Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232382e302f32322d3232203d3e203238333630.roa
File:                     3137392e3132342e3232382e302f32322d3232203d3e203238333630.roa (raw, json)
Hash identifier:          YMohEfG4UDP9yG+Kn2V0crMD8/cC9zejBj8pPL9Gzg0=
Subject key identifier:   06:1B:6C:7E:67:7E:41:82:EE:69:66:44:5A:21:52:37:FA:B4:4C:C6
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       10C76CD19ECE7060F62C1029CAC247753B55304C
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232382e302f32322d3232203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:50 +0000
ROA not before:           Sat 06 Apr 2024 02:40:50 +0000
ROA not after:            Sat 05 Apr 2025 02:45:50 +0000
asID:                     28360
IP address blocks:        179.124.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c7:6c:d1:9e:ce:70:60:f6:2c:10:29:ca:c2:47:75:3b:55:30:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:50 2024 GMT
            Not After : Apr  5 02:45:50 2025 GMT
        Subject: CN=061B6C7E677E4182EE6966445A215237FAB44CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:b9:d7:71:ba:fe:6d:df:b6:94:2d:7e:7c:
                    2b:7a:0f:86:a2:71:53:5a:9d:f0:08:52:56:e4:da:
                    92:b1:a9:fa:f7:b0:61:a9:39:27:a1:e3:48:d7:3a:
                    5c:4a:47:b4:e5:f0:e7:82:7a:2d:dd:f4:71:bd:a5:
                    7f:0b:47:02:59:0a:0b:59:10:a5:57:ba:8d:3a:00:
                    30:20:67:7b:82:ba:b6:a5:0f:7b:12:bb:de:a2:c3:
                    98:51:ea:6f:4a:a9:c1:2c:15:cc:a4:04:19:83:35:
                    38:d8:3a:3c:ef:4a:e4:c5:93:4e:e1:3e:43:b5:f8:
                    d9:1c:17:a3:4f:8a:2e:8a:4a:7a:8e:f5:58:d2:e8:
                    55:07:c1:d0:40:28:d8:e5:cf:3b:6b:09:98:99:6a:
                    d5:0a:17:5c:4d:ad:e7:bf:75:47:36:b3:1d:c1:19:
                    ed:14:aa:1f:2b:93:23:fd:3d:a2:69:31:aa:4c:07:
                    c8:f4:f8:cd:84:dd:c3:0c:41:ee:b2:6c:98:61:a6:
                    f4:90:36:4b:a0:83:8a:22:d7:e5:4f:68:62:98:6a:
                    d0:e5:10:29:34:bd:8d:e2:dc:f2:11:12:67:b3:8b:
                    87:41:6d:42:3f:07:43:cd:0a:69:a1:58:91:4c:fe:
                    10:05:80:7d:0a:6f:48:12:22:97:48:52:39:d6:fc:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1B:6C:7E:67:7E:41:82:EE:69:66:44:5A:21:52:37:FA:B4:4C:C6
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3232382e302f32322d3232203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:9f:cd:1c:d5:c4:52:5c:f1:fd:4e:d6:9c:1d:82:f0:51:7d:
         7c:0f:1a:ea:90:0b:89:65:f8:bb:c9:dd:67:23:08:df:b5:cc:
         1f:e7:8c:06:f6:e0:b4:4a:4d:59:7b:9b:b1:bb:04:d5:a4:56:
         18:23:99:2a:51:1e:50:61:db:c0:b7:b3:5c:65:30:6e:27:83:
         c6:71:65:ac:5f:b8:62:31:ca:03:5d:d6:c7:03:11:6c:1b:0d:
         60:03:01:09:d5:ae:b3:3b:a4:bb:be:37:03:42:9e:fd:8b:f5:
         c9:2c:35:a0:19:78:41:d0:3c:a1:2d:55:3e:13:d9:55:54:06:
         5d:bc:a7:f7:66:27:f4:35:ab:9a:88:85:32:bf:db:8f:e8:17:
         c1:f3:3a:5d:ef:cd:47:26:c2:cd:d4:9b:e7:3c:1d:43:80:42:
         ef:14:20:9c:11:3f:9d:ba:87:95:cb:90:70:2c:1d:be:5b:c2:
         0e:80:f3:69:0e:80:8d:a9:61:bf:e4:e8:9d:5d:50:29:ec:41:
         b2:be:c0:44:76:84:30:ec:eb:a3:22:9f:be:ce:7b:22:66:e2:
         18:85:71:e8:98:6a:b1:91:6f:7f:0a:3e:61:13:83:1a:21:de:
         f6:16:e3:3c:9f:52:26:03:29:4c:9c:98:71:01:f6:e7:c9:0c:
         f7:e0:54:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEMds0Z7OcGD2LBApysJHdTtVMEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QkMwRjE4RjY4NkQ3NDkxMEMwQ0JEMEREMThBQzJD
RTgyQ0JGNzAeFw0yNDA0MDYwMjQwNTBaFw0yNTA0MDUwMjQ1NTBaMDMxMTAvBgNV
BAMTKDA2MUI2QzdFNjc3RTQxODJFRTY5NjY0NDVBMjE1MjM3RkFCNDRDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGHbnXcbr+bd+2lC1+fCt6D4ai
cVNanfAIUlbk2pKxqfr3sGGpOSeh40jXOlxKR7Tl8OeCei3d9HG9pX8LRwJZCgtZ
EKVXuo06ADAgZ3uCuralD3sSu96iw5hR6m9KqcEsFcykBBmDNTjYOjzvSuTFk07h
PkO1+NkcF6NPii6KSnqO9VjS6FUHwdBAKNjlzztrCZiZatUKF1xNree/dUc2sx3B
Ge0Uqh8rkyP9PaJpMapMB8j0+M2E3cMMQe6ybJhhpvSQNkugg4oi1+VPaGKYatDl
ECk0vY3i3PIREmezi4dBbUI/B0PNCmmhWJFM/hAFgH0Kb0gSIpdIUjnW/HGDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBhtsfmd+QYLuaWZEWiFSN/q0TMYwHwYDVR0j
BBgwFoAUW1vA8Y9obXSRDAy9DdGKws6Cy/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjVCQzBGMThGNjg2RDc0OTEwQzBDQkQwREQxOEFDMkNFODJDQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUJDMEYxOEY2ODZENzQ5
MTBDMENCRDBERDE4QUMyQ0U4MkNCRjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzfOQwDQYJKoZIhvcNAQELBQADggEBAAmfzRzV
xFJc8f1O1pwdgvBRfXwPGuqQC4ll+LvJ3WcjCN+1zB/njAb24LRKTVl7m7G7BNWk
VhgjmSpRHlBh28C3s1xlMG4ng8ZxZaxfuGIxygNd1scDEWwbDWADAQnVrrM7pLu+
NwNCnv2L9cksNaAZeEHQPKEtVT4T2VVUBl28p/dmJ/Q1q5qIhTK/24/oF8HzOl3v
zUcmws3Um+c8HUOAQu8UIJwRP526h5XLkHAsHb5bwg6A82kOgI2pYb/k6J1dUCns
QbK+wER2hDDs66Min77OeyJm4hiFceiYarGRb38KPmETgxoh3vYW4zyfUiYDKUyc
mHEB9ufJDPfgVLo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org