Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3135302e302f32332d3233203d3e20323731313934.roa
File:                     3137392e34392e3135302e302f32332d3233203d3e20323731313934.roa (raw, json)
Hash identifier:          74NlFmNCBcG+9i3n4oWwhfTXmEb/HoAkPXpjWqVdHXw=
Subject key identifier:   A8:AE:2F:AB:3C:53:20:93:2D:05:FB:E2:40:C3:A4:BA:8B:1F:B9:6D
Certificate issuer:       /CN=5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48
Certificate serial:       78EBE18FE4E69EB94FD0BD2CB2359EF7D6FEC18C
Authority key identifier: 5F:25:ED:3F:30:4B:5E:A7:77:D2:DF:5E:71:FD:F7:34:61:DF:0A:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3135302e302f32332d3233203d3e20323731313934.roa
Signing time:             Thu 02 Feb 2023 18:44:50 +0000
ROA not before:           Thu 02 Feb 2023 18:39:50 +0000
ROA not after:            Thu 01 Feb 2024 18:44:50 +0000
asID:                     271194
IP address blocks:        179.49.150.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:eb:e1:8f:e4:e6:9e:b9:4f:d0:bd:2c:b2:35:9e:f7:d6:fe:c1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48
        Validity
            Not Before: Feb  2 18:39:50 2023 GMT
            Not After : Feb  1 18:44:50 2024 GMT
        Subject: CN=A8AE2FAB3C5320932D05FBE240C3A4BA8B1FB96D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:ff:23:43:43:77:fa:e9:cf:de:13:b8:a1:
                    4a:48:da:8f:d9:c2:3b:48:c6:d1:2b:65:a8:3e:57:
                    ef:f2:fb:78:90:5c:c2:34:ee:31:e5:1e:85:e0:f4:
                    9a:45:0a:b6:d1:92:3c:52:33:a4:bf:7a:bb:94:18:
                    19:6e:f7:0b:48:e5:c4:b7:28:f6:04:55:85:7f:ab:
                    c2:68:d5:8c:37:93:f5:04:a2:78:f6:82:f5:11:ab:
                    ba:d2:1c:fa:cb:4d:43:b4:fc:ee:97:6a:65:29:7d:
                    e4:a0:a7:d4:76:43:68:ed:c0:2d:31:8e:da:9f:de:
                    e3:f1:19:cf:76:1c:7d:69:75:3d:c4:31:a0:00:08:
                    ba:46:07:74:bf:81:de:68:bb:99:25:85:ed:31:2f:
                    08:dc:03:f3:40:f0:ff:d2:a1:cc:62:e9:90:58:1e:
                    d8:ba:fe:76:a0:ec:33:86:e6:76:7d:ad:8d:f6:b6:
                    89:0c:f4:8b:3e:90:5c:cf:d9:37:5f:46:74:e3:27:
                    e8:39:96:2e:4c:0a:62:6e:30:71:28:2b:02:b5:00:
                    2b:89:ad:98:c0:3c:74:86:b9:09:cb:d6:fa:d4:26:
                    a9:3d:1e:e0:bb:ee:30:0a:f4:19:be:2f:66:99:1e:
                    ea:04:f0:2c:0c:e5:27:ff:06:91:ca:65:36:10:f0:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AE:2F:AB:3C:53:20:93:2D:05:FB:E2:40:C3:A4:BA:8B:1F:B9:6D
            X509v3 Authority Key Identifier:
                keyid:5F:25:ED:3F:30:4B:5E:A7:77:D2:DF:5E:71:FD:F7:34:61:DF:0A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3135302e302f32332d3233203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:4e:ec:84:7d:ab:79:a6:4c:cc:71:89:24:7e:15:9f:47:a8:
         c6:17:74:a3:f8:1b:7e:e7:a1:b7:6a:20:8d:af:3a:c5:84:45:
         57:ff:c8:bd:82:89:89:9a:01:29:7f:46:a7:95:f2:6c:d5:c8:
         28:27:10:7b:ed:8c:5b:bd:94:06:8f:c7:0f:5b:bf:a0:d3:d4:
         ce:6a:3e:e5:34:b7:68:2b:e8:85:c4:71:6c:95:b1:e3:40:95:
         68:b2:14:b7:f6:7f:69:38:91:e2:c8:86:ca:11:c1:8b:70:93:
         e6:2c:99:c1:53:fd:61:9e:68:10:d5:44:fe:68:db:ea:a8:a5:
         db:85:55:e8:cf:63:b2:3f:de:d9:ab:bd:48:87:56:b7:9a:2f:
         0c:6e:e2:bf:d5:f6:72:5f:1c:f5:33:a5:21:21:11:42:1e:de:
         ca:c5:36:c0:89:94:89:f7:39:99:2a:95:b6:25:d8:d5:05:be:
         8b:14:cd:95:0a:a7:30:00:c2:a6:98:36:28:68:de:b0:10:90:
         af:11:f3:10:4f:72:51:30:c7:dc:bf:47:6b:b0:c0:1c:f5:4e:
         14:72:16:2b:f9:ae:3b:d1:f4:37:7a:c4:3b:51:42:3c:2c:a0:
         54:7b:31:56:af:7b:6d:5f:12:46:9b:c0:65:b4:3a:92:af:3f:
         7a:60:1e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org