Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37322e302f32342d3234203d3e20323731343433.roa
File:                     3137392e302e37322e302f32342d3234203d3e20323731343433.roa (raw, json)
Hash identifier:          jWV6kbVc261dKaD4KrTLsqNEQjjFFAh2rrFiPWk7AAQ=
Subject key identifier:   93:35:D3:DC:19:D8:3B:B5:90:DD:7C:7E:BF:D3:92:7E:92:CD:52:7C
Certificate issuer:       /CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
Certificate serial:       7162948D5AB4411E377D41BA8023F8B35607B2F9
Authority key identifier: BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37322e302f32342d3234203d3e20323731343433.roa
Signing time:             Thu 09 Mar 2023 11:48:53 +0000
ROA not before:           Thu 09 Mar 2023 11:43:53 +0000
ROA not after:            Thu 07 Mar 2024 11:48:53 +0000
asID:                     271443
IP address blocks:        179.0.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:62:94:8d:5a:b4:41:1e:37:7d:41:ba:80:23:f8:b3:56:07:b2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
        Validity
            Not Before: Mar  9 11:43:53 2023 GMT
            Not After : Mar  7 11:48:53 2024 GMT
        Subject: CN=9335D3DC19D83BB590DD7C7EBFD3927E92CD527C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:d5:13:19:14:51:cb:3d:a6:eb:1d:08:47:
                    1a:0c:37:f7:5a:64:73:67:c7:7c:24:40:04:4d:fb:
                    03:5b:08:2d:67:b4:3f:07:56:7f:71:ef:9c:82:6c:
                    4b:63:c4:f0:5f:d4:1a:53:31:22:a6:82:0d:b0:4a:
                    78:07:a6:40:db:9b:c8:f1:94:be:e8:7c:04:e1:61:
                    07:0b:ae:e4:4c:8a:56:e7:84:2c:8a:5f:52:09:bd:
                    47:e1:1d:3e:0b:ae:59:1d:8c:c8:3f:3f:68:b8:59:
                    82:5a:08:4b:84:53:52:90:67:2c:50:2f:6f:13:99:
                    7e:16:63:8c:7c:54:51:f3:00:2b:ab:13:ad:1b:5d:
                    06:31:cb:13:1f:b3:69:0c:b9:dc:ff:47:e7:f2:81:
                    28:68:6e:04:c1:3e:03:8d:6f:bf:65:a7:22:22:0e:
                    9b:04:87:34:de:fa:6b:c3:b2:79:73:78:2e:1f:eb:
                    89:17:50:7c:b8:35:dc:57:e4:07:e6:c6:43:65:d9:
                    68:02:fd:27:6e:b1:fe:f4:f4:7a:2b:6b:58:2b:39:
                    53:42:23:bc:87:5f:14:38:b3:fd:7a:dd:e4:96:a6:
                    a5:33:3f:da:5e:15:49:76:51:d2:49:0e:6c:07:83:
                    73:fd:70:26:99:5c:49:d4:03:e4:c2:83:ab:a4:3d:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:35:D3:DC:19:D8:3B:B5:90:DD:7C:7E:BF:D3:92:7E:92:CD:52:7C
            X509v3 Authority Key Identifier:
                keyid:BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37322e302f32342d3234203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:d0:23:23:60:07:9a:89:25:3a:a0:3c:d2:93:2a:7f:9b:
         d2:d2:45:cf:56:de:07:d2:b2:72:c0:df:39:29:fe:47:5a:bf:
         2f:ee:c9:a9:f6:00:bb:a0:1b:be:da:0a:35:16:a4:27:b5:6e:
         83:d7:3e:be:26:e1:ff:bb:15:aa:55:82:9c:ef:99:05:2f:dd:
         9d:39:99:90:a2:19:18:95:86:04:7f:02:e6:85:51:5f:87:19:
         a4:2e:52:f3:a5:9d:5b:47:37:89:fb:63:7d:ea:dc:1f:b0:a4:
         44:fc:63:d8:d2:7d:57:0e:cc:ae:5c:23:65:03:20:f3:c7:e8:
         9c:01:c7:8b:cf:84:7c:31:87:0f:bc:1d:84:cc:f9:3b:8b:46:
         c9:d8:21:e9:59:5f:74:63:55:44:41:35:f7:5b:ca:ac:35:0a:
         27:c8:db:71:b5:cc:a3:ca:a7:f8:3e:75:04:b2:bd:cd:a1:cb:
         53:f3:29:05:a0:61:b6:c1:d1:f1:70:ae:b9:2a:48:db:1e:ea:
         a5:b4:6c:85:e7:f0:8e:fe:10:35:1a:0c:6f:82:55:fe:fd:22:
         a3:be:28:06:a0:ca:b7:85:8d:73:7f:03:a7:f4:21:61:1e:4d:
         57:26:56:69:6a:6f:4a:ac:38:a5:6e:87:15:24:a3:c5:df:58:
         77:d6:0e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org