Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233352e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233352e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          jayh6L3hviFrwkqkJpeoV2eC3NqcibVire+YSHizm1s=
Subject key identifier:   28:14:D0:2C:80:67:24:87:2C:42:BD:62:8C:96:AA:D8:EA:F0:E3:DD
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       49FF974ABF2130FE319C73EC49DCC4ABFB0076FA
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233352e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:37 +0000
ROA not before:           Sat 06 Apr 2024 03:31:37 +0000
ROA not after:            Sat 05 Apr 2025 03:36:37 +0000
asID:                     28360
IP address blocks:        179.124.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ff:97:4a:bf:21:30:fe:31:9c:73:ec:49:dc:c4:ab:fb:00:76:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 03:31:37 2024 GMT
            Not After : Apr  5 03:36:37 2025 GMT
        Subject: CN=2814D02C806724872C42BD628C96AAD8EAF0E3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:4f:26:9a:e4:cf:85:8d:e4:4b:86:15:b8:
                    e6:8b:64:9d:96:dd:ac:4c:67:d4:50:3f:5e:5b:2b:
                    f5:95:3e:30:84:c0:3e:6d:3f:3d:f2:7b:e5:5f:ad:
                    b8:1a:b8:2e:64:05:f1:95:92:67:aa:44:22:76:47:
                    e6:5f:6b:07:ba:a6:b5:87:22:c8:4a:b9:ce:d0:8a:
                    fc:05:ee:82:76:ab:42:d0:ae:0d:be:34:e5:9c:65:
                    e7:a0:0d:2c:27:bb:3f:87:59:b0:97:28:f0:e6:a8:
                    4d:32:21:d9:c6:44:6e:cf:21:e8:22:a7:30:a6:96:
                    be:6b:1d:4d:9e:d6:2d:a2:d2:a7:d3:6d:58:39:87:
                    34:cc:9d:3b:41:56:cc:f1:2d:6d:52:32:74:10:7d:
                    41:68:50:5e:02:7e:c9:73:70:83:ff:22:70:22:ec:
                    fb:7a:ee:e8:ad:42:1e:ad:15:16:d5:c0:41:3b:fa:
                    99:86:97:fb:62:6c:a0:db:48:8e:5f:57:7b:4f:8b:
                    81:18:28:9a:27:ad:6c:3a:71:97:a2:3c:10:c0:86:
                    23:90:51:dc:08:12:5f:3b:39:4d:cf:bc:23:a1:2a:
                    02:63:02:fc:9a:21:b5:97:32:ad:b4:90:a1:72:19:
                    3b:4e:35:ae:6e:ba:f6:34:07:14:88:21:e4:94:43:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:14:D0:2C:80:67:24:87:2C:42:BD:62:8C:96:AA:D8:EA:F0:E3:DD
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233352e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:17:e6:79:a0:2e:ab:41:d8:b9:d5:0f:37:43:04:0a:e1:
         7f:25:02:19:08:93:cb:b9:c7:69:21:ba:77:49:2c:19:27:d9:
         87:9f:5c:c1:ea:e0:f3:63:d0:e2:c4:d4:0a:18:c0:7b:09:8b:
         ab:1f:24:f5:f4:cb:3b:55:cc:7c:c9:4a:4c:4b:1f:d1:72:f1:
         7c:fc:b3:7e:6a:19:55:f9:e7:6e:bf:74:3a:cf:f8:32:fb:52:
         ba:a5:81:0a:f8:9c:1b:88:ae:16:3f:02:c1:74:57:8e:cc:39:
         0f:93:65:e6:58:0b:00:5f:1a:b9:4f:e2:0a:a9:85:25:f7:80:
         01:10:88:1f:25:79:91:07:ac:88:a0:7b:23:3d:14:f6:a3:a6:
         ef:4a:73:10:d2:af:1d:da:ba:be:62:c1:a4:5c:61:b3:9e:0e:
         0e:e4:53:65:b2:fd:77:72:c9:e4:f0:05:be:2b:92:dd:20:c2:
         99:8d:46:84:0f:98:08:e7:47:f3:22:f7:ca:64:a9:87:16:ea:
         c8:2a:6a:5d:14:4f:ac:7c:7b:5e:eb:ac:27:d9:76:ea:28:d4:
         41:dd:93:5f:55:8e:e4:a1:c2:a1:ab:18:0a:57:5e:1b:e0:c3:
         c6:21:d4:50:cc:42:48:c2:59:94:d1:db:bd:bc:24:ae:0d:65:
         8c:8c:eb:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSf+XSr8hMP4xnHPsSdzEq/sAdvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QkMwRjE4RjY4NkQ3NDkxMEMwQ0JEMEREMThBQzJD
RTgyQ0JGNzAeFw0yNDA0MDYwMzMxMzdaFw0yNTA0MDUwMzM2MzdaMDMxMTAvBgNV
BAMTKDI4MTREMDJDODA2NzI0ODcyQzQyQkQ2MjhDOTZBQUQ4RUFGMEUzREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6E8mmuTPhY3kS4YVuOaLZJ2W
3axMZ9RQP15bK/WVPjCEwD5tPz3ye+VfrbgauC5kBfGVkmeqRCJ2R+Zfawe6prWH
IshKuc7QivwF7oJ2q0LQrg2+NOWcZeegDSwnuz+HWbCXKPDmqE0yIdnGRG7PIegi
pzCmlr5rHU2e1i2i0qfTbVg5hzTMnTtBVszxLW1SMnQQfUFoUF4CfslzcIP/InAi
7Pt67uitQh6tFRbVwEE7+pmGl/tibKDbSI5fV3tPi4EYKJonrWw6cZeiPBDAhiOQ
UdwIEl87OU3PvCOhKgJjAvyaIbWXMq20kKFyGTtONa5uuvY0BxSIIeSUQ/OtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKBTQLIBnJIcsQr1ijJaq2Orw490wHwYDVR0j
BBgwFoAUW1vA8Y9obXSRDAy9DdGKws6Cy/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjVCQzBGMThGNjg2RDc0OTEwQzBDQkQwREQxOEFDMkNFODJDQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUJDMEYxOEY2ODZENzQ5
MTBDMENCRDBERDE4QUMyQ0U4MkNCRjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfOswDQYJKoZIhvcNAQELBQADggEBABPNF+Z5
oC6rQdi51Q83QwQK4X8lAhkIk8u5x2khundJLBkn2YefXMHq4PNj0OLE1AoYwHsJ
i6sfJPX0yztVzHzJSkxLH9Fy8Xz8s35qGVX5526/dDrP+DL7UrqlgQr4nBuIrhY/
AsF0V47MOQ+TZeZYCwBfGrlP4gqphSX3gAEQiB8leZEHrIigeyM9FPajpu9KcxDS
rx3aur5iwaRcYbOeDg7kU2Wy/XdyyeTwBb4rkt0gwpmNRoQPmAjnR/Mi98pkqYcW
6sgqal0UT6x8e17rrCfZduoo1EHdk19VjuShwqGrGApXXhvgw8Yh1FDMQkjCWZTR
2728JK4NZYyM6xM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org