Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa
File:                     3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa (raw, json)
Hash identifier:          5zrG3hqv9A4GOT4TySI4kCgp/UuXIiODQET1KSIAwT8=
Subject key identifier:   A0:9F:B0:CE:1F:39:E1:03:E1:4C:9E:D9:38:D1:21:E2:70:E1:DF:49
Certificate issuer:       /CN=B703F8762B9302F126840F9CEAA892F3910476FA
Certificate serial:       7AC6A8FB26C30C8447947C7DC5741D25C9C39E90
Authority key identifier: B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa
Signing time:             Mon 18 Mar 2024 14:03:31 +0000
ROA not before:           Mon 18 Mar 2024 13:58:31 +0000
ROA not after:            Mon 17 Mar 2025 14:03:31 +0000
asID:                     271090
IP address blocks:        179.48.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c6:a8:fb:26:c3:0c:84:47:94:7c:7d:c5:74:1d:25:c9:c3:9e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B703F8762B9302F126840F9CEAA892F3910476FA
        Validity
            Not Before: Mar 18 13:58:31 2024 GMT
            Not After : Mar 17 14:03:31 2025 GMT
        Subject: CN=A09FB0CE1F39E103E14C9ED938D121E270E1DF49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:59:0e:48:08:92:ca:30:5e:3f:9f:99:8b:
                    86:c7:93:77:4e:44:f7:09:e2:5e:ca:45:d0:46:5c:
                    82:1e:01:f2:2c:77:c2:22:7c:fd:c6:60:12:18:95:
                    65:f3:42:aa:f6:38:d1:b8:e1:91:7d:62:9c:ea:dd:
                    0b:62:4c:3b:71:78:12:f3:ae:e4:00:04:d6:0f:00:
                    56:ce:2f:c3:36:e2:76:26:2e:db:8e:0d:4e:67:d9:
                    a8:6d:33:e2:11:6d:8e:14:2e:ec:ac:e1:51:4e:f3:
                    4c:ed:71:0e:6a:47:99:b4:e0:31:84:39:cc:86:4e:
                    d5:71:c4:28:25:9c:02:3a:f2:1c:33:4d:05:50:57:
                    c1:34:cd:2a:d7:e7:a5:69:88:74:1f:c3:44:fc:fa:
                    1d:eb:34:e2:81:09:3c:d3:f6:d4:3d:71:2d:0f:68:
                    45:2a:0f:8d:b4:f4:be:61:37:87:3e:b9:da:18:51:
                    29:2f:36:c7:c9:a5:22:a6:4d:68:68:19:a0:02:43:
                    81:0f:48:53:46:fd:0f:3a:ba:39:08:ca:2f:7a:97:
                    16:9a:d1:9b:18:02:4c:49:26:fb:0d:53:ee:c3:b0:
                    47:a2:4d:ac:2f:a7:99:4c:1c:a9:27:ab:62:2b:3b:
                    ca:32:89:38:88:50:6e:c4:e7:c4:de:e9:65:69:bb:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9F:B0:CE:1F:39:E1:03:E1:4C:9E:D9:38:D1:21:E2:70:E1:DF:49
            X509v3 Authority Key Identifier:
                keyid:B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/B703F8762B9302F126840F9CEAA892F3910476FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134342e302f32342d3234203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:f7:74:11:35:03:1d:2b:56:89:f3:cd:3c:f3:dc:ed:4d:15:
         64:b1:43:e7:d7:cf:38:60:f9:c2:0a:ef:85:e5:9d:ef:99:9a:
         0b:18:f5:22:7b:f7:94:7c:d2:db:f4:27:2d:97:0c:76:85:b5:
         31:43:79:5e:60:a8:52:0e:09:df:c4:d5:0c:4a:52:d7:f5:f2:
         ba:b9:e3:64:6b:60:80:fe:9d:de:09:81:ee:6f:47:e5:6a:98:
         14:19:8d:fd:de:a4:24:61:e3:0f:e4:7f:7f:56:84:14:c5:bc:
         a0:42:94:84:d0:71:2d:a9:8f:d8:11:d7:7e:24:2a:49:d5:d6:
         f8:5a:d7:3b:20:08:0e:64:c7:1c:91:5e:c2:93:74:90:a9:2b:
         ba:0b:c9:23:3d:af:21:f8:0d:37:f3:35:cd:8e:94:df:05:8b:
         c7:06:7b:e9:40:76:a3:f4:75:54:dd:ce:0e:be:47:e1:c4:e3:
         5f:bc:00:a8:b4:a2:fc:84:92:a5:48:70:97:03:55:3e:54:0c:
         25:07:35:03:77:21:79:ca:7d:cf:ef:8b:43:89:74:e0:4e:cb:
         9f:20:d8:fb:af:ba:55:0b:15:65:56:ef:11:a6:a8:8b:42:7f:
         0e:73:a7:8d:9d:b8:bc:25:3a:fa:e3:b0:38:f1:a9:90:15:06:
         cb:96:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org