Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3134382e302f32332d3233203d3e20323731313739.roa
File:                     3137392e35312e3134382e302f32332d3233203d3e20323731313739.roa (raw, json)
Hash identifier:          Cw79ZqKkdzZfyd907d9DowoVVDDEn0h+NEsAubC2Aus=
Subject key identifier:   0E:54:35:13:1F:0D:1B:ED:28:EC:59:D0:ED:A9:3C:30:87:26:FE:E9
Certificate issuer:       /CN=C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F
Certificate serial:       6FC14F9DBC117A0A36227D9EA5D0EB16A07A2313
Authority key identifier: C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3134382e302f32332d3233203d3e20323731313739.roa
Signing time:             Sun 10 Sep 2023 17:01:58 +0000
ROA not before:           Sun 10 Sep 2023 16:56:58 +0000
ROA not after:            Sun 08 Sep 2024 17:01:58 +0000
asID:                     271179
IP address blocks:        179.51.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c1:4f:9d:bc:11:7a:0a:36:22:7d:9e:a5:d0:eb:16:a0:7a:23:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F
        Validity
            Not Before: Sep 10 16:56:58 2023 GMT
            Not After : Sep  8 17:01:58 2024 GMT
        Subject: CN=0E5435131F0D1BED28EC59D0EDA93C308726FEE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:2e:d8:b0:8f:b7:81:cb:4c:fc:96:8b:e4:
                    c5:51:ae:1b:17:61:05:c6:e7:66:d4:e3:3c:ec:6f:
                    fa:28:cf:50:00:4b:0c:79:0b:24:a3:1d:06:6a:81:
                    fd:f8:0e:37:ef:ee:bf:c5:3a:fb:49:a3:ce:f8:ed:
                    8f:47:68:8c:55:09:9b:22:52:a5:6e:dd:4a:36:33:
                    fa:34:91:3b:8a:2a:47:c5:b0:59:28:80:a5:62:9f:
                    46:9e:3c:3b:a2:b3:8a:76:aa:f7:59:4d:c2:6b:e4:
                    01:3a:f1:4a:0b:33:18:e2:6a:db:b3:8b:a9:96:48:
                    48:b1:86:86:01:46:71:16:92:57:2e:52:23:18:fc:
                    62:3b:fe:6c:08:2b:65:d6:70:c3:7f:e5:e1:fc:ba:
                    01:f6:42:c7:ec:73:0e:56:08:dd:d5:b4:77:9c:10:
                    cd:39:38:59:05:02:3e:02:2c:35:11:7f:ee:8e:4f:
                    37:0c:11:d0:17:ec:79:5f:b6:fe:e8:57:ba:21:f8:
                    71:48:2c:37:c4:2a:55:93:7a:27:e3:74:7b:db:f6:
                    71:b3:c2:a1:e5:c8:b9:7f:59:cc:c4:f7:23:01:6f:
                    82:3b:0e:3b:46:1f:a9:1b:6c:e3:7f:3a:38:ac:98:
                    ca:04:57:37:8b:5d:45:c4:cf:a0:05:37:e0:e6:40:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:54:35:13:1F:0D:1B:ED:28:EC:59:D0:ED:A9:3C:30:87:26:FE:E9
            X509v3 Authority Key Identifier:
                keyid:C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3134382e302f32332d3233203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:40:ef:fe:26:bb:74:a4:71:c7:96:63:43:fb:85:f9:2a:93:
         86:70:98:bb:0d:3b:61:2c:6c:4f:92:26:7a:7d:b2:0c:de:bc:
         b7:3d:e0:45:45:be:66:f1:f9:bb:eb:ac:09:3d:f1:57:be:3c:
         47:66:24:b0:2e:d5:23:6a:ff:22:79:df:d9:a6:a0:3a:7d:00:
         f4:d6:d3:2b:f9:7a:20:49:e5:0c:b8:7f:1a:bb:17:73:2d:8d:
         88:49:16:34:66:e2:9e:79:d6:d9:00:b8:9b:ea:c0:1c:bb:45:
         c4:ca:eb:12:4c:fd:f0:f3:9b:31:82:e8:91:bb:b6:19:3f:fa:
         40:39:9a:9b:71:c8:a2:32:4d:c0:9b:12:6a:64:a7:52:f0:d9:
         8e:66:f3:fd:d2:5d:e1:60:28:6f:64:27:e9:c9:77:e7:33:f0:
         12:2b:98:bb:ec:cd:33:4a:b6:90:e8:b6:bc:9f:8c:f6:91:cd:
         59:2b:68:eb:93:cc:7e:5d:df:dd:46:df:99:69:89:21:7a:48:
         48:27:f4:29:34:71:05:74:61:78:11:81:44:52:94:a3:f5:6d:
         92:fd:fb:7d:d0:2e:1b:dd:0d:9a:0d:d8:2b:9f:0e:17:d7:95:
         44:45:ec:7e:a3:b2:51:5a:91:74:e7:f4:9c:90:6e:0c:e6:a8:
         12:87:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org