Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3233203d3e203238333630.roa
File:                     3137392e3132342e3232342e302f32302d3233203d3e203238333630.roa (raw, json)
Hash identifier:          4tMUnNodAoKdeoMpzDOdpAZKU9/D+Gjtpb8jOC/dzJM=
Subject key identifier:   C5:CD:E3:DB:54:E2:3F:A0:17:99:78:FA:7E:05:9C:20:B0:42:1B:E5
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       7DF73BCA29FAE040CB48A6A76BBB902E14418A12
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:35:58 +0000
ROA not before:           Sat 06 Apr 2024 03:30:58 +0000
ROA not after:            Sat 05 Apr 2025 03:35:58 +0000
asID:                     28360
IP address blocks:        179.124.224.0/20 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f7:3b:ca:29:fa:e0:40:cb:48:a6:a7:6b:bb:90:2e:14:41:8a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 03:30:58 2024 GMT
            Not After : Apr  5 03:35:58 2025 GMT
        Subject: CN=C5CDE3DB54E23FA0179978FA7E059C20B0421BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:eb:73:21:47:b5:5b:a3:ad:2d:bc:10:00:
                    f2:69:38:66:a2:4b:15:7c:8f:15:69:30:c6:d6:93:
                    87:45:1d:f0:76:53:c6:8c:a6:93:ea:f6:40:ec:db:
                    37:18:e9:61:38:c3:ff:ad:58:e1:cf:13:ae:fc:45:
                    d9:e5:6c:66:fa:5d:b9:a2:ac:d0:f3:91:65:b3:43:
                    5a:59:95:ca:ba:5c:a6:ad:54:03:f3:0f:80:5f:e5:
                    c7:d8:15:82:8e:0f:49:bf:df:89:64:0a:bf:e3:51:
                    a4:8b:7b:af:00:49:c1:53:53:91:f8:3c:6e:9e:ba:
                    03:21:1f:93:0c:32:ce:dd:82:72:b0:3f:7b:5f:82:
                    eb:10:21:78:59:39:d1:e1:0a:4f:23:40:1a:31:a5:
                    a0:b5:0c:a9:af:b4:46:7a:21:85:bd:64:01:39:ff:
                    3f:e6:31:5d:84:1d:bb:a3:61:60:33:7b:3b:08:57:
                    11:b5:73:51:f9:9d:9a:6e:c9:2f:c9:14:2f:31:24:
                    fa:19:75:23:1a:c6:63:aa:55:bd:72:07:e5:36:b0:
                    0b:7c:22:34:36:3e:b2:25:56:49:8d:25:52:74:82:
                    f9:d4:d9:56:e4:df:7c:dd:ad:e5:27:8b:78:03:d3:
                    f5:ce:6c:55:ca:c4:54:43:9b:4b:84:c5:65:ce:7a:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CD:E3:DB:54:E2:3F:A0:17:99:78:FA:7E:05:9C:20:B0:42:1B:E5
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:06:e4:92:10:cc:e5:3b:33:0c:92:24:d6:00:21:14:4d:01:
         b3:a3:62:83:d1:44:d7:f1:81:c8:d8:ce:fd:ab:d8:e3:e2:1f:
         7f:9e:a7:3e:30:f0:7e:31:a1:ed:d9:a9:7d:04:3c:00:65:dc:
         0c:7e:93:82:51:5b:cc:8a:a4:e8:69:5f:84:fa:9f:83:b3:25:
         db:28:6d:4c:41:f5:d1:e5:d0:43:6c:2c:b7:b3:b7:35:ab:94:
         6e:4a:89:ce:52:ae:9c:a5:65:16:cf:d7:10:19:e4:b6:ff:75:
         81:b4:cb:a6:2d:e7:6e:ed:2c:67:c4:b3:f9:dd:09:07:f3:8b:
         ac:f1:e9:76:10:f5:3b:a1:03:0d:6b:b8:21:1e:28:fd:db:a2:
         8d:f2:99:e5:c0:cb:d0:0d:90:d1:80:39:f8:05:99:e8:44:ad:
         d7:62:5d:92:26:39:ea:37:26:db:6e:e1:44:4b:c8:a2:9b:df:
         7c:51:3d:c7:20:ee:d6:51:37:3c:39:d4:4e:7a:21:a7:df:be:
         57:a2:be:6e:89:3c:60:8b:6d:af:7c:72:10:54:6f:57:68:0f:
         b1:9c:b7:93:d6:bf:40:3d:a2:c4:d9:c1:d2:02:93:18:86:93:
         63:ec:06:63:cd:c9:c5:22:a4:60:8a:72:7d:86:75:39:22:7c:
         fb:2a:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org