Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32322d3234203d3e20323632343931.roa
File:                     3137372e36362e39362e302f32322d3234203d3e20323632343931.roa (raw, json)
Hash identifier:          OXO7r0q0oLnAuZgwCgzmq1qZkP3SVXA2ekY3wnF2/x8=
Subject key identifier:   75:47:F3:AE:43:4C:9C:7C:6C:56:F4:77:23:FB:21:87:6F:BE:09:8A
Certificate issuer:       /CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
Certificate serial:       7D855EEF47424985749F5C2D584486451F00F80B
Authority key identifier: DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32322d3234203d3e20323632343931.roa
Signing time:             Sat 30 Mar 2024 14:14:17 +0000
ROA not before:           Sat 30 Mar 2024 14:09:17 +0000
ROA not after:            Sat 29 Mar 2025 14:14:17 +0000
asID:                     262491
IP address blocks:        177.66.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:85:5e:ef:47:42:49:85:74:9f:5c:2d:58:44:86:45:1f:00:f8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
        Validity
            Not Before: Mar 30 14:09:17 2024 GMT
            Not After : Mar 29 14:14:17 2025 GMT
        Subject: CN=7547F3AE434C9C7C6C56F47723FB21876FBE098A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:2b:13:bb:31:c4:b5:7f:d0:48:6d:8a:2b:
                    51:50:69:7b:8e:ad:c4:cd:58:b7:1b:90:69:32:91:
                    82:52:82:73:ba:93:e2:30:a9:cd:cc:3c:28:f6:87:
                    5a:ac:bc:6d:c1:0e:5d:af:0a:6c:f0:f9:58:88:3b:
                    17:27:64:f9:15:ea:0e:dd:3d:49:ba:0b:5d:fe:94:
                    90:d5:19:cf:9b:32:3e:24:be:eb:49:4c:98:7c:45:
                    e1:65:8b:90:7f:24:a6:0c:0d:1d:75:b5:f4:69:cd:
                    89:09:ca:57:3a:ae:59:bc:62:cb:97:1f:f8:a6:66:
                    b8:73:3a:6b:6e:27:9a:d2:5e:6b:65:4e:57:fb:98:
                    73:c9:7b:bb:ea:16:19:28:69:14:6e:b3:6b:ce:cc:
                    40:db:cb:dc:85:e5:ae:a9:41:d7:b0:e9:7a:04:22:
                    7e:e3:12:7b:3f:f0:4c:a7:a2:5c:6b:f9:26:f0:b1:
                    d9:aa:0e:97:b7:dc:92:ed:03:54:b0:59:2a:76:20:
                    c9:a2:56:13:e9:12:a9:03:27:e1:8e:dc:23:a0:c8:
                    c7:86:b4:9e:e9:f5:1d:75:f1:62:b9:a4:dd:21:ce:
                    7e:a9:38:5a:3f:50:ae:38:56:f1:e2:2f:22:af:59:
                    a8:11:9d:d7:07:10:b8:1d:93:16:2c:e6:3c:15:71:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:F3:AE:43:4C:9C:7C:6C:56:F4:77:23:FB:21:87:6F:BE:09:8A
            X509v3 Authority Key Identifier:
                keyid:DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39362e302f32322d3234203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:0a:35:7e:7a:2b:b2:0b:de:05:46:01:ac:64:af:1a:79:e4:
         28:69:31:26:e4:2b:36:6b:5e:3b:3f:6a:9d:e5:39:8a:04:a1:
         ac:6b:e6:13:b1:c4:61:22:c2:46:6e:0b:66:57:2e:2a:a7:c4:
         26:9a:db:8a:f7:92:da:8a:79:fe:80:80:88:34:95:3a:42:db:
         fa:56:24:e5:f5:84:a0:98:9d:7b:08:1b:0a:a3:58:9a:26:a4:
         9e:42:f6:2b:39:4d:e7:85:dc:33:d6:07:7c:6d:79:d1:41:68:
         f3:6c:11:06:c5:71:89:67:6c:20:ce:27:cb:bf:67:91:cf:f5:
         bc:ae:27:8d:26:e7:21:83:d4:0a:af:c6:2e:9c:c1:c7:86:e6:
         34:d2:5f:1a:ec:6b:ad:86:19:14:f3:79:e6:60:35:62:7b:d2:
         e2:d8:8f:87:d9:dd:45:99:c8:a4:2a:55:a8:9a:83:04:57:6d:
         77:9a:63:ff:f7:83:9c:b2:11:bc:17:c9:33:50:eb:d9:62:2b:
         73:5f:63:37:3d:3f:b8:44:43:2b:fb:5c:4a:9f:e8:d5:3c:16:
         61:14:ab:43:6b:6d:29:fe:de:80:a9:f7:ce:ab:a1:23:62:80:
         97:f2:d5:94:1d:0e:69:86:f3:aa:b5:d3:48:40:48:63:0e:15:
         ee:16:50:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org