Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32312d3231203d3e203238333630.roa
File:                     3137392e3132342e3232342e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier:          r340EvalIFqRVPb/BFKjGqY9n+WAWgUtkIyrDFAm72Y=
Subject key identifier:   35:36:82:E8:43:83:E1:EC:3A:00:4C:59:54:7B:FF:4F:0A:C7:FE:11
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       3D3AE35F000E4FCE1DB3CEE8B6448EC9EDD7BEE6
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32312d3231203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:30 +0000
ROA not before:           Sat 06 Apr 2024 02:40:30 +0000
ROA not after:            Sat 05 Apr 2025 02:45:30 +0000
asID:                     28360
IP address blocks:        179.124.224.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3a:e3:5f:00:0e:4f:ce:1d:b3:ce:e8:b6:44:8e:c9:ed:d7:be:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:30 2024 GMT
            Not After : Apr  5 02:45:30 2025 GMT
        Subject: CN=353682E84383E1EC3A004C59547BFF4F0AC7FE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a1:98:8d:66:bb:53:90:38:41:88:e5:07:1d:
                    9d:ca:9d:90:e1:01:d9:a0:b6:94:f8:3a:ce:be:eb:
                    46:de:2e:6c:82:73:40:65:65:08:6c:9e:57:b4:2e:
                    7e:fb:b4:58:e5:17:c8:a4:f0:db:40:e7:57:32:58:
                    b0:31:0f:21:1d:c7:92:d1:72:0a:d3:6d:a9:f1:e7:
                    8f:5e:af:64:21:5f:1b:89:3f:40:f1:59:84:69:be:
                    03:22:8c:f0:a5:35:5b:b0:e0:8f:72:67:6a:76:bf:
                    dc:32:21:ee:c2:a9:5d:f1:4f:60:f0:88:ae:e1:0d:
                    95:68:fb:08:ce:6f:46:f2:04:6b:0b:2d:00:95:68:
                    99:44:27:26:ed:e0:42:59:2b:a8:e7:52:f2:31:02:
                    11:2f:ea:2b:91:87:be:01:16:2d:c1:fc:2d:99:da:
                    5f:0d:46:30:19:b8:b9:cb:ac:62:4e:03:4c:9a:6c:
                    49:d4:3f:ab:67:8b:dd:05:f0:9e:79:92:9f:65:fc:
                    60:62:a6:30:bf:3c:9d:e7:69:92:c2:aa:46:27:65:
                    b6:4b:90:46:b1:2c:70:e4:31:e0:29:83:14:31:e1:
                    48:a2:41:d9:b2:a0:b2:d0:d8:ec:21:47:f0:4d:ce:
                    d6:ff:67:4f:48:d2:02:19:de:a5:3b:ba:1f:9f:a5:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:82:E8:43:83:E1:EC:3A:00:4C:59:54:7B:FF:4F:0A:C7:FE:11
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232342e302f32312d3231203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:d3:f9:54:2d:b6:f0:dc:49:d3:e1:49:45:bb:73:2f:08:f7:
         54:26:20:2f:c7:01:7d:58:b4:a0:d7:f1:1c:05:81:32:53:35:
         02:18:dd:2a:47:7d:47:67:ad:32:81:3a:d0:45:f3:3a:b2:f8:
         02:63:d1:79:33:61:e1:ef:4b:cd:cd:59:23:05:96:74:c1:66:
         0b:86:5e:ef:6f:7e:cd:c3:24:96:a7:82:18:23:ec:e5:17:4a:
         8c:82:92:40:bf:17:fb:d3:f0:77:34:11:23:39:01:5b:78:7a:
         0c:ea:b7:50:46:40:57:38:f7:e1:ed:18:8e:4d:19:28:5b:9d:
         fc:11:64:b0:eb:ff:b2:4e:e0:dc:ea:58:04:70:5d:80:f1:59:
         de:cd:db:a0:30:e3:d9:12:08:df:13:31:c5:4c:b3:48:6b:8e:
         f7:7d:f2:1a:45:b9:d0:06:3d:4f:33:32:cc:fc:03:3b:ad:79:
         7e:1c:1a:7a:5e:a6:fe:ab:84:ef:91:dd:c9:7c:93:c8:78:0d:
         bb:3d:64:5c:85:7d:59:ea:18:29:ae:f5:f9:8a:74:1d:74:02:
         1a:75:f0:77:9f:a8:19:0b:86:79:76:04:e9:ba:47:3d:1d:6e:
         ca:27:ff:57:da:4b:27:d2:7a:96:2e:98:ce:ae:2d:cb:50:e7:
         06:0e:7c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org