Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa
File:                     3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa (raw, json)
Hash identifier:          e1PrRHc9DQ8P/R/Iry0gL5ZBjW1D17pcyts4fqFZRPA=
Subject key identifier:   AB:59:8E:1A:A2:0E:8F:5B:FD:94:45:EF:43:13:B1:18:75:D2:66:AD
Certificate issuer:       /CN=B703F8762B9302F126840F9CEAA892F3910476FA
Certificate serial:       33786E414FE18FBD4B3C824C877FD3F215C6411C
Authority key identifier: B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa
Signing time:             Mon 18 Mar 2024 14:03:29 +0000
ROA not before:           Mon 18 Mar 2024 13:58:29 +0000
ROA not after:            Mon 17 Mar 2025 14:03:29 +0000
asID:                     271090
IP address blocks:        179.48.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:78:6e:41:4f:e1:8f:bd:4b:3c:82:4c:87:7f:d3:f2:15:c6:41:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B703F8762B9302F126840F9CEAA892F3910476FA
        Validity
            Not Before: Mar 18 13:58:29 2024 GMT
            Not After : Mar 17 14:03:29 2025 GMT
        Subject: CN=AB598E1AA20E8F5BFD9445EF4313B11875D266AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b7:6a:e5:63:65:60:cd:53:62:2b:e1:a6:fc:
                    6e:f2:07:e1:b2:dd:3f:93:e0:fd:58:85:6a:95:f5:
                    ef:d3:df:17:e5:48:4b:3e:35:bc:de:66:ec:40:e8:
                    e6:71:cb:82:7b:ee:c1:23:4e:b7:82:c4:9f:7e:05:
                    ae:ca:e1:80:48:7c:73:45:be:0e:79:db:6b:86:13:
                    b6:23:ad:19:86:7f:37:ac:8e:45:ef:9d:1e:d2:4a:
                    3f:66:83:2e:da:20:a6:28:19:ef:34:b4:eb:37:9f:
                    fe:0a:11:d3:7e:6c:49:f6:7e:6f:f2:da:3a:d1:33:
                    e9:cb:82:3c:ab:5b:a1:4c:b3:e9:e3:01:a4:02:fd:
                    6a:b6:5e:39:37:f7:77:e2:66:75:47:6d:f4:32:f8:
                    36:7d:3e:79:a0:d2:c5:79:38:99:06:8e:63:1a:18:
                    48:c7:14:57:00:cd:f2:28:a7:ea:1f:83:93:9d:65:
                    4b:46:e9:2c:1c:57:67:97:0b:d0:e3:e0:ea:54:28:
                    69:8b:36:27:ce:89:9d:f6:85:86:56:39:b7:5a:90:
                    86:bc:4a:72:fe:d1:34:be:01:8e:38:ac:65:4a:82:
                    bc:b6:db:ba:cc:0b:ec:a1:7a:5b:50:4f:af:eb:2a:
                    aa:df:d9:45:77:4b:ad:9d:b1:91:7d:5f:7d:14:a5:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:59:8E:1A:A2:0E:8F:5B:FD:94:45:EF:43:13:B1:18:75:D2:66:AD
            X509v3 Authority Key Identifier:
                keyid:B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/B703F8762B9302F126840F9CEAA892F3910476FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134352e302f32342d3234203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:7a:34:4c:58:a1:c9:fb:9b:0b:64:a9:26:61:9b:b2:18:
         04:0e:37:5c:1f:dd:fd:9f:44:eb:a8:3b:95:62:06:2f:1c:3f:
         6d:b8:26:a0:a4:43:4a:05:f4:83:ef:74:a1:71:0f:48:44:83:
         cf:28:66:bd:bc:2e:fe:2e:9f:42:3e:76:a4:d3:47:05:8c:23:
         c4:c4:7b:73:9b:f5:a0:57:62:fe:c0:b5:53:b9:79:dc:09:aa:
         6c:69:dc:60:12:fb:dd:58:8d:b2:b0:25:e9:62:80:70:56:b0:
         82:61:f5:80:9f:43:a0:b6:22:8d:fa:18:cf:ee:4b:b9:97:f3:
         00:4d:36:57:3e:53:1f:68:a6:d1:3e:0c:14:d8:07:39:c4:b1:
         28:ea:86:73:59:68:b1:b0:65:be:9b:79:6c:7c:d1:88:2e:51:
         87:69:78:b9:bf:e1:e9:85:77:8b:b6:61:79:6b:93:d0:cf:5a:
         ba:6f:3b:f9:e1:84:28:b4:49:19:dc:2a:72:12:cb:de:26:f0:
         65:08:19:0e:83:7d:9b:06:d1:bb:ac:2e:a4:32:01:3a:30:a6:
         27:9e:3e:9d:ec:c1:c9:95:b7:19:3e:c6:97:d6:ac:22:e4:50:
         73:2f:30:d2:ab:57:63:f3:9e:de:91:e1:5a:40:4a:20:d4:d2:
         9a:04:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org