzQ5
MTBDMENCRDBERDE4QUMyQ0U4MkNCRjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzIyMDNkM2UyMDMy
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASzfOAwDQYJKoZIhvcNAQELBQADggEBACsFcOcH
1nOX9nTERwLJVS8quc0dZUgt9xlxiA0O2O3rXaPqxlby2Gdh8S97yUWF+oyWZy4D
IikZp0LtLywflqF1DkhkGGMEInCc9smN7tPm6GbWjebPELd9X5sSRZl+o3AYQhbO
iddYG59SloDN6hwQi2ILvvX9OSFsSJHowg2QRkbrv1k0gHZNwuSvGPTOHJEHM9sl
kmdDdFL18saNr7J1KJJtoXi1koXRuqQgcpyXuaJ+RzV3MwqSdUHZdapW8fUP2G6W
wpf9S4fVWoV2OOxtSLc3xFvkQFqCHy5On6zDQtlG5AzkDufh1VpoHhH0Z/FmnMAI
qi6JEeFOo5Ny7iY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org