Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32332d3233203d3e20323731313934.roa
File:                     3137392e34392e3134382e302f32332d3233203d3e20323731313934.roa (raw, json)
Hash identifier:          XY7T/xMPMtifjKKloiE+EeoewI0iVVFD5+hnM6oe+gY=
Subject key identifier:   59:64:2D:97:75:CA:94:C5:EF:4B:F7:DE:57:16:8C:5F:E6:78:F0:AC
Certificate issuer:       /CN=5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48
Certificate serial:       60FC7924CF60AF4DB3529162029A72DD2408A652
Authority key identifier: 5F:25:ED:3F:30:4B:5E:A7:77:D2:DF:5E:71:FD:F7:34:61:DF:0A:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32332d3233203d3e20323731313934.roa
Signing time:             Thu 02 Feb 2023 18:44:38 +0000
ROA not before:           Thu 02 Feb 2023 18:39:38 +0000
ROA not after:            Thu 01 Feb 2024 18:44:38 +0000
asID:                     271194
IP address blocks:        179.49.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fc:79:24:cf:60:af:4d:b3:52:91:62:02:9a:72:dd:24:08:a6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48
        Validity
            Not Before: Feb  2 18:39:38 2023 GMT
            Not After : Feb  1 18:44:38 2024 GMT
        Subject: CN=59642D9775CA94C5EF4BF7DE57168C5FE678F0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:9c:44:aa:68:a3:3c:38:4b:42:c2:72:cc:
                    50:ef:a2:80:23:b8:a4:aa:5b:62:ae:41:e2:1c:a8:
                    f6:c2:d9:cd:9f:f7:76:80:0b:22:8c:a5:73:52:91:
                    1a:b0:c3:11:78:6e:c8:62:f0:eb:fa:a4:09:9b:19:
                    ee:52:f9:d1:af:d3:90:4d:93:21:00:df:25:37:f3:
                    f8:37:c4:eb:ee:69:5d:e3:0f:c8:82:bc:49:bf:48:
                    38:54:f5:f7:17:57:da:cf:fe:0f:cb:c0:cc:f8:29:
                    55:49:4d:18:47:e6:97:c2:5b:73:17:eb:d3:55:e3:
                    e6:37:4f:db:09:0a:ca:71:67:8c:ab:92:f6:c1:6e:
                    aa:64:6e:1f:f3:97:42:ea:b7:b0:a7:e9:b4:87:fe:
                    09:c7:d7:5e:b5:21:6c:4a:be:9d:45:5b:76:3f:01:
                    49:2e:c9:42:68:6e:79:6c:3f:b8:16:4e:2f:33:27:
                    53:16:63:ff:da:48:fb:aa:c5:ff:5e:f8:d0:56:b5:
                    40:b2:c6:79:00:75:c8:c7:83:54:dd:c1:11:95:f3:
                    c1:6d:9c:02:4f:39:49:ef:9f:36:9e:ad:ab:2a:ea:
                    fa:a2:94:b1:b3:23:c7:0c:33:00:e1:80:a2:6d:41:
                    b0:6c:fa:ba:bb:fd:5e:92:3e:8a:e8:e9:1a:c8:5c:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:64:2D:97:75:CA:94:C5:EF:4B:F7:DE:57:16:8C:5F:E6:78:F0:AC
            X509v3 Authority Key Identifier:
                keyid:5F:25:ED:3F:30:4B:5E:A7:77:D2:DF:5E:71:FD:F7:34:61:DF:0A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3134382e302f32332d3233203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:20:8c:22:66:74:e7:34:80:05:66:47:29:95:c2:c3:04:01:
         e1:93:09:59:20:53:23:2d:cd:fe:65:88:c5:b2:2b:28:31:5c:
         fa:59:47:21:6f:19:77:5b:47:6d:a4:d8:98:8c:b2:21:21:30:
         72:27:c7:3e:9f:7a:fe:83:e7:fb:e5:cb:f9:04:d8:1d:c6:60:
         45:a5:38:08:3f:2e:33:eb:fb:12:18:cd:3e:c8:8b:63:73:06:
         85:f6:99:cc:89:87:2b:92:d5:0d:3e:ab:b2:70:e6:21:47:27:
         19:fa:8e:a1:dc:6b:25:39:95:01:d9:be:17:6e:2c:2c:72:dd:
         57:83:a3:4f:4c:c9:8b:57:3f:82:78:bb:f0:a6:15:25:26:45:
         1f:9e:4e:06:78:70:ed:32:0e:31:5b:ba:d1:db:a8:15:3f:ac:
         5e:15:13:a5:f7:18:dc:83:ba:7a:bd:92:00:41:1b:a6:4c:29:
         a5:a3:2e:56:cf:2c:95:cb:c6:4a:6b:dc:b0:23:88:eb:95:f9:
         8b:c6:69:ec:5d:ba:80:7e:fb:90:13:34:8c:80:75:91:d8:b6:
         3c:73:17:c9:8e:24:ac:85:f1:57:5d:07:e0:6d:73:34:8a:0c:
         72:15:77:50:f3:06:68:2f:4c:8c:d4:bf:1f:ad:ef:2f:1a:08:
         87:c0:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org