Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/3137392e34382e37352e302f32342d3234203d3e20323731303638.roa
File:                     3137392e34382e37352e302f32342d3234203d3e20323731303638.roa (raw, json)
Hash identifier:          5K1HqJfNjBuimfQU9u9NoCev3f5niyNnMILDXUnbM1g=
Subject key identifier:   32:3C:31:01:C8:84:40:FA:0F:9E:36:89:00:23:9C:46:72:F1:49:1C
Certificate issuer:       /CN=6D6415DE588E3A2B572813616F55A1C1F2E9FF42
Certificate serial:       616D9FC319638AF3C30D40EBD301B35418F9F1D0
Authority key identifier: 6D:64:15:DE:58:8E:3A:2B:57:28:13:61:6F:55:A1:C1:F2:E9:FF:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D6415DE588E3A2B572813616F55A1C1F2E9FF42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/3137392e34382e37352e302f32342d3234203d3e20323731303638.roa
Signing time:             Wed 06 Mar 2024 18:48:03 +0000
ROA not before:           Wed 06 Mar 2024 18:43:03 +0000
ROA not after:            Wed 05 Mar 2025 18:48:03 +0000
asID:                     271068
IP address blocks:        179.48.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6d:9f:c3:19:63:8a:f3:c3:0d:40:eb:d3:01:b3:54:18:f9:f1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6415DE588E3A2B572813616F55A1C1F2E9FF42
        Validity
            Not Before: Mar  6 18:43:03 2024 GMT
            Not After : Mar  5 18:48:03 2025 GMT
        Subject: CN=323C3101C88440FA0F9E368900239C4672F1491C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:24:00:bf:a5:3c:8f:ca:6d:62:df:89:3b:
                    d0:c7:08:e4:8c:c8:a8:8a:c5:a0:78:00:f2:5b:11:
                    b8:5f:a4:9b:4b:50:b0:09:e1:4f:e4:97:95:68:7e:
                    44:85:56:ec:dc:de:f7:f6:b4:a6:c5:f0:2c:c1:9e:
                    8e:f1:1f:cf:b1:e4:30:d7:98:1d:c1:31:e8:fa:47:
                    a9:c6:fa:1a:3e:cd:ba:ca:fa:c6:55:1e:48:4f:49:
                    b5:c3:12:54:f1:b7:c2:00:7c:63:5e:b7:17:c5:9b:
                    e1:1a:3b:2e:a8:1a:95:4b:5b:05:30:20:17:5c:52:
                    ba:d6:90:66:8c:14:ec:6d:57:f1:b9:cb:28:b4:02:
                    e6:de:4c:3f:fc:68:56:33:02:38:3a:dd:a7:f6:72:
                    82:70:01:29:49:89:20:93:31:18:78:73:2a:de:af:
                    1c:9b:b2:65:c5:7b:1b:74:43:b0:73:2f:94:42:52:
                    11:d0:44:cf:54:52:57:e6:0c:56:f6:6a:b5:b6:b3:
                    2b:c0:32:03:7f:08:6f:97:33:35:f9:8a:49:e4:68:
                    b7:8f:9c:e0:c9:74:06:e9:f8:42:12:a5:05:50:3e:
                    42:d1:8c:7a:7d:c2:cb:14:92:64:2f:07:28:48:f3:
                    9d:56:d8:ea:e0:2e:b4:85:27:ec:88:15:ef:cd:91:
                    bf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3C:31:01:C8:84:40:FA:0F:9E:36:89:00:23:9C:46:72:F1:49:1C
            X509v3 Authority Key Identifier:
                keyid:6D:64:15:DE:58:8E:3A:2B:57:28:13:61:6F:55:A1:C1:F2:E9:FF:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/6D6415DE588E3A2B572813616F55A1C1F2E9FF42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D6415DE588E3A2B572813616F55A1C1F2E9FF42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/3137392e34382e37352e302f32342d3234203d3e20323731303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:49:42:d7:c3:4f:63:f6:d8:58:26:10:d1:ea:e1:e1:bf:ec:
         da:e6:8e:2d:e9:0c:c1:bb:33:a2:9a:72:b0:32:55:63:1a:15:
         7c:87:3f:58:51:a4:7e:6c:3e:52:53:2d:8f:79:f3:b9:e7:38:
         47:dc:db:79:b7:aa:97:b4:1f:20:7c:55:ed:b4:60:4e:31:e8:
         bd:0f:94:47:50:b2:c7:08:b8:58:69:96:5d:f4:ce:b0:5d:82:
         75:c5:72:bd:97:ca:59:7a:2e:9c:ac:74:a4:cb:c5:dc:f8:3e:
         fd:0f:f8:78:87:91:c5:b3:29:f5:0a:43:44:b0:09:30:59:a6:
         6a:48:38:15:d7:dc:01:c2:91:37:9a:c2:9c:76:96:9e:15:5a:
         b8:80:1f:40:ec:fd:bf:0c:56:15:1b:3e:0a:7b:3e:55:19:a7:
         54:9e:2d:56:ab:70:fd:97:17:93:53:4e:fe:52:4e:49:0a:82:
         fa:96:04:ab:2d:fe:65:b9:de:75:b5:0b:10:8b:46:5d:a8:21:
         10:60:03:c4:5f:e9:24:f7:94:30:f6:99:ad:c1:78:6a:1b:90:
         c4:88:90:09:e7:93:1b:1b:6d:93:7c:9f:da:3f:dd:ab:b9:a5:
         2e:d2:95:73:34:36:21:75:66:0f:1b:77:b6:f0:cb:d2:23:d5:
         3f:a2:75:00
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYW2fwxljivPDDUDr0wGzVBj58dAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ2NDE1REU1ODhFM0EyQjU3MjgxMzYxNkY1NUExQzFG
MkU5RkY0MjAeFw0yNDAzMDYxODQzMDNaFw0yNTAzMDUxODQ4MDNaMDMxMTAvBgNV
BAMTKDMyM0MzMTAxQzg4NDQwRkEwRjlFMzY4OTAwMjM5QzQ2NzJGMTQ5MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTEyQAv6U8j8ptYt+JO9DHCOSM
yKiKxaB4APJbEbhfpJtLULAJ4U/kl5VofkSFVuzc3vf2tKbF8CzBno7xH8+x5DDX
mB3BMej6R6nG+ho+zbrK+sZVHkhPSbXDElTxt8IAfGNetxfFm+EaOy6oGpVLWwUw
IBdcUrrWkGaMFOxtV/G5yyi0AubeTD/8aFYzAjg63af2coJwASlJiSCTMRh4cyre
rxybsmXFext0Q7BzL5RCUhHQRM9UUlfmDFb2arW2syvAMgN/CG+XMzX5iknkaLeP
nODJdAbp+EISpQVQPkLRjHp9wssUkmQvByhI851W2OrgLrSFJ+yIFe/Nkb+hAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMjwxAciEQPoPnjaJACOcRnLxSRwwHwYDVR0j
BBgwFoAUbWQV3liOOitXKBNhb1WhwfLp/0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE5WMkpXc1E2RG8xR3RyeGhjcXBvVVp2SnNMeWFDTlRQaUFmakRmVjd3
MVovMC82RDY0MTVERTU4OEUzQTJCNTcyODEzNjE2RjU1QTFDMUYyRTlGRjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZENjQxNURFNTg4RTNBMkI1
NzI4MTM2MTZGNTVBMUMxRjJFOUZGNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hOVjJKV3NRNkRvMUd0cnhoY3Fwb1VadkpzTHlhQ05UUGlBZmpEZlY3dzFaLzAv
MzEzNzM5MmUzNDM4MmUzNzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzAzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAszBLMA0GCSqGSIb3DQEBCwUAA4IBAQBPSULXw09j
9thYJhDR6uHhv+za5o4t6QzBuzOimnKwMlVjGhV8hz9YUaR+bD5SUy2PefO55zhH
3Nt5t6qXtB8gfFXttGBOMei9D5RHULLHCLhYaZZd9M6wXYJ1xXK9l8pZei6crHSk
y8Xc+D79D/h4h5HFsyn1CkNEsAkwWaZqSDgV19wBwpE3msKcdpaeFVq4gB9A7P2/
DFYVGz4Kez5VGadUni1Wq3D9lxeTU07+Uk5JCoL6lgSrLf5lud51tQsQi0ZdqCEQ
YAPEX+kk95Qw9pmtwXhqG5DEiJAJ55MbG22TfJ/aP92ruaUu0pVzNDYhdWYPG3e2
8MvSI9U/onUA
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org