Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132302e302f32332d3234203d3e20323731343738.roa
File:                     3137392e302e3132302e302f32332d3234203d3e20323731343738.roa (raw, json)
Hash identifier:          JcmDHbnNGojd3wehxKq37X/GNCDXyaMRQOh02anETuw=
Subject key identifier:   04:2C:6B:A1:EF:3E:27:8A:D5:DC:AF:CF:D7:51:E9:D6:C4:20:8A:D1
Certificate issuer:       /CN=5AC857044932470260E44A2750076A9293F37835
Certificate serial:       62FD9A2F75F765919BDD548C56A434E08A0A62E9
Authority key identifier: 5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132302e302f32332d3234203d3e20323731343738.roa
Signing time:             Wed 31 Jan 2024 00:51:15 +0000
ROA not before:           Wed 31 Jan 2024 00:46:15 +0000
ROA not after:            Wed 29 Jan 2025 00:51:15 +0000
asID:                     271478
IP address blocks:        179.0.120.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fd:9a:2f:75:f7:65:91:9b:dd:54:8c:56:a4:34:e0:8a:0a:62:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC857044932470260E44A2750076A9293F37835
        Validity
            Not Before: Jan 31 00:46:15 2024 GMT
            Not After : Jan 29 00:51:15 2025 GMT
        Subject: CN=042C6BA1EF3E278AD5DCAFCFD751E9D6C4208AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:f3:8a:c2:22:c2:06:9a:96:5d:76:78:b2:
                    82:d8:03:90:ea:85:4f:d1:7a:9c:76:b8:22:45:e1:
                    ad:2b:a8:a0:6e:b4:33:84:c1:15:ba:18:5c:80:e2:
                    4a:d2:af:60:b6:d3:b6:49:e1:23:2f:14:53:06:1a:
                    ff:d1:79:2d:d4:1b:ed:3c:a0:0a:31:33:24:70:a4:
                    7c:be:c8:d1:59:b7:b3:72:7e:70:f3:35:2c:4c:c7:
                    2e:f2:7e:56:9c:58:61:80:70:3d:62:3b:49:4c:ad:
                    cf:ec:cd:36:b9:58:a5:b9:cc:a7:ed:1f:3f:ee:a4:
                    0d:4b:52:dc:66:c9:87:6f:18:ff:23:f9:48:c1:03:
                    4e:72:07:3a:11:94:38:d9:e3:96:55:87:b2:2b:11:
                    ee:6f:6e:5c:9c:9c:86:d1:b4:da:70:ed:84:d0:f3:
                    09:cb:4b:cc:fb:a3:66:0c:16:f2:e6:d2:85:5b:b0:
                    1f:b9:f4:24:e8:f3:a9:69:17:56:60:89:be:20:e9:
                    84:43:66:75:ec:55:ac:1d:81:4a:d4:2b:cb:2b:21:
                    5a:75:f1:f0:f7:d5:2a:72:e9:ec:97:11:4c:9b:b3:
                    11:54:95:d1:8f:1a:8e:76:07:ab:be:1d:2d:44:fa:
                    ae:20:1a:69:f9:bf:aa:1c:6f:d2:4b:7b:e1:51:c2:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2C:6B:A1:EF:3E:27:8A:D5:DC:AF:CF:D7:51:E9:D6:C4:20:8A:D1
            X509v3 Authority Key Identifier:
                keyid:5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/5AC857044932470260E44A2750076A9293F37835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/3137392e302e3132302e302f32332d3234203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:86:d4:42:52:0f:19:76:30:69:4c:04:89:3f:38:66:55:37:
         eb:9b:db:56:06:3f:dc:f3:3f:d1:10:73:55:7a:ab:ba:0e:74:
         3d:9e:f6:fd:b3:00:70:22:f0:81:49:ca:68:ad:b5:66:92:ee:
         8e:5e:bf:07:98:3b:11:b7:8e:73:9d:90:bf:51:5b:4e:84:f3:
         b8:d5:9c:3f:11:1c:0f:ad:43:8b:25:14:d4:2a:58:e5:b8:59:
         60:19:5b:26:a0:4b:57:c0:97:8d:68:17:a1:bf:cc:9d:0a:68:
         47:41:fe:6e:ce:6c:70:60:55:fc:bf:22:c9:87:47:fb:71:38:
         b8:e9:49:74:44:e5:49:42:5b:7c:42:51:53:8d:72:69:ba:5f:
         75:81:92:5c:1d:74:d0:34:2e:0a:d7:8e:38:8d:8f:76:6e:70:
         1f:9f:59:e0:9f:7d:ff:5c:a9:94:fc:72:fc:cf:0c:7d:ab:c5:
         e3:92:89:90:02:02:ec:43:02:83:29:1b:2f:a4:a9:d6:15:70:
         ec:4a:b9:67:7c:1a:18:15:f6:6e:16:7a:2c:c4:a6:a6:89:84:
         40:69:4d:ae:52:1d:e9:dd:64:bf:cc:5a:2c:30:77:62:c3:4b:
         4f:dc:35:11:48:a9:a5:e6:7b:c8:c0:bf:02:30:3d:ea:24:2b:
         91:eb:92:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org