Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/3137372e35332e3136302e302f32322d3234203d3e20323730323437.roa
File:                     3137372e35332e3136302e302f32322d3234203d3e20323730323437.roa (raw, json)
Hash identifier:          Mupp7m3havJHJTnRSyg73p4YKxJYKQZ2Snd1tU2pVw4=
Subject key identifier:   1C:D1:D2:1E:21:CF:21:C0:BA:EE:B8:05:11:BF:1D:CA:DA:2C:FC:D2
Certificate issuer:       /CN=7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B
Certificate serial:       401EFEC79F2EF21C52B572E91715A6A4D5ADFA11
Authority key identifier: 7D:38:7A:C5:7C:AC:3C:5F:07:D3:05:3B:96:4D:FB:BB:AD:73:BF:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/3137372e35332e3136302e302f32322d3234203d3e20323730323437.roa
Signing time:             Wed 10 Apr 2024 13:19:33 +0000
ROA not before:           Wed 10 Apr 2024 13:14:33 +0000
ROA not after:            Wed 09 Apr 2025 13:19:33 +0000
asID:                     270247
IP address blocks:        177.53.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1e:fe:c7:9f:2e:f2:1c:52:b5:72:e9:17:15:a6:a4:d5:ad:fa:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B
        Validity
            Not Before: Apr 10 13:14:33 2024 GMT
            Not After : Apr  9 13:19:33 2025 GMT
        Subject: CN=1CD1D21E21CF21C0BAEEB80511BF1DCADA2CFCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:bb:79:22:ae:dd:bc:81:02:be:b8:f8:ff:
                    41:8b:6a:bf:13:56:85:17:77:95:38:03:0f:11:b5:
                    f7:df:02:a6:4b:7a:94:68:a0:19:ce:1c:fc:0e:88:
                    22:7b:67:13:8b:72:72:73:5f:8d:43:4b:44:dd:48:
                    c8:15:60:c2:94:b7:ba:fd:32:f9:f8:6c:3e:af:59:
                    8b:89:fb:0b:f3:db:bf:c1:ba:e0:a8:1d:30:88:37:
                    50:19:3f:71:14:bf:cc:3f:5c:1c:03:7e:78:ec:11:
                    5a:1d:39:5b:22:b3:30:1c:8e:87:c4:21:a1:f5:fb:
                    fd:28:c8:ba:18:52:20:e3:85:a9:43:08:7d:fc:9e:
                    b0:e2:45:57:46:0f:2e:8b:28:c2:98:c9:07:b1:02:
                    4f:c0:de:96:77:00:55:6d:bc:4e:46:0b:e4:31:f6:
                    3b:4e:a6:f5:76:1f:af:09:a3:e9:d0:5c:a7:0f:cc:
                    33:d6:b5:83:0c:ce:5b:5d:89:4a:27:7f:f5:93:da:
                    a0:db:c8:71:7a:64:12:81:9a:47:7c:8f:60:af:07:
                    f4:a1:94:b6:28:ba:4e:7c:1e:bc:7f:28:f4:29:59:
                    5a:05:9c:41:ce:78:55:cb:dd:82:26:1f:25:9e:63:
                    0f:3a:c0:0b:11:f4:99:10:29:56:d4:fa:02:1d:71:
                    bb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D1:D2:1E:21:CF:21:C0:BA:EE:B8:05:11:BF:1D:CA:DA:2C:FC:D2
            X509v3 Authority Key Identifier:
                keyid:7D:38:7A:C5:7C:AC:3C:5F:07:D3:05:3B:96:4D:FB:BB:AD:73:BF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D387AC57CAC3C5F07D3053B964DFBBBAD73BF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/1/3137372e35332e3136302e302f32322d3234203d3e20323730323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:7d:76:6c:d9:44:ff:00:50:7a:5a:76:78:35:5d:eb:84:af:
         9d:41:e7:55:6d:02:38:46:63:af:c7:35:97:69:0a:e3:22:26:
         b0:34:83:6b:dd:bf:d0:29:3e:e3:77:3e:36:eb:ad:2f:78:b0:
         5c:ff:6e:ff:2e:b0:ac:46:2c:a7:cb:cd:07:e9:b3:0a:36:b6:
         ef:8c:82:bb:11:8d:82:fd:c1:d6:25:06:23:a9:5f:c5:6d:31:
         8f:10:95:52:a4:94:68:22:80:08:b1:3b:22:42:69:52:fb:ca:
         55:60:e5:be:a1:33:76:12:72:3a:c9:0c:12:58:33:4f:9f:2f:
         f9:9e:ec:47:8e:8d:05:9a:e9:55:c2:dc:d5:3c:f1:87:83:b3:
         0c:c4:11:c9:91:65:9a:af:91:f4:e5:25:d2:7d:e6:81:57:97:
         a5:29:a7:f0:b4:38:71:89:7c:54:e7:b1:5b:aa:8b:32:b5:e6:
         c8:89:0c:05:17:d9:a7:f8:2b:8f:d3:e3:26:f3:ac:8e:fb:1e:
         04:ca:7b:9b:11:fc:17:59:0c:bb:03:74:94:15:f2:f8:61:a6:
         a1:ea:68:5c:b2:39:12:90:04:a3:10:67:9b:53:a1:5f:7f:a3:
         1d:59:cf:89:eb:8d:2d:e5:78:a6:fb:f5:bf:c4:c3:30:d4:43:
         72:a4:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 13:46:32 2024 by rpki-client on console-fra.rpki-client.org