Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233322e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          3aWS5ZuCdciZusDqZMtvDwD1zpTYGveeoU1H8ROvhnQ=
Subject key identifier:   C3:81:51:54:4E:39:AB:E4:8A:7C:27:18:83:58:E6:AB:CF:44:5E:6C
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       2CC58A65A98B2DF623000CC8CE6408ECECEEBF4F
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:20 +0000
ROA not before:           Sat 06 Apr 2024 03:31:20 +0000
ROA not after:            Sat 05 Apr 2025 03:36:20 +0000
asID:                     28360
IP address blocks:        179.124.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c5:8a:65:a9:8b:2d:f6:23:00:0c:c8:ce:64:08:ec:ec:ee:bf:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 03:31:20 2024 GMT
            Not After : Apr  5 03:36:20 2025 GMT
        Subject: CN=C38151544E39ABE48A7C27188358E6ABCF445E6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:60:75:cd:46:2f:98:9e:94:cc:b6:fd:0d:d2:
                    3f:65:d7:eb:90:32:39:32:71:e0:f3:09:3a:c7:6f:
                    63:29:97:2a:57:ae:85:ab:4f:1d:75:4b:be:fa:6c:
                    71:68:d7:00:ae:86:a6:71:b4:15:b9:27:0e:35:a9:
                    6e:23:7b:94:d9:88:a5:ae:62:ed:e4:3a:e0:92:d3:
                    00:3f:8a:81:46:36:87:e2:bc:13:2e:74:73:10:16:
                    4d:7c:79:59:33:13:b4:e2:5a:17:bd:d3:e1:f4:a7:
                    6b:32:61:ac:92:a7:fe:54:68:32:21:89:ff:6f:50:
                    62:7d:26:28:3c:22:c8:b2:8f:a5:f1:9a:1d:34:00:
                    76:55:06:1f:fc:75:41:bc:61:92:8a:70:e4:07:54:
                    c6:b7:9b:31:4f:10:96:59:9a:6d:ed:44:c5:7e:22:
                    e1:61:dd:35:23:c1:2a:e8:6b:91:5c:a9:88:ba:35:
                    02:ac:75:6d:98:8d:ad:66:2d:90:99:36:90:e0:0b:
                    18:48:bd:e7:5c:83:87:19:90:80:00:da:37:31:18:
                    48:fe:2c:3f:82:1c:2b:ad:cc:50:36:cd:4f:24:6c:
                    e6:62:e3:2d:c9:37:fa:f3:6f:4f:9e:47:4f:4a:71:
                    3c:14:a3:12:8d:de:60:24:c2:b8:6e:97:d5:8f:bb:
                    11:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:81:51:54:4E:39:AB:E4:8A:7C:27:18:83:58:E6:AB:CF:44:5E:6C
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233322e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:65:3e:8b:4e:a0:e9:81:57:7e:55:1a:4e:86:27:59:98:1c:
         6d:0a:33:81:a4:57:a2:cd:c3:e0:ad:0e:c8:64:0e:ce:ee:87:
         f0:34:7c:22:28:ea:6c:cb:b2:2a:82:90:b9:f5:23:2b:9f:77:
         ad:1a:8c:06:6b:32:9c:48:6f:e9:17:9c:e7:40:68:bf:75:cd:
         c5:8b:5e:62:e4:72:59:1b:7c:1f:a5:0c:14:e6:25:20:ca:05:
         70:84:d5:cb:04:c4:72:7f:78:c9:11:a4:b4:07:a2:4e:8b:58:
         29:79:6b:3c:fa:6e:22:b4:ff:04:5f:7e:73:16:41:96:f5:36:
         1c:a2:e8:e4:e8:b0:06:7a:72:2c:6b:ea:34:51:aa:17:12:fd:
         b8:23:6a:53:0d:e6:a4:cc:a7:05:9a:a4:12:1c:4b:99:b7:51:
         3c:01:6d:58:3c:41:04:6b:ae:88:fe:52:4c:b9:c2:ad:a5:3d:
         c0:af:e0:ce:8b:a7:dd:87:97:84:ba:64:2f:93:6b:50:bb:b8:
         d8:ff:54:7c:40:e1:38:77:15:21:e5:4c:c7:13:47:98:2f:e5:
         f8:81:c1:58:61:54:1b:06:14:d8:10:87:3c:d4:80:96:2d:e5:
         75:5d:c8:42:45:a1:a9:05:2d:ea:ec:e6:a7:fe:6d:41:f2:52:
         54:fa:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org