Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37322e302f32322d3332203d3e20323731343433.roa
File:                     3137392e302e37322e302f32322d3332203d3e20323731343433.roa (raw, json)
Hash identifier:          FFxG8oDVoEyviEOZA3SOM1b/PmvD5uqH++nr2IVvm1U=
Subject key identifier:   3E:D8:AB:84:BD:65:95:96:01:02:B6:93:EF:80:44:3C:90:DD:5F:5A
Certificate issuer:       /CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
Certificate serial:       1EF871A515CFB182E824FDFA4EF9E3D9C7527F32
Authority key identifier: BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37322e302f32322d3332203d3e20323731343433.roa
Signing time:             Tue 07 Mar 2023 21:59:51 +0000
ROA not before:           Tue 07 Mar 2023 21:54:51 +0000
ROA not after:            Tue 05 Mar 2024 21:59:51 +0000
asID:                     271443
IP address blocks:        179.0.72.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f8:71:a5:15:cf:b1:82:e8:24:fd:fa:4e:f9:e3:d9:c7:52:7f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
        Validity
            Not Before: Mar  7 21:54:51 2023 GMT
            Not After : Mar  5 21:59:51 2024 GMT
        Subject: CN=3ED8AB84BD6595960102B693EF80443C90DD5F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:87:f5:de:e6:73:83:46:01:34:1b:a4:e2:
                    0c:b1:14:68:fb:2b:a7:1d:4a:0f:be:a6:99:ce:87:
                    76:8a:90:92:27:2c:8f:f9:5a:1e:ca:fb:5b:7b:37:
                    54:38:f6:9b:d2:bd:98:9e:9a:04:cb:47:77:1e:59:
                    4e:8b:20:47:9e:22:18:cb:d7:d9:d5:0c:92:1b:65:
                    d7:c5:81:39:c6:ce:72:e2:f3:c8:23:fc:bf:a6:55:
                    d8:a4:36:15:04:8e:28:b2:11:5f:a6:98:e3:00:b6:
                    38:3c:d8:0d:f6:18:d2:94:d8:ee:15:70:af:94:ee:
                    17:d8:2c:45:32:a1:79:48:f8:29:f2:c2:3a:8b:4b:
                    ff:d9:98:ab:6b:95:fe:52:47:ed:12:c7:b4:fd:f4:
                    7e:47:ce:fb:8f:3d:09:8f:23:4b:38:d9:02:1a:b9:
                    e9:e6:a7:e3:a2:bf:8e:c9:5b:f2:f3:06:bb:4c:a5:
                    18:f4:1c:ed:a3:d5:76:39:b1:f2:b3:b5:10:29:b0:
                    18:88:e6:db:6d:ea:78:ce:3f:d1:7f:e5:55:b3:65:
                    a7:28:ad:8f:56:6d:7d:1c:44:83:25:b1:21:5a:37:
                    8a:17:4d:76:76:83:82:ef:bd:c5:30:bb:0e:d8:fb:
                    93:54:a8:54:8e:b4:98:e7:ce:59:77:2a:9d:bd:80:
                    c5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D8:AB:84:BD:65:95:96:01:02:B6:93:EF:80:44:3C:90:DD:5F:5A
            X509v3 Authority Key Identifier:
                keyid:BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37322e302f32322d3332203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:27:92:f4:06:8d:4e:e5:59:64:2c:1a:47:ef:db:b2:fb:08:
         3d:05:f5:96:fa:41:cc:c1:13:92:05:19:d1:ae:47:9e:af:72:
         ee:d3:09:28:12:ea:ad:59:06:8d:2c:4d:ae:67:2b:6f:04:8a:
         04:58:be:0c:52:4a:a2:7b:67:cf:7d:ea:77:e4:59:e5:2c:cc:
         6d:02:07:42:ef:7b:df:2f:72:c6:bc:fa:16:5d:2e:53:77:c6:
         ea:47:2e:f8:42:c4:fe:7e:8a:af:f5:a4:05:4d:81:08:b6:70:
         83:79:f7:ff:4a:8a:e2:5b:7f:f4:5e:3a:58:35:5a:b9:9c:7f:
         03:fc:3a:03:f4:e2:82:27:3e:a0:ba:ab:51:cc:ed:14:1a:49:
         9c:e0:4b:5d:87:dc:5c:cb:f0:48:61:cb:1b:9c:20:32:0b:a4:
         0d:c7:5a:52:41:76:60:57:3c:5e:93:a0:24:40:1b:21:b3:1f:
         2c:4d:8e:d9:ae:c5:e9:7d:77:58:f2:98:71:35:78:8b:d1:aa:
         d1:22:95:94:0d:e0:38:5b:19:51:95:f6:0b:a6:36:f9:01:13:
         16:4c:df:13:cd:d1:65:76:f5:e7:4a:0a:90:16:6b:d1:0c:64:
         64:9b:e0:a8:2f:73:2e:5c:b5:49:46:82:b3:c2:89:d6:32:df:
         f1:8e:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org