Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jYDww9tqezEVaA2arqXE9LM75KsfVwx4LBSy28bcD6T/1/3137392e3138392e34382e302f32302d3234203d3e203532363039.roa
File:                     3137392e3138392e34382e302f32302d3234203d3e203532363039.roa (raw, json)
Hash identifier:          Py8yTYBEgdU38xq8SLwKsb0UQM9VxCHQ40uV0svJTw0=
Subject key identifier:   96:79:89:8C:16:3D:AD:EB:42:F7:9C:D8:A6:F9:C9:C8:BC:BA:CB:5D
Certificate issuer:       /CN=D8309A5B887DBFE90303B22DAF909AD5866706D8
Certificate serial:       11D6A8904A4A71A43E63C78AD77429FF2D69951D
Authority key identifier: D8:30:9A:5B:88:7D:BF:E9:03:03:B2:2D:AF:90:9A:D5:86:67:06:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8309A5B887DBFE90303B22DAF909AD5866706D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jYDww9tqezEVaA2arqXE9LM75KsfVwx4LBSy28bcD6T/1/3137392e3138392e34382e302f32302d3234203d3e203532363039.roa
Signing time:             Thu 04 Apr 2024 01:06:01 +0000
ROA not before:           Thu 04 Apr 2024 01:01:01 +0000
ROA not after:            Thu 03 Apr 2025 01:06:01 +0000
asID:                     52609
IP address blocks:        179.189.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d6:a8:90:4a:4a:71:a4:3e:63:c7:8a:d7:74:29:ff:2d:69:95:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8309A5B887DBFE90303B22DAF909AD5866706D8
        Validity
            Not Before: Apr  4 01:01:01 2024 GMT
            Not After : Apr  3 01:06:01 2025 GMT
        Subject: CN=9679898C163DADEB42F79CD8A6F9C9C8BCBACB5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:09:8d:18:39:b3:22:9b:ff:6e:b1:98:c6:
                    ca:0a:6d:04:32:0b:f8:0d:c5:3a:4c:28:cb:17:ec:
                    ea:c9:09:c6:b3:25:42:28:c5:82:39:7d:0b:1e:2d:
                    f6:41:8c:dd:3a:20:03:f5:03:89:c9:0c:e2:88:a3:
                    20:ac:4b:46:fa:ca:5d:f0:2a:50:a6:15:91:f9:37:
                    30:8b:5c:33:a7:66:ac:ab:08:c5:52:d5:61:82:4d:
                    dd:0a:04:d0:c2:33:e6:ab:60:37:2b:4d:c2:ae:1e:
                    20:ee:f1:3e:12:fa:7d:3a:8c:7d:56:af:00:3c:59:
                    fb:97:93:97:f5:7d:aa:64:71:1a:02:da:88:69:7e:
                    51:56:1f:19:21:eb:7f:19:6e:1e:92:37:12:f1:8b:
                    cf:d1:bb:80:dd:2b:ad:ab:34:68:66:7a:08:e1:ed:
                    26:b7:3a:76:b1:b4:03:7f:96:37:cc:5e:47:7e:b8:
                    1b:19:0e:d5:86:b8:05:7d:33:7c:64:a2:a6:31:4c:
                    c4:1e:2d:43:86:11:ba:8d:44:4d:05:0d:2d:1a:c2:
                    ec:72:e7:62:87:a2:10:9c:3b:09:59:09:82:db:fa:
                    fc:81:0f:52:f9:3a:22:28:5d:65:ff:1e:22:97:ff:
                    98:13:13:3e:f4:f7:f5:03:e7:45:85:4b:ab:8a:36:
                    26:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:79:89:8C:16:3D:AD:EB:42:F7:9C:D8:A6:F9:C9:C8:BC:BA:CB:5D
            X509v3 Authority Key Identifier:
                keyid:D8:30:9A:5B:88:7D:BF:E9:03:03:B2:2D:AF:90:9A:D5:86:67:06:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jYDww9tqezEVaA2arqXE9LM75KsfVwx4LBSy28bcD6T/1/D8309A5B887DBFE90303B22DAF909AD5866706D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8309A5B887DBFE90303B22DAF909AD5866706D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jYDww9tqezEVaA2arqXE9LM75KsfVwx4LBSy28bcD6T/1/3137392e3138392e34382e302f32302d3234203d3e203532363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:de:b6:5b:67:2f:47:dd:3a:d0:22:b4:46:c1:ab:4c:27:08:
         c5:f0:2c:a4:16:f9:84:ad:34:9d:ef:fc:63:e2:e7:8a:4d:95:
         7b:50:68:e8:43:87:92:e8:11:c1:03:66:05:d7:e3:82:6d:b2:
         84:02:7f:e0:bd:b6:25:a8:80:d2:68:03:cd:c2:70:8d:06:3b:
         36:4b:2d:a9:24:72:ac:1e:c7:36:c8:69:39:5f:fb:a0:d0:8d:
         53:28:4a:58:71:18:da:e3:94:3f:d2:03:02:43:34:87:f0:3a:
         b0:6c:eb:c8:0f:6b:dc:22:73:15:a3:83:c7:af:50:16:62:e3:
         73:40:36:44:9c:1c:83:6b:05:2f:18:48:a9:30:0c:62:fb:8e:
         ad:7e:59:bb:91:1b:8d:79:84:43:36:af:50:8a:84:a6:19:b5:
         2f:07:49:cb:65:8b:1e:ad:f4:4a:96:54:6d:66:47:8c:a3:a8:
         d7:1b:84:b5:53:79:f5:97:a3:e1:f3:a9:2d:b7:1a:bb:41:de:
         d4:18:bb:d5:ce:ab:84:29:5f:ca:57:e8:cc:df:ca:34:0f:06:
         e6:02:d8:72:ee:8c:6a:3a:ad:f7:ea:54:29:23:d2:45:b7:c7:
         83:97:e5:7a:91:85:c2:73:8a:48:1c:bd:08:de:5b:70:b7:db:
         8d:4f:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org