Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/3137392e302e34352e302f32342d3234203d3e20323731343038.roa
File:                     3137392e302e34352e302f32342d3234203d3e20323731343038.roa (raw, json)
Hash identifier:          9W72S1Vevr7T18epWjyH7rsTdGKTYvR9d+epuBunSPk=
Subject key identifier:   2C:20:D5:A4:0E:1D:16:27:74:38:8E:B7:BD:0E:39:5C:C2:DE:3B:77
Certificate issuer:       /CN=75EB4782E85658A9CEBD0E1D11D7D80696006B00
Certificate serial:       2158CA518F90B8BC83CB714D7F3F4B73AC7D148E
Authority key identifier: 75:EB:47:82:E8:56:58:A9:CE:BD:0E:1D:11:D7:D8:06:96:00:6B:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/3137392e302e34352e302f32342d3234203d3e20323731343038.roa
Signing time:             Mon 04 Mar 2024 23:06:08 +0000
ROA not before:           Mon 04 Mar 2024 23:01:08 +0000
ROA not after:            Mon 03 Mar 2025 23:06:08 +0000
asID:                     271408
IP address blocks:        179.0.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:58:ca:51:8f:90:b8:bc:83:cb:71:4d:7f:3f:4b:73:ac:7d:14:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75EB4782E85658A9CEBD0E1D11D7D80696006B00
        Validity
            Not Before: Mar  4 23:01:08 2024 GMT
            Not After : Mar  3 23:06:08 2025 GMT
        Subject: CN=2C20D5A40E1D162774388EB7BD0E395CC2DE3B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:4f:c8:88:8e:cf:93:0c:89:17:f6:49:14:
                    dd:58:0b:c9:44:a3:40:d7:ef:12:e4:b5:56:1a:ea:
                    af:28:b5:fb:c4:21:23:e6:6c:e7:30:75:a4:d6:f7:
                    50:53:da:79:32:80:1e:53:0b:94:54:00:f6:bb:d6:
                    80:cd:98:81:cc:ef:b7:05:22:b6:d1:db:02:1f:be:
                    66:01:37:56:8d:93:05:c1:7f:dd:1b:f9:48:99:41:
                    6e:54:43:6f:9c:c9:68:73:ce:04:3b:3e:0c:51:15:
                    9f:d6:3e:78:9c:fa:5b:58:1f:17:a2:52:d2:df:ee:
                    07:d3:20:9e:43:80:f4:d7:6e:db:f4:c9:ca:cf:ce:
                    be:fe:c5:03:26:45:87:cf:96:6e:0e:fc:24:52:4f:
                    e5:78:7f:bf:88:21:69:8c:5c:ce:2d:a5:b9:1d:0c:
                    22:f4:e0:2d:91:a3:09:6c:e4:6c:24:81:9f:e0:71:
                    76:1a:26:5f:d6:10:38:cd:48:9e:39:d1:ad:07:e8:
                    7e:d2:3b:f8:59:2f:fd:11:5c:a6:4a:8c:75:ec:48:
                    54:81:21:47:19:9c:d9:c7:46:02:9c:ce:8c:cc:59:
                    30:03:3a:a8:a1:e3:a3:c6:0e:76:11:8c:19:1e:83:
                    c7:ba:07:24:63:91:6c:16:a7:85:b4:f5:93:73:00:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:20:D5:A4:0E:1D:16:27:74:38:8E:B7:BD:0E:39:5C:C2:DE:3B:77
            X509v3 Authority Key Identifier:
                keyid:75:EB:47:82:E8:56:58:A9:CE:BD:0E:1D:11:D7:D8:06:96:00:6B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75EB4782E85658A9CEBD0E1D11D7D80696006B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/3137392e302e34352e302f32342d3234203d3e20323731343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:eb:51:85:c5:41:4c:e6:f6:57:4e:28:64:af:84:04:8a:82:
         e2:9d:d2:e9:74:42:cf:6a:e0:a3:2f:2a:0c:cd:1e:8f:34:2c:
         25:48:39:42:c5:4e:92:f2:c8:38:96:7a:ac:a5:62:0e:53:8a:
         11:c8:c8:19:ae:5f:45:49:ff:1e:9f:14:62:eb:55:25:93:b2:
         a3:fc:b3:64:c6:e4:09:7c:a0:d8:ab:54:b5:30:79:43:57:ae:
         b1:d3:c3:4d:de:69:99:ac:6d:ab:d1:30:d0:e5:cf:ef:7f:89:
         9d:d4:ef:58:1d:af:fa:88:9e:11:87:7d:47:0f:69:a2:08:83:
         89:89:e7:3f:c2:27:0b:68:d6:57:98:83:a3:cc:5c:70:b3:0a:
         e5:2b:2f:8f:dd:33:23:8c:16:b8:d9:73:40:9f:b1:43:4d:42:
         03:16:d0:d5:d6:ef:27:31:0a:76:ec:0a:c0:c3:b2:3b:48:d6:
         69:fd:39:cf:76:f8:48:5c:25:f3:31:6a:1d:d8:f9:a5:78:69:
         d7:e4:42:38:29:1b:b5:ae:ff:78:25:ae:f4:2b:b1:27:f5:87:
         4a:08:47:d1:d6:4d:d5:96:68:c7:dc:04:10:49:6e:8a:f4:57:
         2e:5e:be:f6:3b:a9:f2:d0:97:63:76:aa:b9:ff:86:db:9a:5f:
         a7:3a:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org