Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135392e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135392e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          y7bepV9AD+kYhUhafsyXPwL3PK2PuXxrw8BoymtA5+w=
Subject key identifier:   5C:DE:E9:2A:A8:8A:4E:31:76:4B:FB:AA:F8:7A:17:D4:1C:B7:2C:79
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       284B0436CDED9AEF78E442213D2A7A8FADFACC83
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135392e302f32342d3234203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:34 +0000
ROA not before:           Tue 05 Dec 2023 15:39:34 +0000
ROA not after:            Tue 03 Dec 2024 15:44:34 +0000
asID:                     263641
IP address blocks:        179.127.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4b:04:36:cd:ed:9a:ef:78:e4:42:21:3d:2a:7a:8f:ad:fa:cc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:34 2023 GMT
            Not After : Dec  3 15:44:34 2024 GMT
        Subject: CN=5CDEE92AA88A4E31764BFBAAF87A17D41CB72C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:a8:2b:6b:dc:79:5e:80:51:90:e6:d3:45:
                    76:92:e5:5e:fc:8a:7d:f9:16:6e:fd:0c:e2:d9:bf:
                    5f:ee:c0:cc:38:da:d9:05:1b:52:3b:d0:46:36:ee:
                    94:75:cc:43:f9:2e:66:3f:f1:9b:3a:5e:36:39:ee:
                    17:3e:84:b3:96:fc:23:75:ad:23:49:19:e6:60:78:
                    16:b3:13:60:75:8c:bc:f3:fa:81:f7:84:84:6c:54:
                    60:bc:df:3b:81:71:c3:cb:5f:f2:f3:12:0a:f3:5e:
                    16:57:e6:8e:eb:0d:2f:69:12:ac:63:d9:a3:d9:04:
                    eb:69:f5:a7:4a:c0:7c:66:b0:c3:06:4d:af:2c:aa:
                    bf:5c:2e:08:24:53:a9:57:a5:8e:f5:b6:4b:86:5b:
                    d3:f5:40:1a:b5:4e:77:5c:02:d7:3e:b7:b0:86:65:
                    29:85:77:12:35:d0:87:91:a6:1f:e1:4e:58:8a:ae:
                    40:c3:c9:bf:13:b4:45:de:37:d1:17:b1:b4:8c:f3:
                    02:f5:39:db:f0:4c:72:9e:03:5c:f7:64:ff:6b:fd:
                    32:0b:83:ab:7f:59:47:75:43:4d:23:47:4f:17:86:
                    8b:c9:4b:3f:5b:32:22:8d:c1:73:9a:6d:53:32:79:
                    e2:56:06:c6:3e:de:42:76:63:18:6c:a0:f0:96:e0:
                    49:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DE:E9:2A:A8:8A:4E:31:76:4B:FB:AA:F8:7A:17:D4:1C:B7:2C:79
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135392e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:29:2f:7a:9d:19:97:49:b5:9d:ce:83:db:60:34:93:f3:
         d5:48:76:b6:38:21:7e:d6:42:97:1e:17:11:3d:b9:93:fc:a9:
         b8:28:f8:44:bf:fe:91:a9:6a:15:2e:9d:4e:d4:6e:66:d1:b1:
         e8:be:d2:07:db:a2:5f:a8:7d:e5:cc:95:14:78:7b:32:de:a4:
         ac:63:ba:d3:0d:6b:54:f2:cb:d7:7a:15:48:f6:71:8d:1a:cd:
         d4:de:08:dc:1e:2e:c6:97:17:63:22:0c:47:d3:d3:39:d1:cc:
         db:29:93:f9:c9:5e:63:3f:03:47:c9:33:43:18:6a:24:b6:70:
         5f:29:8a:1c:6e:55:0d:0d:c6:c5:e4:f5:b5:94:4d:02:d0:9b:
         33:08:03:3c:af:4b:aa:09:67:e1:95:a7:f5:dd:68:a8:71:41:
         d0:a4:87:76:2e:73:ac:7e:71:33:07:a7:80:43:4e:d5:bf:ac:
         04:2e:b6:4e:44:d8:9d:de:fd:40:d8:77:b0:5c:38:23:9b:45:
         4a:ee:2b:37:16:5e:92:82:90:77:5f:09:39:ca:79:a9:bb:7d:
         25:d0:f7:11:ee:38:69:1c:c7:19:ea:97:12:86:a2:a9:51:a2:
         cc:49:d7:d6:51:56:31:3e:78:03:83:e6:a1:16:7e:dd:2d:1f:
         da:e8:d6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org