Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137392e34322e39362e302f32322d3234203d3e203532353733.roa
File:                     3137392e34322e39362e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          20YE8En17tK3bjXG3csbo1MOyRNTf++TKYYwJ7lr+ic=
Subject key identifier:   17:E6:C3:6F:D5:76:40:DF:53:81:00:AC:08:04:BC:32:A2:98:62:7B
Certificate issuer:       /CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
Certificate serial:       43CD91E1FAAD9C3E91A7C187359240BF0B3616FB
Authority key identifier: 85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137392e34322e39362e302f32322d3234203d3e203532353733.roa
Signing time:             Wed 03 Apr 2024 23:58:32 +0000
ROA not before:           Wed 03 Apr 2024 23:53:32 +0000
ROA not after:            Wed 02 Apr 2025 23:58:32 +0000
asID:                     52573
IP address blocks:        179.42.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cd:91:e1:fa:ad:9c:3e:91:a7:c1:87:35:92:40:bf:0b:36:16:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
        Validity
            Not Before: Apr  3 23:53:32 2024 GMT
            Not After : Apr  2 23:58:32 2025 GMT
        Subject: CN=17E6C36FD57640DF538100AC0804BC32A298627B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:96:63:47:8d:96:47:9a:e2:b2:2f:3d:c1:
                    5d:09:e7:a6:b7:27:cd:49:57:13:8a:e9:f3:81:a3:
                    02:52:cf:5f:36:5c:76:8b:bb:79:57:f4:b9:79:d7:
                    bf:f2:51:46:78:61:07:6e:8d:e0:0d:06:ce:32:04:
                    9f:3f:5b:44:4b:2a:f3:64:4d:1f:1b:a5:ca:7b:87:
                    6a:a5:34:bf:7a:a9:93:cd:17:81:5d:8c:36:ed:d9:
                    4b:ff:b6:e9:0d:da:80:a8:c3:b3:45:9b:b0:ad:a7:
                    00:78:67:e8:dd:2f:7f:77:7c:9c:05:3e:c7:4e:29:
                    40:83:f5:1b:5f:8d:13:e7:4e:dd:34:ab:9c:4d:9f:
                    5d:b9:58:aa:42:07:35:f4:a5:a8:21:01:11:3e:4a:
                    19:e8:95:03:de:3f:59:ae:67:15:c8:95:48:d7:d5:
                    63:8a:66:f5:e0:0c:26:71:1b:03:43:00:8e:8e:a5:
                    fd:c6:54:27:b2:d6:83:6b:f6:04:54:42:f2:04:91:
                    25:35:82:10:1b:c2:cf:43:dc:29:3d:4b:3e:8a:df:
                    00:62:12:59:98:20:64:e8:f5:9c:af:33:4a:85:a3:
                    8f:7b:c0:2e:72:05:da:59:bf:a2:aa:4c:16:95:59:
                    c0:31:d4:ed:91:9a:a7:72:b5:c8:7f:0f:11:68:30:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E6:C3:6F:D5:76:40:DF:53:81:00:AC:08:04:BC:32:A2:98:62:7B
            X509v3 Authority Key Identifier:
                keyid:85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3137392e34322e39362e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:d1:ad:d2:63:48:39:2e:27:27:e5:c9:73:bf:a6:4a:81:ef:
         6f:f1:5c:de:29:4a:c3:e9:70:7f:25:f4:b6:6f:e3:a6:30:85:
         07:47:f3:94:60:8e:0b:c2:c1:fb:bd:ae:f4:34:0a:13:3b:81:
         d0:76:f9:40:ab:5b:cf:c3:fb:ab:f2:5c:07:76:98:d8:f0:81:
         db:e3:eb:cf:50:c6:1a:63:7d:dd:b9:ce:02:cb:ca:a3:ef:84:
         12:ca:1f:74:8f:ad:b5:6e:6f:48:8d:2f:86:b7:2b:39:1a:db:
         ba:fa:03:d8:1d:dd:e3:39:d7:53:d6:1f:8a:c5:cf:a8:c1:dd:
         ef:bc:71:c0:6f:d6:8e:4f:c0:ca:3d:cb:a4:c0:b6:71:b5:b1:
         41:f2:2f:82:7a:11:e4:76:7f:6c:5b:9b:99:44:03:57:d5:0f:
         fe:84:da:28:c1:03:fc:f6:3a:92:54:ec:22:4f:80:2b:45:66:
         9a:09:8a:1f:d8:d2:91:24:31:4f:f9:ef:55:0e:c7:5d:28:8f:
         7c:f3:d2:46:a2:69:fb:e0:a0:56:63:32:e7:5a:db:6c:03:6c:
         77:38:89:79:36:f0:7b:09:e0:9a:76:ab:bd:9f:f2:7a:89:79:
         16:93:79:f2:b1:aa:0a:79:0a:50:f1:e8:ad:5d:1a:b1:20:1d:
         37:6e:ad:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 02:28:21 2024 by rpki-client on console-ams.rpki-client.org