Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa
File:                     3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa (raw, json)
Hash identifier:          GAajSn4LuxACdOm1tHkNTJ9/TNMNP6bkNvZqWgsutUg=
Subject key identifier:   58:F7:FA:35:B7:8E:D4:A5:24:2E:59:12:62:66:53:3E:CA:41:DA:C5
Certificate issuer:       /CN=B703F8762B9302F126840F9CEAA892F3910476FA
Certificate serial:       52917E99DBF0CD951702286FF60C57C693A937E1
Authority key identifier: B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa
Signing time:             Mon 18 Mar 2024 14:03:30 +0000
ROA not before:           Mon 18 Mar 2024 13:58:30 +0000
ROA not after:            Mon 17 Mar 2025 14:03:30 +0000
asID:                     271090
IP address blocks:        179.48.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:91:7e:99:db:f0:cd:95:17:02:28:6f:f6:0c:57:c6:93:a9:37:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B703F8762B9302F126840F9CEAA892F3910476FA
        Validity
            Not Before: Mar 18 13:58:30 2024 GMT
            Not After : Mar 17 14:03:30 2025 GMT
        Subject: CN=58F7FA35B78ED4A5242E59126266533ECA41DAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:03:9a:80:7d:f7:cc:8d:4f:37:a3:c0:68:
                    19:60:ef:95:e4:a2:27:ad:72:b5:04:bc:b1:b3:cd:
                    94:ad:5b:17:f1:77:a7:88:51:21:d3:61:67:56:7a:
                    bb:e7:72:c8:96:a6:6f:bf:6d:d7:b5:03:33:f4:55:
                    85:8c:e2:65:4c:8c:55:17:b2:08:f7:e1:44:b9:b8:
                    1c:4e:36:bb:22:da:f1:88:53:eb:bc:82:98:ce:fe:
                    42:09:ce:78:56:d7:c2:64:73:0f:56:94:a3:c6:ad:
                    50:05:51:db:6b:2b:0c:18:73:55:1b:b1:50:02:9e:
                    97:78:a8:4d:e1:8b:79:84:10:ff:5d:be:71:70:21:
                    80:cc:fc:ce:8e:c7:b7:f7:02:99:d8:15:31:cf:6d:
                    72:80:30:be:e2:d3:d4:96:ac:1e:5a:6c:27:11:f3:
                    ea:6c:d0:cd:17:f4:74:c9:77:70:15:71:68:0f:cf:
                    b3:29:07:2d:c4:db:49:22:80:73:1a:89:18:3c:9b:
                    80:6b:bd:d5:81:14:42:d6:50:93:73:f3:b7:0e:d0:
                    86:fa:c0:6b:d5:66:12:da:29:93:b8:98:49:01:cb:
                    18:a3:84:8a:fb:13:83:41:ba:1d:8b:92:d1:90:81:
                    fd:9e:22:0d:a3:db:1c:84:5d:8e:1b:0e:3e:37:5d:
                    0e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F7:FA:35:B7:8E:D4:A5:24:2E:59:12:62:66:53:3E:CA:41:DA:C5
            X509v3 Authority Key Identifier:
                keyid:B7:03:F8:76:2B:93:02:F1:26:84:0F:9C:EA:A8:92:F3:91:04:76:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/B703F8762B9302F126840F9CEAA892F3910476FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B703F8762B9302F126840F9CEAA892F3910476FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/0/3137392e34382e3134372e302f32342d3234203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:24:3e:04:a5:f1:32:54:ff:92:d5:3c:c2:e5:6e:4c:e7:74:
         d3:e9:e0:40:ba:52:90:b2:1e:ca:53:f3:4b:84:9f:c8:5c:c5:
         09:6d:db:71:22:b5:85:4d:cb:47:5a:a3:ba:0f:f4:f8:bb:fd:
         c6:45:21:38:d9:b7:65:c0:f6:f4:28:ca:dc:9f:ca:f7:76:4d:
         9d:ba:2d:9d:e9:98:6a:33:8d:31:a5:7f:f2:7c:23:08:9c:84:
         ea:02:8b:a1:9d:39:c5:c9:87:ce:59:95:23:84:45:9f:26:c5:
         82:21:30:02:a2:b4:eb:8f:3d:cd:08:81:eb:8b:05:4d:ec:e6:
         8b:70:04:b8:49:42:79:29:1a:f9:fb:cc:b8:68:de:09:11:dc:
         29:79:ec:e6:fc:78:1f:da:bb:a6:4b:ef:41:c7:de:12:d1:01:
         94:d9:f4:fc:d1:a0:86:c6:c6:60:1f:0f:19:3a:7f:b7:b9:4f:
         8c:b3:7e:81:a3:59:98:be:48:53:31:45:41:45:a2:42:a0:4a:
         81:dc:1c:82:b1:59:ed:83:6c:06:e7:0d:ac:05:42:4b:83:1e:
         24:b7:be:4a:35:64:2e:0d:c2:d8:39:ca:0b:e5:f0:c6:4f:d0:
         93:34:18:da:fd:0e:75:a6:23:34:ca:b0:be:a9:dc:c6:22:4b:
         14:14:9c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org