Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35342e302f32342d3234203d3e20323730383732.roa
File:                     3137392e34332e35342e302f32342d3234203d3e20323730383732.roa (raw, json)
Hash identifier:          jDyBO8i/ZOw9p3hRsRm1TS4bqo85VlwTq1FWyIb4BJk=
Subject key identifier:   F3:BA:0A:59:E8:92:DA:BC:7C:9A:19:03:01:0D:62:E8:A6:CF:7B:99
Certificate issuer:       /CN=0A5F71E7C0ECCB54B0581C8E153CD11D69E2F467
Certificate serial:       0CA1E45CF92DBA7415B7DE084339B2EA21455C32
Authority key identifier: 0A:5F:71:E7:C0:EC:CB:54:B0:58:1C:8E:15:3C:D1:1D:69:E2:F4:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A5F71E7C0ECCB54B0581C8E153CD11D69E2F467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35342e302f32342d3234203d3e20323730383732.roa
Signing time:             Thu 25 May 2023 15:58:23 +0000
ROA not before:           Thu 25 May 2023 15:53:23 +0000
ROA not after:            Thu 23 May 2024 15:58:23 +0000
asID:                     270872
IP address blocks:        179.43.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a1:e4:5c:f9:2d:ba:74:15:b7:de:08:43:39:b2:ea:21:45:5c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5F71E7C0ECCB54B0581C8E153CD11D69E2F467
        Validity
            Not Before: May 25 15:53:23 2023 GMT
            Not After : May 23 15:58:23 2024 GMT
        Subject: CN=F3BA0A59E892DABC7C9A1903010D62E8A6CF7B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d8:87:2e:bc:5c:3b:dd:86:18:24:24:59:44:
                    a4:60:fd:86:99:a5:5c:e1:cb:d8:21:d4:b1:d9:a2:
                    e0:00:04:59:aa:d4:e0:e1:39:3e:17:86:93:50:e7:
                    69:c3:1c:6a:0b:a3:33:d9:43:6a:8b:0b:b2:17:5b:
                    5f:44:10:bc:be:f8:01:01:17:c3:68:54:37:a3:be:
                    90:d6:e7:3d:b4:81:72:7f:ab:03:7e:0b:72:40:e3:
                    41:42:dd:0d:1c:8d:03:ee:d2:bb:4e:9b:dc:76:c5:
                    68:8e:dd:b8:e1:a8:15:74:d6:7f:26:00:7f:b8:2a:
                    03:65:03:24:be:f9:73:a7:b5:6c:3c:9d:b3:24:5d:
                    3a:7a:77:64:e4:50:94:94:12:d7:34:8f:68:e3:5d:
                    fa:53:d8:1d:35:e6:fb:76:8c:a5:72:f8:94:ab:84:
                    2b:2a:ee:1e:18:ec:b2:5e:2a:90:6e:2f:a4:dd:6d:
                    8c:de:18:4b:8d:9d:20:61:fa:8d:ab:a4:53:5d:4d:
                    28:17:40:66:6b:98:01:52:d5:1f:19:45:85:e1:c8:
                    9f:b2:e3:b9:38:86:c4:5a:67:ca:d0:d5:d0:48:4b:
                    b6:f1:bf:ce:29:2a:bc:66:a7:0f:ed:b5:c6:bd:7d:
                    e6:38:86:03:1f:74:7c:8f:21:8c:ad:4d:71:d2:2d:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BA:0A:59:E8:92:DA:BC:7C:9A:19:03:01:0D:62:E8:A6:CF:7B:99
            X509v3 Authority Key Identifier:
                keyid:0A:5F:71:E7:C0:EC:CB:54:B0:58:1C:8E:15:3C:D1:1D:69:E2:F4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/0A5F71E7C0ECCB54B0581C8E153CD11D69E2F467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A5F71E7C0ECCB54B0581C8E153CD11D69E2F467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TWNkitT6scLMi24w1LiZPinWjfqxqtrxguMaXY4iqXz/0/3137392e34332e35342e302f32342d3234203d3e20323730383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:c8:15:86:a7:1e:df:85:94:c6:9c:28:bb:75:23:15:e9:6b:
         fb:9e:6e:c2:0b:33:82:32:55:96:02:55:b0:f1:78:fc:1a:1e:
         b8:3d:50:e7:70:57:27:b3:e3:fd:09:7d:75:79:80:26:04:5e:
         32:9f:d1:ee:3c:84:5c:12:b1:3f:73:ad:ca:bc:c5:9c:11:08:
         11:32:ed:80:0a:fb:a6:23:5c:34:af:6f:cb:62:c7:bc:2a:06:
         b4:9e:ce:11:8f:ff:14:4c:d4:83:46:82:17:63:04:aa:83:0d:
         d8:cc:79:ce:be:bb:6a:a8:c0:b9:23:95:50:f1:a4:14:3a:7c:
         c5:10:56:ab:54:67:5f:41:f5:a1:cc:66:0a:ef:a7:ba:65:77:
         e7:a8:32:94:64:05:ef:ad:0d:0e:b1:70:24:f3:c0:88:8d:1e:
         45:e3:f8:12:18:35:39:29:49:5e:12:5b:de:a4:61:a8:08:44:
         95:ac:cd:f2:56:3b:06:e9:92:2a:87:4e:11:48:df:15:9e:9a:
         fa:04:d1:c2:53:a4:55:0c:61:de:0d:ba:3c:4f:2e:ec:aa:56:
         c9:7b:93:89:d9:57:f8:ff:94:36:3e:75:5d:4f:52:c3:90:59:
         c1:09:e0:22:27:c7:5e:c8:f2:37:ca:af:a1:e3:b3:2c:0a:95:
         a6:84:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org