Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3137392e34382e3139362e302f32322d3332203d3e20323731313639.roa
File:                     3137392e34382e3139362e302f32322d3332203d3e20323731313639.roa (raw, json)
Hash identifier:          C/f70Bf/ONU1AwyGHhpnGRHRslOb1j71L1hdxFw3g2Y=
Subject key identifier:   EA:CB:5E:3E:AF:D1:FA:37:4A:56:A1:49:C7:7A:9D:7A:08:3D:0E:6D
Certificate issuer:       /CN=A25FBDEB2FC42754CA1D76897E6D66E147B856E4
Certificate serial:       EA567C449E80E4DE3C3E5CBF1DF79D76AFFB2D
Authority key identifier: A2:5F:BD:EB:2F:C4:27:54:CA:1D:76:89:7E:6D:66:E1:47:B8:56:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3137392e34382e3139362e302f32322d3332203d3e20323731313639.roa
Signing time:             Wed 03 Apr 2024 17:35:29 +0000
ROA not before:           Wed 03 Apr 2024 17:30:29 +0000
ROA not after:            Wed 02 Apr 2025 17:35:29 +0000
asID:                     271169
IP address blocks:        179.48.196.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ea:56:7c:44:9e:80:e4:de:3c:3e:5c:bf:1d:f7:9d:76:af:fb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A25FBDEB2FC42754CA1D76897E6D66E147B856E4
        Validity
            Not Before: Apr  3 17:30:29 2024 GMT
            Not After : Apr  2 17:35:29 2025 GMT
        Subject: CN=EACB5E3EAFD1FA374A56A149C77A9D7A083D0E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:58:29:b9:f1:c1:67:fb:c7:52:d9:ca:2f:
                    f8:d7:c7:c8:d3:1f:a1:21:11:a3:38:93:e9:eb:d3:
                    f3:a0:c8:51:05:83:2e:e1:98:d4:ef:bb:34:7f:c1:
                    bc:2f:fe:ca:31:1d:25:b4:3e:3b:bb:f3:7e:4b:9f:
                    87:32:33:a3:c9:7c:ca:49:93:5f:7e:50:c9:36:4a:
                    68:1f:ae:d7:8b:c6:12:15:8f:7f:7e:fb:04:75:51:
                    a6:97:7d:83:7b:3a:02:12:85:c8:19:1c:6d:26:2b:
                    47:65:de:7a:e5:2f:8e:35:82:fc:1f:d0:aa:48:75:
                    c3:a2:9f:dd:23:e0:36:56:a6:fb:ee:a3:5f:02:68:
                    86:de:8b:0f:e1:1b:ba:80:f7:51:96:bb:e9:e2:b8:
                    af:f8:97:63:7e:02:b7:b8:7f:dd:3f:39:70:e6:8b:
                    ed:82:67:3c:65:4d:e4:55:f1:3e:ff:a9:b9:5b:c8:
                    07:e3:d8:49:7a:73:2d:06:92:5d:89:37:89:3f:3f:
                    b8:a0:07:6f:89:67:b4:c9:59:e0:62:5a:a4:ea:8f:
                    38:62:85:5a:95:4d:0c:c9:f7:80:c1:97:c9:27:34:
                    b6:9a:31:b9:92:fa:dd:de:fc:fb:ce:e9:80:9a:4b:
                    3d:ed:7f:46:f9:c0:72:ad:c2:7c:ca:0c:20:78:9d:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CB:5E:3E:AF:D1:FA:37:4A:56:A1:49:C7:7A:9D:7A:08:3D:0E:6D
            X509v3 Authority Key Identifier:
                keyid:A2:5F:BD:EB:2F:C4:27:54:CA:1D:76:89:7E:6D:66:E1:47:B8:56:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3137392e34382e3139362e302f32322d3332203d3e20323731313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:9f:06:14:1d:bc:4d:4a:63:e9:63:bc:16:b1:75:69:12:53:
         53:34:5c:ff:13:0d:53:36:dd:f2:f4:75:de:5c:e5:72:db:16:
         4a:66:f2:86:ac:90:0f:bf:04:d8:bb:41:1f:6a:44:18:7c:bd:
         86:e1:83:aa:24:82:52:14:4c:fb:bd:dd:3a:f1:55:eb:5d:6d:
         d5:07:93:cc:30:a2:21:ca:23:29:b4:7e:32:32:0a:15:ab:41:
         40:06:f2:e0:27:5c:49:95:8a:9a:86:2a:4b:19:8e:05:ab:f3:
         60:af:d6:d0:d5:79:bc:4e:81:24:18:52:29:0f:1b:41:9c:7c:
         1f:79:d1:65:a4:1e:f0:35:b7:e7:a0:2a:29:b1:53:bb:7a:ff:
         fc:23:a4:38:b8:33:70:4d:50:8a:a7:72:e8:b1:1b:0f:f1:99:
         c7:7b:fa:60:79:03:60:17:c7:b4:c3:9f:1f:b4:df:4e:fb:74:
         0f:8e:d8:79:f2:22:f6:01:2d:36:d9:c3:22:e7:00:18:a4:14:
         84:23:92:3f:e4:6b:33:78:c6:0b:b4:41:dd:58:50:57:7e:a2:
         cc:d5:1d:6e:c6:5c:2d:79:56:78:c4:4d:6d:67:c5:46:f9:a0:
         05:a6:1a:95:2c:d1:e0:d6:07:41:77:ea:5e:38:f5:aa:22:b9:
         50:2d:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org