Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/3137372e32332e34392e302f32342d3234203d3e20323730383638.roa
File:                     3137372e32332e34392e302f32342d3234203d3e20323730383638.roa (raw, json)
Hash identifier:          Ynrwj39sVLSNz3beEEUi1DVlpuOyWzBNeHcbiWrWmbU=
Subject key identifier:   EB:AA:06:0E:7C:7E:3F:F1:71:16:27:1F:9E:CE:46:B7:5C:32:B7:DA
Certificate issuer:       /CN=135AE876E6C6DE65386EB266C9EEC0A2E23574DE
Certificate serial:       58E5E21B64A9DFED280349C0A4291DC6C57ACA
Authority key identifier: 13:5A:E8:76:E6:C6:DE:65:38:6E:B2:66:C9:EE:C0:A2:E2:35:74:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/3137372e32332e34392e302f32342d3234203d3e20323730383638.roa
Signing time:             Wed 12 Jul 2023 01:32:47 +0000
ROA not before:           Wed 12 Jul 2023 01:27:47 +0000
ROA not after:            Wed 10 Jul 2024 01:32:47 +0000
asID:                     270868
IP address blocks:        177.23.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e5:e2:1b:64:a9:df:ed:28:03:49:c0:a4:29:1d:c6:c5:7a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135AE876E6C6DE65386EB266C9EEC0A2E23574DE
        Validity
            Not Before: Jul 12 01:27:47 2023 GMT
            Not After : Jul 10 01:32:47 2024 GMT
        Subject: CN=EBAA060E7C7E3FF17116271F9ECE46B75C32B7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:06:39:10:af:d7:d9:46:e9:2d:ad:fb:5f:43:
                    a4:0e:d7:4a:bc:77:07:d0:8f:0d:f2:3d:d0:28:9e:
                    1b:08:c0:49:66:14:06:8d:36:0f:6a:8e:97:ec:12:
                    51:d7:d6:c2:6f:93:bf:f0:8e:d6:e1:bc:05:62:ac:
                    40:ad:90:37:54:fa:55:52:95:57:00:b3:d1:70:71:
                    90:3f:47:f9:b3:b7:36:ef:2f:a4:5f:14:9e:55:19:
                    5a:72:1d:63:3a:9c:9c:c3:9a:a3:d8:bc:91:a2:d9:
                    69:6a:d7:c3:e4:64:3c:3a:50:a2:8c:ea:51:47:59:
                    67:39:8b:db:ff:d2:38:01:83:66:2e:72:86:6a:f0:
                    71:54:bf:4e:83:12:f4:c1:1d:07:c1:64:ae:d3:87:
                    ca:ce:6d:fb:25:c9:f0:fc:7e:3b:72:e8:21:a7:9a:
                    f2:29:7e:95:3c:d5:8b:ce:d6:e3:44:01:a5:bd:00:
                    23:85:4a:bf:17:62:f5:a0:16:dc:79:be:09:33:77:
                    df:03:c1:63:69:b9:44:39:0d:6d:f8:96:49:ac:bf:
                    bd:0c:b0:a1:c6:ee:e0:53:0b:b1:60:38:49:fe:5f:
                    74:18:c4:92:a8:85:0e:c4:6e:0e:99:3d:1e:cf:42:
                    bf:19:a8:bf:bd:bf:98:e9:a8:24:79:6b:11:90:c2:
                    ce:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AA:06:0E:7C:7E:3F:F1:71:16:27:1F:9E:CE:46:B7:5C:32:B7:DA
            X509v3 Authority Key Identifier:
                keyid:13:5A:E8:76:E6:C6:DE:65:38:6E:B2:66:C9:EE:C0:A2:E2:35:74:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/135AE876E6C6DE65386EB266C9EEC0A2E23574DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/0/3137372e32332e34392e302f32342d3234203d3e20323730383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ba:1f:8c:82:c2:43:59:a0:0e:e4:87:b8:2b:8a:ac:6c:16:
         e7:f1:aa:94:73:4d:40:ee:bb:46:49:5e:f1:8e:9f:d4:45:4b:
         2b:3b:b3:f3:28:0e:a3:7e:67:00:e2:cd:00:d8:96:45:f6:05:
         02:fe:37:dd:73:78:07:a2:cb:1d:eb:dc:10:6d:c7:9a:72:49:
         56:0e:1f:8b:f0:5a:5f:41:cb:cd:ac:70:aa:eb:77:74:39:c5:
         7e:e8:62:28:95:20:50:a5:11:c8:1a:35:08:e2:a7:9e:b8:f4:
         e5:ed:bd:82:f8:dc:19:0a:f0:72:50:56:0a:f4:c4:cc:79:c5:
         b2:58:34:98:ee:af:66:de:1a:f7:02:15:0c:d3:6a:a0:eb:99:
         9d:52:42:67:ae:09:a0:fd:6f:48:0e:c6:0d:19:0f:ee:78:0c:
         7b:1c:86:de:2c:13:c0:4b:79:1e:f9:c9:87:ff:d7:7b:9c:ea:
         46:cc:95:75:b1:8f:a7:82:74:ef:c1:c6:d0:05:73:5f:b9:46:
         75:38:9e:dd:59:43:b4:78:6c:8b:c4:2c:e6:cc:1a:31:ee:8b:
         0e:19:1a:e9:5e:4f:f9:32:f4:db:4b:76:c1:d8:a0:3a:c3:ef:
         c2:0b:b7:40:7f:71:f1:14:47:eb:9c:4f:78:e6:ea:ff:5a:2b:
         91:b6:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org