Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32332d3233203d3e203238333630.roa
File:                     3137392e3132342e3233362e302f32332d3233203d3e203238333630.roa (raw, json)
Hash identifier:          S2U280toOK6ShuvyWWOuJLpsFKYn8tRn0N3PMJAIRqA=
Subject key identifier:   83:00:C1:D2:8B:EF:9F:92:79:1B:13:8D:88:FE:44:26:EF:AF:C2:39
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       50FB88FA5B09DC759019DA6778CF60BBEFDC06AC
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32332d3233203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 02:45:40 +0000
ROA not before:           Sat 06 Apr 2024 02:40:40 +0000
ROA not after:            Sat 05 Apr 2025 02:45:40 +0000
asID:                     28360
IP address blocks:        179.124.236.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fb:88:fa:5b:09:dc:75:90:19:da:67:78:cf:60:bb:ef:dc:06:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 02:40:40 2024 GMT
            Not After : Apr  5 02:45:40 2025 GMT
        Subject: CN=8300C1D28BEF9F92791B138D88FE4426EFAFC239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:63:2f:86:73:56:65:2d:a4:d7:bf:32:18:
                    9d:3b:15:77:9b:6a:e7:e2:d8:5c:70:27:f0:f8:98:
                    43:d9:ee:f4:6d:b0:52:f7:89:e4:21:25:00:31:7d:
                    5d:c5:33:dd:16:a3:21:78:dc:d0:a5:16:b7:f6:31:
                    5a:6a:ea:1d:97:e4:ee:8f:81:6a:a2:ac:a6:d7:c3:
                    9e:a0:2e:34:33:e0:98:64:57:4c:2b:9c:16:08:98:
                    da:1d:6b:78:8a:fd:07:75:05:67:f1:00:cd:f7:cc:
                    a1:a3:95:1e:77:19:e3:15:47:be:20:44:24:40:ed:
                    75:08:9e:86:60:c6:3f:93:05:6a:de:cf:72:28:75:
                    2e:e6:75:49:59:9e:83:34:2d:6f:41:ff:0f:53:03:
                    d6:83:2b:b5:03:2b:af:c3:cc:5c:6c:2a:54:62:ff:
                    a7:59:67:63:7a:82:32:c5:c1:96:1f:60:65:da:ba:
                    e4:88:4f:1b:b2:b6:15:53:64:0a:ea:b3:70:4f:5c:
                    04:7d:30:09:88:a2:1a:e4:53:69:55:b6:b2:d8:af:
                    f6:d3:3f:6a:17:8b:5f:a2:5d:45:e2:d3:38:a5:0f:
                    fa:6b:19:43:33:f9:e6:be:0e:6c:fb:ac:bc:18:9d:
                    72:03:6d:aa:3a:a6:3e:3f:7d:ab:80:e8:8c:52:90:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:00:C1:D2:8B:EF:9F:92:79:1B:13:8D:88:FE:44:26:EF:AF:C2:39
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233362e302f32332d3233203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:f4:a6:0d:30:d6:ae:61:75:f9:e7:2f:66:9c:d0:36:5d:c4:
         bc:9e:50:3c:d4:9b:44:94:40:77:f2:d0:9f:e5:c2:1d:53:ef:
         52:01:b6:5e:05:7e:d3:2c:9b:57:5d:55:d0:38:f3:6e:5b:b6:
         78:56:7b:c2:bd:5f:35:2b:10:30:0f:30:78:82:98:05:66:2a:
         f0:7d:f1:37:05:83:0e:2c:28:3d:d5:88:b9:9a:fc:07:7f:21:
         06:37:84:e7:10:d3:5c:61:fb:b7:05:81:4c:f0:44:f0:92:20:
         c1:3c:2c:a2:a8:61:73:e7:d0:f8:08:bd:4f:f4:ad:9d:55:e2:
         7d:a2:4e:cf:41:32:e7:b7:b3:56:52:f1:21:7c:1c:8c:b4:00:
         f2:0c:7d:24:18:16:af:a0:35:e9:06:31:32:43:2d:fa:a4:33:
         34:23:81:78:c1:8f:ef:da:47:37:b5:db:6a:a3:1b:6c:fe:91:
         b5:3d:40:8f:03:8e:17:09:26:1e:47:80:3c:8b:bc:83:68:64:
         36:1b:30:bb:1a:62:ca:87:10:b6:ea:49:b5:f4:d6:31:c5:db:
         4b:f0:18:7a:df:ee:b6:d8:24:cb:fc:96:1f:e2:17:37:b4:22:
         30:2e:ab:92:53:02:d7:19:71:a2:3d:46:e6:9c:7a:2b:80:ed:
         33:77:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org