Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32322d3232203d3e203238333630.roa
File:                     3137392e3132342e3233362e302f32322d3232203d3e203238333630.roa (raw, json)
Hash identifier:          8gUXi8vr7zfn6VoAEMzWZA/MCwH96rHCet9nYrITTXI=
Subject key identifier:   03:78:A6:5E:9A:61:11:29:8F:37:DC:75:D4:15:D1:49:38:A3:3F:39
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       6ED2EFF03E18D9C1DE48D311838E435F0FCEC62E
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32322d3232203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:35 +0000
ROA not before:           Sat 06 Apr 2024 02:40:35 +0000
ROA not after:            Sat 05 Apr 2025 02:45:35 +0000
asID:                     28360
IP address blocks:        179.124.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d2:ef:f0:3e:18:d9:c1:de:48:d3:11:83:8e:43:5f:0f:ce:c6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:35 2024 GMT
            Not After : Apr  5 02:45:35 2025 GMT
        Subject: CN=0378A65E9A6111298F37DC75D415D14938A33F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:59:89:50:db:bf:74:d6:74:45:d1:73:51:
                    6d:69:2f:10:18:27:e4:9a:9f:14:4e:80:3d:24:8f:
                    8b:af:ab:93:ed:de:3f:8d:ad:c5:50:8d:48:9e:7d:
                    ad:5f:e1:0b:fb:ee:80:d4:65:dc:52:eb:29:c2:d1:
                    d4:a5:38:2b:c8:49:c7:c7:5e:fc:9c:10:8e:a2:c5:
                    28:10:a0:b7:32:08:87:fd:aa:e1:59:16:74:6d:34:
                    22:fd:57:76:cf:cf:53:20:24:a4:1f:f3:51:22:dc:
                    4e:b4:17:2c:a7:eb:90:de:e2:b1:72:e3:7f:00:db:
                    9a:46:98:ca:81:cb:26:17:5e:b0:48:81:20:fb:b7:
                    e9:ea:55:90:87:f9:84:b4:30:70:6e:ee:5b:1f:16:
                    f4:72:20:97:1d:37:7d:c5:3d:69:f3:24:2d:08:eb:
                    e6:f2:ff:11:b8:74:fc:df:96:3c:57:c1:00:17:2c:
                    f2:d0:be:ec:9c:11:ca:26:9e:b8:2b:0f:10:32:98:
                    25:38:d7:d4:0e:88:4a:51:f3:93:ba:10:68:bb:af:
                    ed:cb:76:f8:bf:ec:1d:df:73:b5:e9:44:3c:f6:77:
                    c7:ef:fc:01:cd:db:60:2a:b0:43:3f:94:3d:31:1f:
                    fc:a6:5d:62:dd:cb:29:41:1a:59:7f:86:09:2e:9f:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:78:A6:5E:9A:61:11:29:8F:37:DC:75:D4:15:D1:49:38:A3:3F:39
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32322d3232203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:a0:dc:2b:3e:49:cc:9c:75:91:10:08:ed:3e:f0:06:bb:7c:
         74:47:94:bd:26:b5:97:e3:73:10:bf:56:11:0e:ec:42:17:1a:
         b9:33:4c:9e:fe:0c:71:d6:9b:8c:ba:36:d1:2c:13:86:bb:2a:
         5f:04:c3:ec:f3:20:46:f4:3f:a6:41:10:9f:74:bb:4e:83:d5:
         41:c5:49:96:ac:d6:5f:16:1d:ba:9b:2b:70:73:b5:fe:09:d4:
         1c:35:2d:cc:5a:51:07:0d:6b:ff:5f:72:fb:25:34:db:a9:09:
         9a:ec:33:4d:d2:f5:f3:d4:9e:eb:e7:49:c1:0d:6b:6e:8d:c1:
         f2:c9:08:6c:42:c6:b0:21:2d:f4:84:7e:f2:3f:e4:ab:5d:22:
         58:b9:e5:ba:8b:53:65:6a:1d:ae:88:62:68:5d:78:a7:2a:f6:
         a8:2f:7e:c3:4f:30:92:82:b5:bf:fb:06:df:5e:29:d1:9d:eb:
         0d:8d:87:37:2b:0c:e1:08:07:57:fc:50:c5:08:07:5c:ee:ba:
         f2:bf:19:ab:91:d6:32:73:02:f3:66:cf:ae:f1:ba:78:ee:ad:
         f5:1e:c6:2c:ea:61:17:f4:60:4b:0c:16:1b:d4:25:97:1c:99:
         6c:96:27:a6:bb:37:97:56:3f:91:46:db:ba:66:af:81:dc:c3:
         34:99:d4:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbtLv8D4Y2cHeSNMRg45DXw/Oxi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QkMwRjE4RjY4NkQ3NDkxMEMwQ0JEMEREMThBQzJD
RTgyQ0JGNzAeFw0yNDA0MDYwMjQwMzVaFw0yNTA0MDUwMjQ1MzVaMDMxMTAvBgNV
BAMTKDAzNzhBNjVFOUE2MTExMjk4RjM3REM3NUQ0MTVEMTQ5MzhBMzNGMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTxVmJUNu/dNZ0RdFzUW1pLxAY
J+SanxROgD0kj4uvq5Pt3j+NrcVQjUiefa1f4Qv77oDUZdxS6ynC0dSlOCvIScfH
XvycEI6ixSgQoLcyCIf9quFZFnRtNCL9V3bPz1MgJKQf81Ei3E60Fyyn65De4rFy
438A25pGmMqByyYXXrBIgSD7t+nqVZCH+YS0MHBu7lsfFvRyIJcdN33FPWnzJC0I
6+by/xG4dPzfljxXwQAXLPLQvuycEcomnrgrDxAymCU419QOiEpR85O6EGi7r+3L
dvi/7B3fc7XpRDz2d8fv/AHN22AqsEM/lD0xH/ymXWLdyylBGll/hgkun1IpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUA3imXpphESmPN9x11BXRSTijPzkwHwYDVR0j
BBgwFoAUW1vA8Y9obXSRDAy9DdGKws6Cy/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC81QjVCQzBGMThGNjg2RDc0OTEwQzBDQkQwREQxOEFDMkNFODJDQkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUJDMEYxOEY2ODZENzQ5
MTBDMENCRDBERDE4QUMyQ0U4MkNCRjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzfOwwDQYJKoZIhvcNAQELBQADggEBAJeg3Cs+
ScycdZEQCO0+8Aa7fHRHlL0mtZfjcxC/VhEO7EIXGrkzTJ7+DHHWm4y6NtEsE4a7
Kl8Ew+zzIEb0P6ZBEJ90u06D1UHFSZas1l8WHbqbK3Bztf4J1Bw1LcxaUQcNa/9f
cvslNNupCZrsM03S9fPUnuvnScENa26NwfLJCGxCxrAhLfSEfvI/5KtdIli55bqL
U2VqHa6IYmhdeKcq9qgvfsNPMJKCtb/7Bt9eKdGd6w2NhzcrDOEIB1f8UMUIB1zu
uvK/GauR1jJzAvNmz67xunjurfUexizqYRf0YEsMFhvUJZccmWyWJ6a7N5dWP5FG
27pmr4HcwzSZ1HE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org