Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/3137392e3132342e31362e302f32322d3234203d3e20323633363131.roa
File:                     3137392e3132342e31362e302f32322d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          A+DT9rVcg9li055NOJP1KGKnglMMZguqPsKazpY/OAA=
Subject key identifier:   B3:3D:C3:EA:50:E4:4B:4B:B4:29:DF:E8:46:EF:46:FB:C3:46:F6:0B
Certificate issuer:       /CN=2A1F2B47869FBF318E0082CA9DD6DEBA04780283
Certificate serial:       6ADD35E286388C0AA1499AA9673E1B5C1F36EDCD
Authority key identifier: 2A:1F:2B:47:86:9F:BF:31:8E:00:82:CA:9D:D6:DE:BA:04:78:02:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/3137392e3132342e31362e302f32322d3234203d3e20323633363131.roa
Signing time:             Fri 08 Mar 2024 13:45:35 +0000
ROA not before:           Fri 08 Mar 2024 13:40:35 +0000
ROA not after:            Fri 07 Mar 2025 13:45:35 +0000
asID:                     263611
IP address blocks:        179.124.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:dd:35:e2:86:38:8c:0a:a1:49:9a:a9:67:3e:1b:5c:1f:36:ed:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1F2B47869FBF318E0082CA9DD6DEBA04780283
        Validity
            Not Before: Mar  8 13:40:35 2024 GMT
            Not After : Mar  7 13:45:35 2025 GMT
        Subject: CN=B33DC3EA50E44B4BB429DFE846EF46FBC346F60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:01:f8:59:62:39:8e:33:2c:eb:68:29:7e:
                    c2:78:60:4d:e7:63:b6:80:38:64:bf:b0:28:b6:85:
                    13:c4:14:d7:1f:6b:f5:97:17:af:8a:a0:09:12:8d:
                    da:89:6d:0c:4f:8e:b4:fd:78:be:3a:1e:4d:dd:f5:
                    b2:7c:22:45:ec:31:ca:eb:13:be:1f:2f:4b:11:93:
                    bf:6e:6d:7b:0a:36:a4:0d:59:b0:06:a9:16:fd:79:
                    12:1f:02:b5:2c:f5:cd:df:f5:08:e5:38:11:dc:46:
                    3c:1c:e0:ef:d8:6e:70:f7:92:6b:3b:9d:99:b9:45:
                    e1:f1:9d:0c:50:36:2b:d8:3d:8e:bb:62:2e:0f:d0:
                    7a:fc:02:58:62:81:65:a2:72:c6:8c:92:4e:33:ec:
                    03:8a:9f:8f:3c:d1:c1:bf:32:0d:82:e4:41:66:d6:
                    a9:d2:61:ce:9c:5e:ba:01:fd:14:82:67:3e:44:a8:
                    7f:08:6c:1d:81:9d:c7:c2:ea:42:0e:75:dd:6a:e1:
                    cf:d4:1b:3e:26:4b:e4:4a:e5:71:f9:3d:57:5f:7e:
                    d5:77:ff:fb:ca:de:8d:62:82:2c:52:b6:92:50:70:
                    f7:4b:8d:01:d9:37:f0:c4:2b:53:7f:db:d8:53:29:
                    08:7b:02:6c:d4:0b:2c:b4:75:53:a7:5c:4c:98:5f:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3D:C3:EA:50:E4:4B:4B:B4:29:DF:E8:46:EF:46:FB:C3:46:F6:0B
            X509v3 Authority Key Identifier:
                keyid:2A:1F:2B:47:86:9F:BF:31:8E:00:82:CA:9D:D6:DE:BA:04:78:02:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A1F2B47869FBF318E0082CA9DD6DEBA04780283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/0/3137392e3132342e31362e302f32322d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:b5:32:2f:8d:58:99:c0:d3:74:f0:e3:82:f0:c1:78:51:2d:
         92:57:5b:99:39:39:37:35:31:2f:a3:06:9f:68:f5:27:f1:7d:
         79:3c:75:00:3a:57:fb:d8:a4:4c:fe:ef:5d:1d:70:21:55:53:
         cf:c0:6e:db:c3:59:c1:e6:fd:c2:de:b4:8d:68:f0:88:74:94:
         a2:32:d6:88:2f:4b:4e:86:d1:19:f5:43:f6:0e:6f:d9:4a:3b:
         2f:0c:27:97:d7:e3:ba:82:d2:42:84:da:6f:56:ca:ee:34:73:
         ca:9a:66:08:c8:f6:29:98:58:83:78:1f:4f:aa:80:15:cd:32:
         66:2d:d7:ab:aa:69:78:46:12:08:14:e9:e0:9c:e9:02:c3:17:
         ae:51:a3:37:29:94:d9:61:44:76:34:c4:38:38:6f:b3:9d:59:
         a2:cd:00:7c:bb:05:58:d2:68:20:25:39:2a:a2:b1:6e:9b:f7:
         c1:61:ee:ce:9e:72:44:e4:dc:09:fa:22:4f:0c:e0:f9:e0:bc:
         f4:93:3d:23:b0:8c:fd:3c:2a:48:10:13:36:a3:3d:76:e0:0d:
         9a:0e:0c:c0:31:d2:26:f3:44:25:7e:52:a3:ea:07:39:11:a4:
         6b:32:a1:45:cd:eb:a9:e4:e7:71:90:7c:26:ab:d2:9c:5e:c9:
         8a:6c:8c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org