Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/37322e34342e32302e302f32342d3234203d3e20323636313636.roa
File:                     37322e34342e32302e302f32342d3234203d3e20323636313636.roa (raw, json)
Hash identifier:          vDEzlupzKBdUIsDTmXe2BkMWKSEsvau4/ctGuThprYs=
Subject key identifier:   83:B5:AA:53:C9:F3:9C:C4:6E:BD:AE:CB:FC:17:A5:8A:DD:59:F5:B3
Certificate issuer:       /CN=51F43471391884073640DD1CEA3309A015FDE379
Certificate serial:       359466797219E45E29FCB749DC8D136BA53A2FB7
Authority key identifier: 51:F4:34:71:39:18:84:07:36:40:DD:1C:EA:33:09:A0:15:FD:E3:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51F43471391884073640DD1CEA3309A015FDE379.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/37322e34342e32302e302f32342d3234203d3e20323636313636.roa
Signing time:             Thu 16 May 2024 17:28:57 +0000
ROA not before:           Thu 16 May 2024 17:23:57 +0000
ROA not after:            Thu 15 May 2025 17:28:57 +0000
asID:                     266166
IP address blocks:        72.44.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:94:66:79:72:19:e4:5e:29:fc:b7:49:dc:8d:13:6b:a5:3a:2f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51F43471391884073640DD1CEA3309A015FDE379
        Validity
            Not Before: May 16 17:23:57 2024 GMT
            Not After : May 15 17:28:57 2025 GMT
        Subject: CN=83B5AA53C9F39CC46EBDAECBFC17A58ADD59F5B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:c7:54:cf:85:df:ff:bc:d0:d3:23:b4:6f:
                    dc:a1:af:39:ed:ac:35:b7:9b:04:1f:aa:98:72:51:
                    53:4f:df:a4:82:50:59:bc:55:5c:91:0e:27:85:7f:
                    39:23:47:b0:6c:be:20:af:f6:a9:09:cb:db:0d:d3:
                    0f:a1:66:56:22:cc:5e:b9:cd:28:1a:3b:10:65:58:
                    6e:3d:7a:f5:2d:6c:7e:5c:45:99:16:5e:91:38:c8:
                    e9:0f:c7:8f:79:5b:ff:ba:aa:95:f3:4a:51:b9:17:
                    2d:3a:5f:c8:d1:93:a9:6b:2a:20:18:3d:0d:b9:9f:
                    ba:65:47:04:90:a1:a0:a2:12:35:2a:d3:97:e7:b3:
                    c7:2c:a6:0b:76:d0:99:b3:41:4a:79:c8:a1:92:70:
                    fb:41:6e:f9:69:23:b1:f2:bc:9b:e6:5a:ee:ce:33:
                    30:07:44:b8:55:00:87:c7:e9:9c:07:a8:ca:94:f1:
                    8a:60:15:98:1d:c1:c2:ec:8b:1b:8d:29:c7:cb:05:
                    c4:f9:11:3f:4d:88:02:da:69:cb:2a:1d:b6:ee:b4:
                    79:a3:b4:9e:c3:c3:05:7f:45:a4:f4:a3:b8:86:62:
                    c0:12:35:00:e9:27:38:71:7b:8d:61:06:ba:32:dd:
                    a9:cb:4e:19:6a:1a:f2:d1:7c:54:cb:1b:2f:19:84:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B5:AA:53:C9:F3:9C:C4:6E:BD:AE:CB:FC:17:A5:8A:DD:59:F5:B3
            X509v3 Authority Key Identifier:
                keyid:51:F4:34:71:39:18:84:07:36:40:DD:1C:EA:33:09:A0:15:FD:E3:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/51F43471391884073640DD1CEA3309A015FDE379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51F43471391884073640DD1CEA3309A015FDE379.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/37322e34342e32302e302f32342d3234203d3e20323636313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:c9:c7:20:96:4c:92:ac:4f:cf:b0:76:0a:e6:f1:ca:dc:e3:
         f8:7e:99:b6:b5:b5:cf:61:d7:49:c1:e0:4a:0b:c6:95:88:ef:
         cc:81:1e:89:cf:c3:cf:3a:e7:e2:c2:5f:3e:7e:ff:2f:9f:1e:
         15:ff:ae:24:90:9f:c2:97:9f:cd:d8:c8:72:85:b4:8b:da:89:
         91:92:d4:78:f8:5b:66:79:2d:cc:88:d1:83:9b:3b:f3:f3:2c:
         3b:18:1a:28:20:4c:ee:82:db:17:8e:27:5f:04:f4:63:1a:29:
         90:40:51:b7:2a:2f:f5:ed:2a:01:71:b4:54:72:bd:03:c5:6e:
         1a:22:49:0d:2f:36:36:b9:30:e5:e5:99:02:4c:94:5c:8f:0b:
         90:b8:a0:28:c4:65:bd:11:92:48:ac:5f:e0:19:ad:cc:df:a4:
         57:fa:3f:8e:06:31:b7:1d:a0:0e:65:3b:67:67:55:e9:ab:a5:
         e0:e8:25:46:03:a1:16:0e:dc:d5:01:21:7f:c6:31:94:49:de:
         63:95:45:b3:1c:80:e0:5d:1d:21:a9:7a:bd:ca:77:b7:af:52:
         df:20:a5:35:31:5f:36:5b:ba:a7:94:db:ad:59:82:a1:2b:3f:
         fe:f3:1d:1e:29:2f:17:5c:f5:71:92:04:3f:69:40:38:4e:95:
         92:f2:55:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 15:33:21 2024 by rpki-client on console-fra.rpki-client.org