Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          qFpDnIDvBDI5NxAiIof6JEBZIxsnzXVdleKjWelt/4I=
Subject key identifier:   70:E8:CD:31:86:05:79:5D:50:BA:E0:E2:02:B8:63:7F:B8:67:97:F9
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       5A22154FECF1D69D281FC729DB0D77C3DD06B710
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:31 +0000
ROA not before:           Sat 06 Apr 2024 03:31:31 +0000
ROA not after:            Sat 05 Apr 2025 03:36:31 +0000
asID:                     28360
IP address blocks:        179.124.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:22:15:4f:ec:f1:d6:9d:28:1f:c7:29:db:0d:77:c3:dd:06:b7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 03:31:31 2024 GMT
            Not After : Apr  5 03:36:31 2025 GMT
        Subject: CN=70E8CD318605795D50BAE0E202B8637FB86797F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:51:bd:f2:14:53:60:7e:19:95:25:5b:34:
                    0b:fa:90:b4:ee:9d:c5:bb:0e:f3:b2:e9:ad:29:ab:
                    8b:20:d5:0f:6f:ed:9c:51:c2:d5:80:4c:65:32:1f:
                    0c:47:60:aa:fb:8c:bb:d6:c4:1c:1b:e9:62:a0:b6:
                    d9:84:9b:48:49:f0:7b:47:9f:02:8c:2a:fd:1c:f7:
                    b3:91:a0:8d:1a:ce:af:88:fa:0c:88:c8:d7:5c:ed:
                    b4:95:4d:20:16:21:05:21:cd:f0:f6:3e:cb:7a:56:
                    4b:fe:c3:f7:6f:4a:22:5c:c3:e6:74:16:59:3b:0d:
                    ce:e2:3d:d0:19:dd:f0:a5:b9:b3:2b:5a:06:2a:59:
                    94:9d:e3:06:c8:85:ff:67:54:7f:9f:f4:bb:a8:32:
                    85:eb:e0:2d:e7:a0:11:3f:6c:f2:29:3b:d0:76:27:
                    16:b3:76:bd:b0:15:5b:be:75:64:9d:0b:29:6c:1e:
                    d0:6b:dc:1b:1b:49:2e:b5:61:c8:3f:27:ee:67:ed:
                    1e:6f:be:21:d2:16:28:61:a8:46:55:3d:46:31:52:
                    f3:1c:58:1f:7e:2c:36:24:0d:e2:11:6d:ac:1f:c7:
                    3a:24:f2:61:7a:a2:b9:22:75:9f:d6:b3:0a:ca:cb:
                    7c:bd:82:33:b6:ae:3d:96:2e:7e:db:57:b7:c2:15:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E8:CD:31:86:05:79:5D:50:BA:E0:E2:02:B8:63:7F:B8:67:97:F9
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233342e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:a8:e7:f1:e3:4c:1d:cc:9a:46:4e:e2:5d:97:f3:4c:00:
         41:7c:92:5b:52:51:1c:15:6e:8d:95:d6:b2:78:ed:c2:b6:d4:
         34:71:53:be:ca:4a:91:f4:03:c0:4f:16:2f:74:61:96:3f:c7:
         66:a8:17:ed:22:df:99:97:75:29:41:fd:a5:91:aa:6a:93:03:
         d0:c4:e8:06:0b:ad:0d:31:21:c3:6d:5e:6c:8d:f2:5c:81:12:
         06:a9:a3:01:64:c6:e8:14:4b:4f:10:1b:5e:b1:52:ce:95:dc:
         9e:b5:d7:ac:7d:63:d0:df:0b:d8:d6:b3:8e:2f:03:4a:fc:43:
         97:86:5f:d8:98:5f:d0:07:05:76:29:52:5c:08:c6:8c:4c:28:
         bc:5d:ec:da:51:86:20:6f:69:0c:7a:a4:6e:f1:a3:3a:ea:4f:
         7d:0b:26:ea:84:40:87:2d:c8:7f:42:e6:e3:57:76:2b:5e:9d:
         ce:1b:99:66:6b:39:0f:91:96:0b:52:7c:15:16:2f:bf:ef:92:
         88:78:94:63:3d:41:4c:c7:5e:31:cb:e4:eb:4f:5c:ae:de:da:
         29:2b:12:5c:e4:0f:18:94:14:3c:2b:d0:87:35:c7:85:25:bc:
         72:b6:73:88:44:3c:da:f5:e7:ee:5c:ea:bf:3c:25:a4:23:1a:
         16:0b:f7:ed
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWiIVT+zx1p0oH8cp2w13w90GtxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QkMwRjE4RjY4NkQ3NDkxMEMwQ0JEMEREMThBQzJD
RTgyQ0JGNzAeFw0yNDA0MDYwMzMxMzFaFw0yNTA0MDUwMzM2MzFaMDMxMTAvBgNV
BAMTKDcwRThDRDMxODYwNTc5NUQ1MEJBRTBFMjAyQjg2MzdGQjg2Nzk3RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9wVG98hRTYH4ZlSVbNAv6kLTu
ncW7DvOy6a0pq4sg1Q9v7ZxRwtWATGUyHwxHYKr7jLvWxBwb6WKgttmEm0hJ8HtH
nwKMKv0c97ORoI0azq+I+gyIyNdc7bSVTSAWIQUhzfD2Pst6Vkv+w/dvSiJcw+Z0
Flk7Dc7iPdAZ3fClubMrWgYqWZSd4wbIhf9nVH+f9LuoMoXr4C3noBE/bPIpO9B2
Jxazdr2wFVu+dWSdCylsHtBr3BsbSS61Ycg/J+5n7R5vviHSFihhqEZVPUYxUvMc
WB9+LDYkDeIRbawfxzok8mF6orkidZ/WswrKy3y9gjO2rj2WLn7bV7fCFdR/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcOjNMYYFeV1QuuDiArhjf7hnl/kwHwYDVR0j
BBgwFoAUW1vA8Y9obXSRDAy9DdGKws6Cy/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjVCQzBGMThGNjg2RDc0OTEwQzBDQkQwREQxOEFDMkNFODJDQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUJDMEYxOEY2ODZENzQ5
MTBDMENCRDBERDE4QUMyQ0U4MkNCRjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfOowDQYJKoZIhvcNAQELBQADggEBAABsqOfx
40wdzJpGTuJdl/NMAEF8kltSURwVbo2V1rJ47cK21DRxU77KSpH0A8BPFi90YZY/
x2aoF+0i35mXdSlB/aWRqmqTA9DE6AYLrQ0xIcNtXmyN8lyBEgapowFkxugUS08Q
G16xUs6V3J6116x9Y9DfC9jWs44vA0r8Q5eGX9iYX9AHBXYpUlwIxoxMKLxd7NpR
hiBvaQx6pG7xozrqT30LJuqEQIctyH9C5uNXditenc4bmWZrOQ+RlgtSfBUWL7/v
koh4lGM9QUzHXjHL5OtPXK7e2ikrElzkDxiUFDwr0Ic1x4UlvHK2c4hEPNr15+5c
6r88JaQjGhYL9+0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org