Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37352e302f32342d3234203d3e20323731343433.roa
File:                     3137392e302e37352e302f32342d3234203d3e20323731343433.roa (raw, json)
Hash identifier:          cvjAOLssEhuJRVt7tyYN7EzBdEVmJx4ybkU+gn0Cye8=
Subject key identifier:   83:30:C2:87:FF:79:71:DE:FC:60:D5:DD:24:E5:F4:8D:2F:98:FF:AF
Certificate issuer:       /CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
Certificate serial:       322DA005D479AE199A111DB014FF8ED0C073801C
Authority key identifier: BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37352e302f32342d3234203d3e20323731343433.roa
Signing time:             Thu 09 Mar 2023 11:50:01 +0000
ROA not before:           Thu 09 Mar 2023 11:45:01 +0000
ROA not after:            Thu 07 Mar 2024 11:50:01 +0000
asID:                     271443
IP address blocks:        179.0.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2d:a0:05:d4:79:ae:19:9a:11:1d:b0:14:ff:8e:d0:c0:73:80:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDD55594F8052D5CA3F5F5869FE99F99CA0851F4
        Validity
            Not Before: Mar  9 11:45:01 2023 GMT
            Not After : Mar  7 11:50:01 2024 GMT
        Subject: CN=8330C287FF7971DEFC60D5DD24E5F48D2F98FFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:51:fc:f9:6c:da:e5:3b:1a:a3:93:7e:b3:
                    80:c2:22:15:fc:41:f4:0e:56:99:cb:ff:72:5b:da:
                    9e:64:da:7a:79:57:7b:f4:7a:cb:81:7f:7e:ae:1d:
                    c3:e7:93:44:40:12:95:f5:e3:2e:46:05:1d:6c:72:
                    a5:fa:73:26:8b:61:7b:f1:9d:03:80:cb:7a:ab:d5:
                    41:b2:bb:6d:aa:b2:4d:ec:bf:d6:4a:95:e5:c3:1e:
                    4f:c9:47:e5:48:15:32:12:4f:b1:ba:e7:6f:0b:98:
                    fb:b8:b1:27:0e:5b:ad:8d:06:4a:75:47:49:59:79:
                    58:05:7e:89:22:67:ec:53:ba:67:5c:66:2a:d7:99:
                    33:cd:e9:f2:02:14:54:2a:34:8d:15:db:d4:20:e4:
                    1f:2d:cc:81:d8:ee:42:88:3d:06:27:d7:78:79:8b:
                    35:67:0d:f6:11:07:4e:ce:5a:48:1d:6d:2f:62:35:
                    56:69:5d:8c:a0:82:cc:8b:a5:f4:b6:81:c8:d4:a8:
                    a0:27:86:11:1e:7d:18:ea:2e:f4:b9:9f:28:b4:f5:
                    53:4f:28:ee:53:d5:60:2d:d1:b2:cd:79:03:27:d6:
                    e9:9e:89:2c:af:2c:d5:5a:17:4f:8e:c9:76:7e:d9:
                    ee:76:b1:d8:dc:52:9d:60:9e:92:bc:c8:ee:11:53:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:30:C2:87:FF:79:71:DE:FC:60:D5:DD:24:E5:F4:8D:2F:98:FF:AF
            X509v3 Authority Key Identifier:
                keyid:BD:D5:55:94:F8:05:2D:5C:A3:F5:F5:86:9F:E9:9F:99:CA:08:51:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDD55594F8052D5CA3F5F5869FE99F99CA0851F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LFjy2652vpVBm6ourCtCdYSkrAcpXMxbF66sa2ofrr9/1/3137392e302e37352e302f32342d3234203d3e20323731343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:91:13:f0:07:5b:b7:7b:31:29:6c:ac:58:1b:2b:cb:db:df:
         cf:e1:05:53:c1:91:38:c7:4a:30:f1:d7:9f:b9:37:b8:75:88:
         70:44:38:fe:d6:ec:2a:76:56:70:31:08:90:f4:79:e8:64:eb:
         1c:e6:e7:04:73:32:9b:cf:58:a1:54:cc:b8:73:7d:a5:d1:63:
         af:ba:26:bd:55:ea:46:26:a4:3d:eb:c1:dc:bf:91:a4:d8:b1:
         f0:89:70:c7:3a:90:9c:5e:f8:ff:0d:a3:bb:c8:c0:5c:d9:94:
         d5:9f:31:51:db:25:2c:ed:bc:39:6c:6a:26:b9:39:47:ae:45:
         5a:2b:05:15:b3:1b:d6:55:39:99:99:49:7d:df:c4:9b:40:37:
         f0:4c:14:f4:52:35:5c:e2:05:d1:90:33:99:af:ef:fb:90:84:
         ac:df:eb:75:14:c6:5e:14:d2:17:f4:db:e5:64:64:3b:51:c6:
         67:35:5c:e5:86:c3:7b:cd:0e:c9:38:a3:8a:06:25:03:84:b9:
         64:31:80:20:79:4b:92:7a:1a:da:5c:f2:23:62:22:fd:dd:6e:
         19:a7:42:d8:53:1c:93:a9:1c:20:40:6d:d0:7d:ed:3b:3f:c6:
         a9:2f:c2:a8:df:4a:65:c8:c3:aa:af:81:d5:8f:d8:92:5f:64:
         f7:b2:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org