Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3135302e302f32342d3234203d3e20323731313739.roa
File:                     3137392e35312e3135302e302f32342d3234203d3e20323731313739.roa (raw, json)
Hash identifier:          WKVdh8t2j3hVxzG9YMuqSZ3eicDCYloub8jDj5QtuHU=
Subject key identifier:   CF:E9:5C:37:CB:73:45:F8:AE:18:78:68:9E:34:7D:33:D7:73:A1:89
Certificate issuer:       /CN=C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F
Certificate serial:       3CD66F9314D57836A42D1981CB1BCADD8787DD9A
Authority key identifier: C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3135302e302f32342d3234203d3e20323731313739.roa
Signing time:             Fri 15 Sep 2023 17:45:46 +0000
ROA not before:           Fri 15 Sep 2023 17:40:46 +0000
ROA not after:            Fri 13 Sep 2024 17:45:46 +0000
asID:                     271179
IP address blocks:        179.51.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d6:6f:93:14:d5:78:36:a4:2d:19:81:cb:1b:ca:dd:87:87:dd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F
        Validity
            Not Before: Sep 15 17:40:46 2023 GMT
            Not After : Sep 13 17:45:46 2024 GMT
        Subject: CN=CFE95C37CB7345F8AE1878689E347D33D773A189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:7b:54:ae:80:75:3f:89:27:7a:ff:4d:22:
                    1d:c2:36:c8:fa:e7:18:5d:b3:28:31:36:5a:5a:09:
                    cc:e0:30:76:10:3b:d8:1b:dd:7f:d6:95:23:76:70:
                    31:0a:e5:c3:af:e8:64:ca:f0:9a:22:87:23:2e:3a:
                    95:b3:bc:1c:1f:f5:09:ef:ed:c5:78:81:d7:f7:15:
                    9b:53:20:b6:11:07:a2:0f:a8:ff:fb:67:47:48:eb:
                    f1:ef:e6:68:3c:71:e6:e5:00:43:b2:2a:fd:4c:01:
                    2d:5d:3c:75:15:e4:86:8b:15:ee:ce:79:01:0b:91:
                    c7:71:c2:f2:83:3a:a5:83:aa:6d:c2:94:93:28:a9:
                    9a:37:be:ae:94:e1:b4:b4:0d:23:6e:79:83:1d:66:
                    3d:e4:64:b1:e5:9c:2a:49:10:f6:31:92:45:22:9b:
                    b7:05:05:d3:7b:7d:45:1d:2c:b2:bd:69:7f:5b:52:
                    c4:7b:8d:92:f7:79:e6:f5:f5:86:9f:50:c4:27:35:
                    01:c6:b9:98:1f:5b:b8:d7:fe:6a:8a:7c:8f:b7:d1:
                    c2:15:bd:9d:d3:25:77:ab:53:2e:ae:15:bb:5e:59:
                    5c:3c:73:42:48:c3:69:60:77:1d:7b:0a:7a:dc:9c:
                    71:d8:7c:16:6d:cf:25:06:e9:9f:41:57:26:4b:c9:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E9:5C:37:CB:73:45:F8:AE:18:78:68:9E:34:7D:33:D7:73:A1:89
            X509v3 Authority Key Identifier:
                keyid:C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/3137392e35312e3135302e302f32342d3234203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d1:11:c6:92:3f:35:db:67:d7:ad:e6:66:65:b2:35:8d:3c:
         40:eb:e6:80:de:75:6a:79:5c:20:57:6c:60:04:65:54:b1:4e:
         16:3d:e1:ab:da:7c:e9:59:a7:11:50:e0:41:16:61:ed:1a:34:
         f4:04:b0:f5:fc:3f:50:6c:c2:1c:5a:89:f5:6d:e0:ad:46:63:
         30:07:ae:99:b0:33:15:d5:55:50:01:f6:58:7a:c4:de:1d:84:
         6b:a2:dc:f0:f4:e3:96:6f:fb:e0:ed:6d:7c:08:7a:7a:a2:5f:
         70:d9:f2:f9:b4:7d:01:22:85:22:f2:ef:46:c9:5e:6d:0d:ad:
         2b:96:f2:2f:f9:31:01:e1:b4:7a:11:cd:67:99:94:11:b4:6a:
         51:be:48:61:cb:c7:12:2b:88:3f:12:43:95:fb:65:1f:21:4b:
         f6:bd:1a:d3:d6:69:85:36:e1:d9:62:05:7d:b3:d9:9c:15:6d:
         3b:3e:46:fa:bd:cf:57:77:c8:24:b4:06:64:9c:83:04:b1:f1:
         f0:30:3f:b2:47:c1:92:98:aa:e6:21:64:f0:0e:82:f7:c2:fd:
         40:b3:02:71:cf:10:e7:96:38:56:3c:07:9f:29:7d:e3:bc:32:
         5c:bf:98:03:f7:d0:0a:9e:08:67:6d:a1:42:8a:cd:18:c7:d3:
         a4:8a:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org