Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37342e302f32342d3234203d3e20323731343433.roa
File:                     3137392e302e37342e302f32342d3234203d3e20323731343433.roa (raw, json)
Hash identifier:          3fx+H8u0jcwAhLPbFrZTvPXgKWnlUmbKD5sZahSjsH8=
Subject key identifier:   E3:CC:04:7D:15:1E:95:84:BA:F6:9D:72:AE:0C:CD:72:98:E3:E8:16
Certificate issuer:       /CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
Certificate serial:       48AB3D2CE86D8DF544266B8C81C9F7F5449D7E7E
Authority key identifier: BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37342e302f32342d3234203d3e20323731343433.roa
Signing time:             Thu 09 Mar 2023 11:49:49 +0000
ROA not before:           Thu 09 Mar 2023 11:44:49 +0000
ROA not after:            Thu 07 Mar 2024 11:49:49 +0000
asID:                     271443
IP address blocks:        179.0.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ab:3d:2c:e8:6d:8d:f5:44:26:6b:8c:81:c9:f7:f5:44:9d:7e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
        Validity
            Not Before: Mar  9 11:44:49 2023 GMT
            Not After : Mar  7 11:49:49 2024 GMT
        Subject: CN=E3CC047D151E9584BAF69D72AE0CCD7298E3E816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:2a:b1:a7:c7:74:21:3e:24:bd:ab:31:17:
                    38:0e:61:25:57:e5:b8:61:86:47:6d:8e:64:0f:a4:
                    98:c7:f2:9e:6b:1f:52:0b:e7:77:e8:52:31:e1:a3:
                    c4:c5:02:3f:b3:e5:99:5c:04:69:50:f2:0e:2b:21:
                    9e:17:ac:cb:ae:87:fc:07:f8:d7:1c:19:ec:d5:bb:
                    ce:b7:6b:ce:8d:8e:e9:de:c3:98:ca:2a:4e:ef:b6:
                    8e:d6:05:39:19:1b:81:20:e6:01:77:06:43:0a:90:
                    57:ca:5d:fe:3c:71:c1:ca:be:c0:ae:25:dc:5b:b4:
                    3b:c3:f7:54:8d:34:f2:e1:ad:80:19:25:63:e0:7e:
                    62:d9:39:65:c7:dd:a8:ce:4b:5e:e2:78:37:e6:d5:
                    fa:a6:3d:6c:d9:bf:9c:1a:93:84:b5:b7:f5:64:75:
                    9c:95:b8:40:c3:03:b4:93:b8:04:e6:f1:d5:7c:5f:
                    ef:8e:2c:46:53:4a:e6:96:29:38:90:5e:23:2b:c3:
                    eb:e1:b6:1b:6d:f0:1c:47:66:d4:88:87:d4:8a:83:
                    1e:74:37:e7:2e:16:38:20:5d:45:7d:41:0c:be:2f:
                    23:d8:45:e9:00:ce:ce:39:f5:61:65:5b:50:e8:25:
                    a4:53:0c:c8:f9:78:8f:05:55:7c:f2:1d:dd:ee:95:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CC:04:7D:15:1E:95:84:BA:F6:9D:72:AE:0C:CD:72:98:E3:E8:16
            X509v3 Authority Key Identifier:
                keyid:BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37342e302f32342d3234203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:22:8d:28:6f:bc:ba:38:fa:7d:15:31:03:57:19:22:1b:b6:
         42:9a:20:88:73:b3:ef:73:8a:67:19:48:9e:8e:86:f5:e6:84:
         8c:24:1e:6f:f0:81:ab:eb:1e:82:c2:b3:95:51:29:ab:81:07:
         c1:e9:52:89:35:73:a2:8a:54:3d:17:6b:4b:bb:c8:b2:e9:b7:
         09:8a:be:5d:90:c3:fa:e2:0d:11:77:b5:2b:d8:b2:9e:7e:25:
         fc:21:65:9d:2c:c7:9d:8e:20:09:28:1c:c5:88:df:e6:b3:dc:
         4f:6a:1f:4d:0d:50:95:fa:ae:fe:ce:fe:a6:c5:00:26:89:48:
         ba:b5:ee:c5:88:b2:2d:d7:d6:5b:30:81:80:91:96:d9:0b:fe:
         4c:cb:8c:2c:24:cb:46:ec:f6:e9:dd:e2:be:77:4e:49:6e:aa:
         3e:0a:72:8d:fa:28:fc:0e:12:23:46:98:1c:2f:e7:0e:af:76:
         44:95:45:99:66:76:d0:e3:0c:76:fc:79:b3:7d:27:1c:36:49:
         71:c6:da:38:85:d9:3a:6f:23:13:37:96:b8:8d:ff:98:79:99:
         7c:bb:f8:d1:d7:9a:1d:1e:1f:00:83:8e:a6:5d:3d:c0:02:85:
         22:18:98:cb:93:f0:05:3a:7a:8a:fb:cc:72:6f:15:5d:39:c8:
         1e:d3:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org