Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37332e302f32342d3234203d3e20323731343433.roa
File:                     3137392e302e37332e302f32342d3234203d3e20323731343433.roa (raw, json)
Hash identifier:          j3zElKiE2p2lPzn08Ogq6OSiVoM6EEaZ5Fb9lMs0wx0=
Subject key identifier:   EA:3B:8B:54:9C:7D:60:3B:E5:F2:C4:F9:2C:D3:2B:5D:60:C7:14:95
Certificate issuer:       /CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
Certificate serial:       7D1BB4B5CB054F3AC7860D8A889A432B3A5CA957
Authority key identifier: BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37332e302f32342d3234203d3e20323731343433.roa
Signing time:             Thu 09 Mar 2023 11:49:16 +0000
ROA not before:           Thu 09 Mar 2023 11:44:16 +0000
ROA not after:            Thu 07 Mar 2024 11:49:16 +0000
asID:                     271443
IP address blocks:        179.0.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1b:b4:b5:cb:05:4f:3a:c7:86:0d:8a:88:9a:43:2b:3a:5c:a9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
        Validity
            Not Before: Mar  9 11:44:16 2023 GMT
            Not After : Mar  7 11:49:16 2024 GMT
        Subject: CN=EA3B8B549C7D603BE5F2C4F92CD32B5D60C71495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:d5:ad:dc:76:ef:2d:b8:40:6f:99:6e:59:
                    08:5c:e5:ac:08:8c:3d:c1:0d:ff:90:ea:71:6d:08:
                    a1:c1:65:2f:5f:b0:17:18:da:d2:cc:fd:84:33:2d:
                    e2:bd:ed:31:7b:ef:ab:3d:31:46:4e:8a:fd:88:a7:
                    63:ef:4c:fd:95:c9:79:0b:82:96:0d:8d:9f:c3:48:
                    79:cb:2f:e3:2d:c9:da:0c:d5:c7:98:4a:be:5c:40:
                    c4:b3:81:79:ed:3c:ca:23:a3:40:39:37:c6:2c:03:
                    d3:f2:89:74:1a:f1:8a:a5:96:1c:db:87:e1:c4:c6:
                    ee:f7:d6:39:b2:dc:3a:45:66:29:82:8f:ec:87:52:
                    4e:63:5b:83:40:9e:6f:00:8b:29:99:ef:4c:5c:2c:
                    cc:d6:b2:e6:38:8f:21:4b:1d:fb:d5:a1:92:9e:d2:
                    a3:60:26:92:e8:db:a0:ee:6a:b3:bb:08:14:f6:8d:
                    4f:b3:c7:05:d9:5a:f4:fc:8c:a9:69:79:ed:28:d8:
                    3c:20:59:0f:42:7d:81:d4:27:9b:f4:61:9d:66:0e:
                    23:97:99:79:61:e7:db:6e:b4:04:2c:9b:44:ba:62:
                    24:cb:68:fe:ae:6d:29:f0:ec:83:34:ed:e3:87:6f:
                    0d:3b:2e:98:eb:f3:88:40:a3:3c:c3:ef:71:4c:9c:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3B:8B:54:9C:7D:60:3B:E5:F2:C4:F9:2C:D3:2B:5D:60:C7:14:95
            X509v3 Authority Key Identifier:
                keyid:BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37332e302f32342d3234203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:92:c2:0d:d7:d4:89:6b:e4:42:c6:3c:30:14:10:eb:9d:f4:
         2a:d2:ec:ee:f0:7f:5d:87:3a:c4:fc:e9:c2:86:65:77:13:aa:
         ba:c6:d0:97:bd:b0:24:64:7d:61:70:ce:93:b9:23:96:45:0b:
         c2:35:37:7e:20:f1:2a:fa:fa:e8:a6:c4:e2:2f:7a:40:f0:24:
         0d:bc:77:b2:22:9d:1b:02:40:a8:c0:0c:d2:58:23:76:db:ce:
         13:8d:3a:c0:8a:e3:45:aa:28:f6:3d:dd:ca:68:c7:b7:2d:85:
         0f:5b:da:ab:65:9d:6e:00:5c:44:d4:16:3f:f3:5f:a1:4f:81:
         e5:aa:ad:c6:bf:a1:69:05:68:e1:97:2d:91:d6:bd:f0:ad:6c:
         90:21:67:64:78:ef:0b:41:69:80:c0:86:3c:63:3b:35:99:7e:
         2e:fb:41:e7:9f:d9:ff:41:bd:46:2a:47:a2:53:97:55:a7:be:
         c0:86:bc:a3:ef:98:36:ab:79:80:23:e3:98:6f:7e:21:5e:3c:
         09:8d:6d:28:2c:21:33:ed:ef:05:65:34:4d:88:16:3c:96:c6:
         b6:ee:5e:87:42:c2:c4:00:12:24:b0:ea:1a:02:1e:5b:f6:cc:
         e3:de:b6:28:8b:6a:cc:25:ee:36:b4:65:db:0b:2a:4a:4d:ae:
         83:17:ce:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org