Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa
File:                     3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          DO3BFisx0SozbDQxm4GOMjb0sqnWZCjWeZsWI7UzWuc=
Subject key identifier:   F3:B4:37:8C:E2:91:48:0D:E3:32:53:30:FD:91:95:B6:38:81:D5:E0
Certificate issuer:       /CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
Certificate serial:       68EBE006E69A8C561EEB5743837058F55659C2B8
Authority key identifier: 5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:36:49 +0000
ROA not before:           Sat 06 Apr 2024 03:31:49 +0000
ROA not after:            Sat 05 Apr 2025 03:36:49 +0000
asID:                     28360
IP address blocks:        179.124.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:eb:e0:06:e6:9a:8c:56:1e:eb:57:43:83:70:58:f5:56:59:c2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7
        Validity
            Not Before: Apr  6 03:31:49 2024 GMT
            Not After : Apr  5 03:36:49 2025 GMT
        Subject: CN=F3B4378CE291480DE3325330FD9195B63881D5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:27:e0:00:cc:ac:1d:21:ee:9d:6d:82:e9:
                    cb:7f:7d:27:7c:b9:cb:ea:49:de:1e:28:ac:c3:6a:
                    0e:f4:99:6e:3b:13:42:7e:d1:53:d0:fa:91:67:19:
                    14:b6:26:f3:ca:59:c8:94:9f:44:0a:9b:25:fb:88:
                    b5:46:72:f6:14:8d:06:5e:74:98:3f:96:38:dc:d1:
                    8d:a7:4e:94:be:35:dd:c1:5e:75:28:ca:f4:7b:1c:
                    ee:38:d2:51:6b:f3:a9:c8:10:ce:b5:e4:56:3e:21:
                    86:e9:46:96:f0:83:4b:e3:43:ec:44:6f:db:c7:18:
                    20:9f:fc:ca:71:4e:f4:7e:cc:6b:97:b4:fe:dd:f6:
                    19:64:1a:a9:43:95:7e:54:27:b4:3a:83:7c:ad:a1:
                    c9:2a:be:ae:4c:73:14:66:a3:01:a6:f5:eb:ea:e0:
                    e5:db:72:d2:cc:92:c0:fb:4d:22:b1:81:58:09:54:
                    f4:57:3d:9a:89:73:95:a0:52:16:d9:60:99:6d:01:
                    01:7e:cc:75:d1:de:3b:fd:f5:d8:ac:5d:5a:ff:15:
                    ed:75:31:8d:13:28:07:8c:5d:c2:51:9b:c1:06:8e:
                    fb:9c:cf:a4:41:94:cb:37:80:69:da:38:1a:ab:e0:
                    46:c3:2f:75:ff:1f:0a:83:6d:c6:30:75:25:ea:ca:
                    55:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B4:37:8C:E2:91:48:0D:E3:32:53:30:FD:91:95:B6:38:81:D5:E0
            X509v3 Authority Key Identifier:
                keyid:5B:5B:C0:F1:8F:68:6D:74:91:0C:0C:BD:0D:D1:8A:C2:CE:82:CB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5BC0F18F686D74910C0CBD0DD18AC2CE82CBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137392e3132342e3233382e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:4c:94:ca:83:9d:68:68:38:7f:40:5a:2e:40:ef:55:90:a7:
         f3:8b:1c:d6:16:42:cf:4d:a1:fe:bd:b0:d0:e1:e5:4d:e7:3c:
         af:ec:f7:01:7f:e8:62:bf:80:21:de:f5:68:ca:b2:5e:92:7b:
         4b:3e:f9:b0:ac:fc:4d:29:bc:1f:41:cc:10:d9:9c:26:eb:fc:
         dc:0e:0c:b2:2a:d6:4a:d3:16:3f:74:06:9d:eb:38:df:59:85:
         59:fd:37:3a:97:41:ae:ef:ba:21:76:63:5b:19:17:e1:d2:3a:
         27:17:ff:b7:63:ff:9d:68:48:29:8c:eb:5d:8e:2d:73:a4:a5:
         82:0e:b5:0c:64:42:74:14:3f:ab:0a:ee:48:df:9b:34:57:53:
         84:c1:6c:bb:12:76:f7:c7:8d:7b:b4:6b:65:8f:4c:70:89:06:
         28:d6:63:a4:b2:08:40:80:fa:ee:ee:89:20:3d:50:67:af:1b:
         d7:06:c0:ca:40:0c:3a:b3:31:67:ae:b2:4a:2b:c6:80:36:1c:
         2e:3b:20:59:46:1c:5f:54:d9:b8:99:1e:93:c3:0b:62:28:fd:
         84:1a:12:70:48:c2:2a:5a:ab:77:6b:26:99:ce:ef:77:81:77:
         5c:9f:85:1c:6a:e7:94:9a:9c:39:d2:38:ad:3c:6e:d5:29:0b:
         f6:1d:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org