Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3234203d3e203238333630.roa
File:                     3137392e3132342e3232342e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier:          qNFfWWbjLdVnhNx4FuGiSBoXQ4DTHeaggflbIk05gQg=
Subject key identifier:   3C:39:A9:C0:19:CF:C2:C1:20:EB:AB:75:DC:63:CA:2D:1C:93:21:FD
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       17C26908C17544BD1DE124ED6FA0CFD22F916E66
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3234203d3e203238333630.roa
Signing time:             Fri 02 Feb 2024 20:57:09 +0000
ROA not before:           Fri 02 Feb 2024 20:52:09 +0000
ROA not after:            Fri 31 Jan 2025 20:57:09 +0000
asID:                     28360
IP address blocks:        179.124.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c2:69:08:c1:75:44:bd:1d:e1:24:ed:6f:a0:cf:d2:2f:91:6e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Feb  2 20:52:09 2024 GMT
            Not After : Jan 31 20:57:09 2025 GMT
        Subject: CN=3C39A9C019CFC2C120EBAB75DC63CA2D1C9321FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:42:3f:e2:d9:61:33:24:0a:7b:a1:3e:24:
                    09:98:0a:b6:3f:2d:f7:c7:75:c6:1c:bf:47:66:16:
                    88:a5:12:5b:31:87:bf:49:59:15:87:e1:4e:77:aa:
                    40:ef:00:98:28:51:b5:ee:af:b9:b3:fb:f7:c0:28:
                    9c:8a:8e:72:47:19:9e:a5:6e:43:bb:ef:3a:f7:c6:
                    03:d2:e5:be:9f:79:cc:3b:17:b0:2a:96:ba:2c:b2:
                    9e:23:98:d8:82:5d:3d:09:84:56:77:21:4e:9a:ad:
                    73:a6:b5:f0:76:0c:89:d7:1f:46:cf:3c:11:ec:d8:
                    8f:11:5a:24:a4:2d:ed:81:1d:2c:56:69:2e:a3:02:
                    d7:9e:4e:20:4b:32:37:e4:83:40:2a:61:bc:59:44:
                    64:43:cd:b4:34:6f:ff:f6:62:ca:a3:73:31:73:b9:
                    7b:67:28:f5:7a:cb:59:d6:db:a6:37:96:99:84:63:
                    ce:53:90:a4:7b:38:26:45:27:bf:bc:e7:64:3d:30:
                    d6:d4:71:99:bd:19:f7:f7:cf:a8:8c:36:f1:05:5a:
                    d1:30:5d:3d:9a:8e:a7:64:84:31:5a:f5:74:65:d3:
                    4c:b6:47:7b:fa:37:09:d2:21:e4:5a:41:bd:a2:20:
                    e7:4b:f4:e1:7c:d1:18:7e:49:ed:cc:5b:72:f9:9e:
                    86:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:39:A9:C0:19:CF:C2:C1:20:EB:AB:75:DC:63:CA:2D:1C:93:21:FD
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32302d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:57:ef:ee:e3:28:76:68:19:82:b0:e7:a9:91:1d:5d:9e:
         1d:b3:9c:ad:02:5e:40:33:6e:de:4c:ac:25:e2:09:2a:20:e9:
         df:40:11:83:12:63:bf:e2:a3:9e:27:86:bd:39:ab:79:ca:5f:
         be:fc:8f:9b:b7:c3:68:67:c6:db:dc:64:a1:34:f2:ed:48:6d:
         34:53:99:67:19:cf:a8:4e:68:3b:08:8e:bd:07:e5:cd:9e:0a:
         b4:12:22:36:dc:7b:99:4b:2a:4c:9c:97:7d:dc:76:0f:fa:31:
         b8:36:83:40:0f:5f:68:81:a1:f3:70:38:4e:97:ec:fd:61:4b:
         48:3b:46:c8:54:91:17:b6:99:bf:48:90:78:76:10:d6:87:83:
         d1:f4:84:17:09:99:aa:8e:b7:45:bb:0f:64:c6:61:85:d1:51:
         f7:31:c6:fc:bd:73:11:1a:29:b2:a6:e0:77:f8:d8:9f:52:64:
         bc:92:94:e6:7b:4e:de:09:06:53:dc:dc:cd:4b:70:22:29:0b:
         97:b7:c3:03:12:e5:18:25:72:08:50:19:31:56:cd:4e:01:9f:
         bf:35:63:12:d0:d4:c9:f9:eb:4c:f8:b7:78:7a:2e:b5:b1:d5:
         a2:20:80:c1:19:1f:23:0b:64:9e:9b:99:54:dd:62:23:53:6e:
         d6:3f:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org