Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3134392e302f32342d3234203d3e20323731313739.roa
File:                     3137392e35312e3134392e302f32342d3234203d3e20323731313739.roa (raw, json)
Hash identifier:          PSfYjcdMkvTCKYcP9WjoTf/Mp0lIYbssH5HpR9NGf1o=
Subject key identifier:   C4:4B:15:1B:86:5F:10:DF:86:B8:1F:49:EB:32:E6:42:88:D0:4B:EE
Certificate issuer:       /CN=C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F
Certificate serial:       5B8BA19BFDCF944C3E53C15A6ED1C98376699C1A
Authority key identifier: C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3134392e302f32342d3234203d3e20323731313739.roa
Signing time:             Fri 15 Sep 2023 17:45:21 +0000
ROA not before:           Fri 15 Sep 2023 17:40:21 +0000
ROA not after:            Fri 13 Sep 2024 17:45:21 +0000
asID:                     271179
IP address blocks:        179.51.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8b:a1:9b:fd:cf:94:4c:3e:53:c1:5a:6e:d1:c9:83:76:69:9c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F
        Validity
            Not Before: Sep 15 17:40:21 2023 GMT
            Not After : Sep 13 17:45:21 2024 GMT
        Subject: CN=C44B151B865F10DF86B81F49EB32E64288D04BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:27:d7:1c:04:52:43:59:03:31:a5:51:b9:32:
                    94:58:72:e3:f7:6f:d1:2b:29:a6:fd:73:5c:3e:35:
                    ae:7f:b6:53:38:31:87:63:2e:29:8b:92:c0:8d:ca:
                    a0:49:45:ae:53:32:ee:2b:d4:8e:a6:1d:a1:9f:d3:
                    62:52:01:5d:71:8e:f3:ab:19:db:84:96:31:48:16:
                    ab:98:63:11:a7:9d:24:03:b7:ed:04:8e:fe:da:a2:
                    cc:2c:1f:8e:65:95:a4:f4:17:9c:61:8e:80:2e:97:
                    b8:e3:6d:54:4b:52:cb:72:65:cb:44:72:4d:57:f7:
                    b3:38:fc:d7:32:a1:c1:db:91:6c:14:d1:ff:a3:75:
                    5f:cd:88:34:9f:9d:1c:ec:79:87:3a:5a:14:2e:41:
                    3a:bf:da:71:c8:9d:24:4e:5d:44:9e:13:68:25:0c:
                    a1:49:70:e1:60:77:4f:36:53:e8:77:16:df:df:c7:
                    7e:24:dd:29:03:1a:ea:e9:c7:15:47:32:70:39:ce:
                    aa:ca:a3:b5:3f:80:3c:2f:11:05:a2:3f:df:e7:71:
                    d1:7b:33:ca:34:61:e3:60:5c:6b:b1:86:40:8e:7d:
                    82:c1:9c:f9:8c:9f:ce:98:69:89:23:ed:fd:c9:f9:
                    b2:28:20:4f:4d:91:d0:93:4c:97:70:3d:a6:60:bd:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4B:15:1B:86:5F:10:DF:86:B8:1F:49:EB:32:E6:42:88:D0:4B:EE
            X509v3 Authority Key Identifier:
                keyid:C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3134392e302f32342d3234203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:3a:de:7a:40:76:8a:f2:e2:46:7c:83:bd:49:ad:f4:26:2f:
         fc:2b:85:e7:3a:bc:ce:9b:d7:a3:96:e0:46:3a:d6:31:fb:71:
         e6:a9:18:ee:77:af:cc:78:6e:b5:c8:0c:37:90:90:80:2d:4b:
         5f:07:24:92:31:75:2d:c9:f3:eb:80:69:31:30:a5:bf:f6:bd:
         d1:b7:89:ad:21:11:08:ca:53:c3:35:47:67:14:44:f7:22:30:
         57:7b:74:49:b9:d7:8c:a8:9d:f9:de:31:af:91:47:94:6a:1d:
         04:46:b8:e5:96:7d:a2:8c:34:53:3e:df:6d:70:87:e7:c4:71:
         06:b0:0c:83:12:00:0a:64:1a:c8:00:6a:cb:7e:76:91:ef:c6:
         86:2a:b7:c0:38:ea:c2:55:7b:b3:97:39:a4:07:f0:39:6c:ce:
         71:38:9e:f5:e7:04:3c:12:3c:8f:6c:95:53:1c:21:7d:0c:ad:
         60:b4:75:a7:6f:ed:39:55:ec:19:82:a4:3a:54:e0:38:5c:99:
         f8:7e:3c:39:92:55:7a:b9:73:da:d3:67:83:42:10:5a:03:a9:
         b3:3f:69:25:d3:c3:6c:ad:3c:a3:d1:5c:c5:a5:bd:3d:53:cc:
         cb:20:9e:32:29:84:c3:a6:c6:a8:e0:f3:f1:dd:d4:14:84:b2:
         c2:52:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org