Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3135312e302f32342d3234203d3e20323731313934.roa
File:                     3137392e34392e3135312e302f32342d3234203d3e20323731313934.roa (raw, json)
Hash identifier:          WWEYJ/n8lwyBfWmiPH+PaEU+wMzr8rkNehIf2FXtXyI=
Subject key identifier:   CB:DF:07:29:E0:3A:D1:33:84:BD:28:41:17:C0:CE:02:9A:C8:BB:12
Certificate issuer:       /CN=5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48
Certificate serial:       7A8633CC445C43E1569CDFDC4456012C255553
Authority key identifier: 5F:25:ED:3F:30:4B:5E:A7:77:D2:DF:5E:71:FD:F7:34:61:DF:0A:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3135312e302f32342d3234203d3e20323731313934.roa
Signing time:             Thu 02 Feb 2023 18:44:57 +0000
ROA not before:           Thu 02 Feb 2023 18:39:57 +0000
ROA not after:            Thu 01 Feb 2024 18:44:57 +0000
asID:                     271194
IP address blocks:        179.49.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:86:33:cc:44:5c:43:e1:56:9c:df:dc:44:56:01:2c:25:55:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48
        Validity
            Not Before: Feb  2 18:39:57 2023 GMT
            Not After : Feb  1 18:44:57 2024 GMT
        Subject: CN=CBDF0729E03AD13384BD284117C0CE029AC8BB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:d2:c7:b3:e5:90:9e:9a:ca:1e:8e:f7:8e:
                    6a:96:64:f5:f4:9e:8c:e8:45:a7:ee:d3:e0:5b:68:
                    a5:cf:64:8a:2f:87:f4:be:e3:66:70:58:a0:15:56:
                    86:c7:06:8c:8d:67:f3:9f:d5:64:11:fd:84:f7:9a:
                    20:fb:73:53:71:e5:2d:c3:41:71:26:14:99:78:cc:
                    37:be:ca:3c:8c:23:72:7d:35:04:9d:46:e6:6b:49:
                    12:4f:05:7b:82:ba:d5:22:46:c1:d6:2b:92:b4:92:
                    b1:c6:57:8d:85:62:c6:b9:f4:a9:c3:72:4c:a0:68:
                    bf:93:eb:d8:51:ff:84:df:ef:2c:08:59:db:c3:5e:
                    48:64:80:42:44:89:61:cd:d6:96:24:63:27:9f:65:
                    73:05:a0:a8:2b:e0:9b:1c:82:0e:ae:f4:20:cc:a8:
                    1e:84:83:6e:50:ea:04:9b:d5:99:c1:cd:cd:91:41:
                    a1:38:3a:66:c5:af:2e:22:ed:2e:f7:19:31:39:9b:
                    e6:4e:b4:98:91:2a:3d:48:9e:21:6d:6f:87:0a:0c:
                    97:8b:ce:1b:10:5e:e2:5f:e1:fb:b9:03:52:5f:d0:
                    19:44:85:b7:71:e7:6e:a2:3e:ab:c5:79:b0:e7:b4:
                    4b:41:d7:81:0c:a5:e8:6e:ac:ec:11:d1:c9:fd:55:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DF:07:29:E0:3A:D1:33:84:BD:28:41:17:C0:CE:02:9A:C8:BB:12
            X509v3 Authority Key Identifier:
                keyid:5F:25:ED:3F:30:4B:5E:A7:77:D2:DF:5E:71:FD:F7:34:61:DF:0A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F25ED3F304B5EA777D2DF5E71FDF73461DF0A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/3137392e34392e3135312e302f32342d3234203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:75:94:ce:6b:7b:ff:00:75:ab:54:d4:da:39:9a:69:b7:43:
         ef:b1:41:18:e0:f8:35:3b:f5:34:2c:0e:cb:c9:e1:d5:dc:1a:
         e1:3f:9b:ad:70:3b:b1:fd:1a:b4:b9:f8:03:54:df:1b:66:12:
         b1:04:7e:13:b7:00:95:0a:9b:f6:f1:b0:43:1f:7c:0c:68:27:
         4d:2f:19:29:d4:1f:38:83:78:2a:31:26:2c:b7:a6:66:21:1e:
         b5:83:ad:dd:bc:08:14:88:33:4e:20:ec:2f:94:07:93:23:cd:
         d2:5f:f7:da:6c:cc:c1:17:3d:a2:35:6d:bc:92:8d:67:89:ba:
         04:53:73:41:6f:a5:18:ce:cf:48:b9:c9:60:7d:8e:b3:2d:7d:
         4d:f1:79:b0:40:99:0c:2c:3c:a3:a5:76:d5:ee:bc:8c:dc:27:
         57:f4:3c:2a:e4:54:af:39:cf:0d:68:b3:54:0f:58:d6:fd:fd:
         c4:14:a8:26:c7:3a:ab:74:5a:13:0b:71:e8:f2:fe:48:71:d0:
         97:f3:92:90:c6:71:d9:7d:86:66:a4:4a:8c:bd:61:da:04:93:
         6e:27:60:e1:40:74:fd:79:64:69:25:34:e8:cb:76:d6:d8:5f:
         35:ae:87:e8:92:a5:76:5b:8b:34:f1:0c:07:ec:ce:df:e9:6b:
         31:2c:d0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org