Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233302e302f32332d3233203d3e203238333630.roa
File:                     3137392e3132342e3233302e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          e9ckI50jc01yoKNCH1iDrACvZdqeMwJT9TScu4Co6jY=
Subject key identifier:   E9:46:E9:6D:68:98:D9:98:DC:5E:CA:E0:39:E9:DD:BB:33:4D:CE:3A
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       4332CCFBEC8AD67DE112B1ADCFE2654F731A6644
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233302e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:47 +0000
ROA not before:           Sat 06 Apr 2024 02:40:47 +0000
ROA not after:            Sat 05 Apr 2025 02:45:47 +0000
asID:                     28360
IP address blocks:        179.124.230.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:32:cc:fb:ec:8a:d6:7d:e1:12:b1:ad:cf:e2:65:4f:73:1a:66:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:47 2024 GMT
            Not After : Apr  5 02:45:47 2025 GMT
        Subject: CN=E946E96D6898D998DC5ECAE039E9DDBB334DCE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:76:ea:6a:e0:20:35:d3:5f:bd:98:0b:9d:
                    60:4c:a6:9d:6f:da:3a:71:61:a0:23:02:a9:cd:a2:
                    86:99:d7:45:ae:72:87:30:84:a3:00:a3:5d:4d:23:
                    20:d8:1e:e2:97:46:b9:35:17:bd:22:99:58:0d:7a:
                    7e:e7:42:a3:57:68:06:92:d7:23:78:ec:10:28:35:
                    23:be:f7:2d:7a:3a:4b:4f:d8:31:33:76:17:48:3d:
                    64:92:c8:d8:ab:71:2d:a7:35:bf:17:78:1c:dc:b1:
                    23:87:98:3d:d8:a2:19:7f:e5:f1:7b:a4:a3:3c:b2:
                    b0:61:0b:bc:8a:bb:cb:19:92:c3:71:8d:8e:24:70:
                    30:67:d1:1e:a9:91:e3:22:5e:c2:38:14:7d:5a:ff:
                    2a:43:2f:84:d5:38:1d:33:4c:5c:5a:e9:2b:9c:75:
                    e4:d4:f6:6d:5e:36:c0:5c:bd:24:ac:3d:90:7f:f4:
                    eb:cf:f0:c7:e3:12:73:2e:12:68:9a:30:dd:87:89:
                    8c:74:34:d3:b1:2d:52:28:f9:e0:e5:00:e2:93:da:
                    dd:b9:7d:3e:9f:6b:0c:d0:e9:83:db:d8:ce:1e:c1:
                    34:35:68:dc:db:61:1f:76:c8:a5:b6:a7:fa:72:36:
                    02:f4:e3:1f:0c:dd:39:93:d0:22:d6:f6:60:dd:20:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:46:E9:6D:68:98:D9:98:DC:5E:CA:E0:39:E9:DD:BB:33:4D:CE:3A
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233302e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:31:d3:5e:c6:b1:47:f4:0e:cb:98:33:14:1d:eb:ef:44:6e:
         61:2e:85:80:cf:f1:03:bd:ee:4e:70:a7:ec:38:ab:7f:bc:ad:
         d7:31:fa:71:75:dd:58:c5:7f:73:d1:aa:b6:0a:57:c7:93:de:
         96:3b:fe:b7:30:6d:93:39:16:44:a7:ad:4f:d7:f8:cd:9c:54:
         fc:0c:84:5e:7c:c6:71:7d:5e:0b:0b:e0:8b:9c:ba:6f:db:02:
         fd:ee:cf:d0:5e:d1:e7:7d:c8:e2:91:a0:b6:9c:f2:ed:e8:34:
         39:19:c6:28:8e:7c:0f:72:e3:c3:1b:9a:9b:45:89:5c:e5:66:
         62:3e:41:7e:d4:a3:c8:ce:c6:c8:30:50:7b:ad:7a:f0:96:3b:
         20:43:f3:58:d1:e7:57:7c:74:12:45:d3:56:a5:c3:39:35:6b:
         cb:dc:8d:8d:6a:c9:04:51:3a:c3:96:8a:6d:57:38:62:3b:5e:
         27:11:c0:9d:f9:f6:89:b3:2c:94:b0:66:c4:43:55:b5:97:e9:
         cb:d3:7a:7f:3f:da:61:fd:47:b9:b0:2a:0e:a4:fc:1c:4a:b4:
         36:fb:ff:64:cf:87:96:2c:c8:81:88:19:01:33:5b:3c:1e:04:
         3b:6e:03:96:4e:91:24:95:4a:1d:21:33:99:c3:43:d8:9e:d9:
         45:df:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org