Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3332203d3e20323731343433.roa
File:                     3137392e302e37322e302f32322d3332203d3e20323731343433.roa (raw, json)
Hash identifier:          Su1nvjMdMTaQ2azbk14REraKtEngs8hhBRHEUGpp/pU=
Subject key identifier:   F5:3F:A7:50:76:85:D0:F8:4D:F1:55:73:C4:65:42:40:5F:BB:E7:F8
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       708BB89AF6B620C071E9D294CE43749B27423E88
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3332203d3e20323731343433.roa
Signing time:             Mon 27 Mar 2023 17:41:44 +0000
ROA not before:           Mon 27 Mar 2023 17:36:44 +0000
ROA not after:            Mon 25 Mar 2024 17:41:44 +0000
asID:                     271443
IP address blocks:        179.0.72.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8b:b8:9a:f6:b6:20:c0:71:e9:d2:94:ce:43:74:9b:27:42:3e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Mar 27 17:36:44 2023 GMT
            Not After : Mar 25 17:41:44 2024 GMT
        Subject: CN=F53FA7507685D0F84DF15573C46542405FBBE7F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:e5:2b:d1:07:d9:ca:fb:a7:5f:aa:18:44:
                    04:00:81:15:7c:6b:08:7a:37:8f:11:c5:ec:89:78:
                    2f:45:1a:f3:10:a1:09:eb:0b:5c:d5:d3:28:65:c9:
                    08:3b:0a:4b:a8:11:c1:e1:38:3a:2e:08:75:c2:c3:
                    7b:82:e5:82:3e:6e:39:43:00:de:07:d2:94:2b:4c:
                    28:4d:d1:df:13:f7:96:ca:70:2e:fd:57:66:c3:38:
                    c6:91:c5:61:25:29:3e:eb:17:1d:24:80:83:2e:9d:
                    9b:ac:2c:30:1d:7f:9e:c8:1a:98:06:52:b4:6d:4f:
                    a1:44:3d:22:bf:18:6f:8d:7f:31:43:97:60:22:3b:
                    11:a1:0c:93:7e:f4:a6:1e:7b:ca:18:6e:62:40:80:
                    51:d3:10:f9:7b:e7:f6:05:26:d7:a4:53:4b:16:ab:
                    ca:6e:14:7f:a1:ab:08:6f:05:54:47:77:cc:9e:d6:
                    46:4c:0c:22:b0:eb:74:35:43:19:59:de:f9:9d:e2:
                    8a:43:7c:50:99:fa:b8:7d:cc:6e:f0:75:06:9e:a9:
                    78:66:04:27:e7:64:59:40:f5:5e:7c:f8:32:5e:39:
                    27:c0:d7:f6:be:22:4f:f9:8f:8f:0e:25:b5:c2:08:
                    ca:a0:78:2c:4e:9a:a9:bf:ee:be:6a:e7:b3:15:26:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3F:A7:50:76:85:D0:F8:4D:F1:55:73:C4:65:42:40:5F:BB:E7:F8
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137392e302e37322e302f32322d3332203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:5b:1c:09:f8:58:73:b3:b0:50:e4:1a:09:2a:b6:04:c4:07:
         11:80:42:3d:95:eb:23:f1:63:b3:44:44:b6:2e:45:b6:1d:50:
         52:06:13:34:ba:c4:92:87:4c:e9:7c:ce:4d:57:0f:36:f0:c5:
         58:02:e5:c2:93:0a:d1:83:13:13:0e:38:3d:bd:6b:f7:df:e9:
         91:a7:32:b3:bf:ca:28:7b:36:c0:8b:a6:f0:76:ed:d9:81:0a:
         a3:66:e3:8a:8d:9d:70:c1:3c:98:e2:da:9e:a2:e6:0f:d9:32:
         1a:47:3e:ee:52:da:20:66:43:43:ef:c2:47:72:49:97:10:3b:
         4b:9f:93:13:cb:d2:7d:e8:6f:09:20:03:4c:46:18:42:be:e4:
         d2:1b:be:dc:9e:cf:d1:15:f6:b4:e4:8d:1f:10:6e:0d:58:11:
         88:86:31:d5:c2:f9:bd:73:6b:a2:23:72:f4:1e:8f:25:65:57:
         8b:93:c5:57:96:f3:16:8f:db:78:9a:d7:22:70:00:2e:7c:ee:
         47:e9:68:ef:a1:f9:52:55:ed:27:33:c0:67:c7:83:a9:ff:d7:
         7e:0e:bc:e0:a4:a1:9e:32:c3:24:df:3d:9a:f7:6c:fc:82:94:
         08:fa:85:12:6b:4f:ed:29:be:d8:4f:f7:5c:d4:ab:48:c5:fd:
         9b:ab:8d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org