Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3137392e3132342e35322e302f32342d3234203d3e20323633313034.roa
File:                     3137392e3132342e35322e302f32342d3234203d3e20323633313034.roa (raw, json)
Hash identifier:          kVQyCctw7df7XuwisMfe3gGXcDDOV6oNE3ciPHxfFX8=
Subject key identifier:   D7:FA:59:39:8A:0D:7F:BD:35:64:84:7E:B0:D3:8D:64:09:BD:A5:C4
Certificate issuer:       /CN=B4C0FD9D5211263A3D5871F7AB677346D8044DE8
Certificate serial:       4AA8C71117E3217131A01C11F5A0E55C18580F4E
Authority key identifier: B4:C0:FD:9D:52:11:26:3A:3D:58:71:F7:AB:67:73:46:D8:04:4D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C0FD9D5211263A3D5871F7AB677346D8044DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3137392e3132342e35322e302f32342d3234203d3e20323633313034.roa
Signing time:             Sat 25 Mar 2023 17:45:20 +0000
ROA not before:           Sat 25 Mar 2023 17:40:20 +0000
ROA not after:            Sat 23 Mar 2024 17:45:20 +0000
asID:                     263104
IP address blocks:        179.124.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a8:c7:11:17:e3:21:71:31:a0:1c:11:f5:a0:e5:5c:18:58:0f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C0FD9D5211263A3D5871F7AB677346D8044DE8
        Validity
            Not Before: Mar 25 17:40:20 2023 GMT
            Not After : Mar 23 17:45:20 2024 GMT
        Subject: CN=D7FA59398A0D7FBD3564847EB0D38D6409BDA5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8a:53:ea:77:82:3a:aa:f3:8c:56:ff:9a:76:
                    ab:0f:6d:a8:be:8e:ad:1d:da:ab:8a:6f:d5:4c:0d:
                    02:60:75:c8:44:7a:e0:93:ea:6c:43:0e:db:f9:6f:
                    4c:aa:b8:97:b1:70:5a:82:a3:31:d4:aa:04:57:4d:
                    ea:32:82:30:2c:fb:b3:78:fc:e7:ad:68:21:8b:2c:
                    0a:43:e6:82:2b:e1:b4:a0:b4:35:1d:02:f2:26:42:
                    bb:4c:8e:55:64:b3:6f:30:47:e4:39:38:15:60:4e:
                    b6:c7:cc:8c:da:48:ae:4d:8d:26:17:06:5b:3f:1d:
                    1f:f9:db:24:bf:56:b6:66:4a:41:e7:49:99:8b:8d:
                    e1:93:8b:1e:54:d6:0f:db:d1:97:83:85:94:bb:d2:
                    c8:0e:18:a4:9a:89:51:31:22:34:8d:52:de:47:0e:
                    a9:2f:00:21:59:e6:c5:04:25:c9:40:17:a8:e7:e5:
                    84:b2:45:22:c8:10:3c:29:41:75:e6:87:a7:fe:ad:
                    98:71:50:cd:b8:f5:40:ad:aa:70:dc:71:3d:f3:ca:
                    30:ab:61:5d:e8:b8:04:ba:cb:eb:51:0f:e2:9d:55:
                    ea:65:45:0d:c9:b1:d9:58:5c:f2:fa:da:5b:11:c4:
                    7f:86:d1:9d:44:8d:fb:0b:7b:df:f8:1c:86:cb:f7:
                    45:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FA:59:39:8A:0D:7F:BD:35:64:84:7E:B0:D3:8D:64:09:BD:A5:C4
            X509v3 Authority Key Identifier:
                keyid:B4:C0:FD:9D:52:11:26:3A:3D:58:71:F7:AB:67:73:46:D8:04:4D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/B4C0FD9D5211263A3D5871F7AB677346D8044DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4C0FD9D5211263A3D5871F7AB677346D8044DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3137392e3132342e35322e302f32342d3234203d3e20323633313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:22:b8:29:7d:21:19:86:e4:af:03:cd:2f:f1:61:cb:2e:82:
         83:39:7e:00:39:88:22:fc:55:fe:d3:5f:fb:41:fb:dc:eb:a3:
         5e:87:68:12:d0:10:8c:b1:40:7f:cf:53:b8:c0:e3:67:5a:a3:
         f5:60:3a:de:53:00:17:ee:79:19:7b:45:35:e5:c2:4f:6d:e1:
         46:aa:3e:1e:c8:a6:30:f0:f6:36:cf:95:e0:83:48:8c:f8:b2:
         4c:f1:52:b4:11:88:9c:98:03:99:9a:d4:b0:74:cf:71:8c:71:
         c0:ce:59:55:19:57:79:1b:7b:c6:b5:7d:c9:65:48:f5:1a:54:
         1f:18:69:6f:b2:95:25:f0:4b:4c:13:6b:2d:5b:aa:d5:0e:6c:
         00:4d:f5:3b:e5:18:5e:e4:e2:7f:8b:43:ac:99:26:d2:7f:bd:
         32:ba:c8:4c:11:33:c1:32:89:6b:80:64:5c:8c:fb:ee:e2:1e:
         32:13:03:64:8f:ea:bb:7f:62:6c:a5:ab:1d:b5:85:b4:b1:b4:
         7c:4e:8c:ee:3d:2d:0f:92:b0:b7:a7:d9:d1:ca:4b:32:15:9a:
         6d:53:d7:38:d3:a6:21:79:4b:73:d6:1e:de:12:73:42:fc:ed:
         85:30:c2:b1:ff:c8:e5:0b:09:e8:29:09:5b:8b:8e:8d:0d:90:
         ec:7b:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org