Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/3137372e34342e3134342e302f32302d3234203d3e20323632343238.roa
File:                     3137372e34342e3134342e302f32302d3234203d3e20323632343238.roa (raw, json)
Hash identifier:          tPERkLfieC9YQ2vl4bJz5c4qX+aevcZ+R926MaYr/Tw=
Subject key identifier:   76:D2:1A:8D:58:5F:09:AD:F4:F5:A3:8F:D2:C0:2B:54:61:6B:86:D4
Certificate issuer:       /CN=2FF2F84183D096398A51FA6F044F57FCC8A45BB7
Certificate serial:       79136CD4BB4D5BBC829C444F3CE1DFC97B93BBFA
Authority key identifier: 2F:F2:F8:41:83:D0:96:39:8A:51:FA:6F:04:4F:57:FC:C8:A4:5B:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/3137372e34342e3134342e302f32302d3234203d3e20323632343238.roa
Signing time:             Mon 10 Jul 2023 20:00:28 +0000
ROA not before:           Mon 10 Jul 2023 19:55:28 +0000
ROA not after:            Mon 08 Jul 2024 20:00:28 +0000
asID:                     262428
IP address blocks:        177.44.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:13:6c:d4:bb:4d:5b:bc:82:9c:44:4f:3c:e1:df:c9:7b:93:bb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF2F84183D096398A51FA6F044F57FCC8A45BB7
        Validity
            Not Before: Jul 10 19:55:28 2023 GMT
            Not After : Jul  8 20:00:28 2024 GMT
        Subject: CN=76D21A8D585F09ADF4F5A38FD2C02B54616B86D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:53:c3:fd:a7:bc:48:de:72:29:58:f2:e8:14:
                    27:ba:0a:be:78:c6:2e:bd:ce:74:63:2b:89:4e:05:
                    df:7d:f4:cd:aa:25:96:d4:3b:8a:78:37:7d:48:76:
                    6e:14:16:49:03:35:96:01:18:f5:bb:23:76:4e:4d:
                    c0:f8:ae:9b:c9:f5:69:54:72:f2:6c:04:3a:18:2d:
                    42:c0:de:46:51:8f:e8:9a:da:ba:bc:07:53:df:11:
                    21:45:1f:5e:53:15:01:4b:7a:64:77:0e:fa:42:86:
                    cd:71:29:4a:70:9c:4c:52:be:00:ea:44:3e:9d:5c:
                    40:66:97:eb:c1:3c:90:32:3b:16:c2:cc:07:64:dc:
                    39:2e:bf:72:41:00:96:26:ca:42:bb:9a:eb:5c:f9:
                    bb:d2:4c:80:6c:5a:f3:9e:20:09:23:fa:1c:69:f0:
                    8f:d4:cf:f1:9b:9d:23:2b:37:5b:f2:c9:f4:8c:44:
                    98:c1:2f:e4:1d:3f:6c:28:16:e3:5e:fe:58:95:ec:
                    36:2d:68:0f:3a:0a:f0:fa:4c:3b:31:51:35:4a:a2:
                    0c:77:9f:20:30:c3:c9:27:7d:25:fe:e1:cc:76:77:
                    83:0c:f6:3a:28:3c:91:6c:e9:af:a7:aa:23:ed:be:
                    b4:9a:78:1c:37:cd:1d:37:fd:40:57:ec:9d:a4:be:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D2:1A:8D:58:5F:09:AD:F4:F5:A3:8F:D2:C0:2B:54:61:6B:86:D4
            X509v3 Authority Key Identifier:
                keyid:2F:F2:F8:41:83:D0:96:39:8A:51:FA:6F:04:4F:57:FC:C8:A4:5B:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/3137372e34342e3134342e302f32302d3234203d3e20323632343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:7f:2f:51:53:12:be:82:6a:63:c5:c7:8a:2f:0c:b8:14:
         ae:96:72:1f:fc:09:b0:48:e4:89:66:6d:66:89:74:4c:f2:ba:
         65:27:54:a3:f4:1d:42:56:14:6e:40:ef:39:e8:7a:66:96:11:
         4c:8b:01:56:f4:a6:c0:f3:59:19:5d:e3:67:4b:25:41:66:15:
         c3:3b:2e:cb:79:79:92:c4:d7:d1:a7:c3:55:fb:fd:ba:6a:82:
         da:35:15:16:6d:ec:d1:d0:d3:74:2b:31:05:42:20:ae:5f:f8:
         6e:20:ae:0f:34:38:08:2d:94:9b:b3:7a:b3:d1:6b:ba:18:c2:
         f2:ff:0d:ee:35:8c:cc:0d:0e:81:83:3f:fb:5c:85:0c:b1:99:
         57:6b:1c:61:c1:0e:cb:a2:43:cd:f1:e2:e6:8c:a3:91:d5:61:
         a9:56:f9:24:c7:71:24:8d:7b:f8:59:cc:a9:e5:14:08:98:99:
         be:bd:a0:50:1d:c6:2e:ce:5f:09:b8:b7:ca:db:1e:81:d6:af:
         8c:65:d5:0c:20:7e:f8:dd:2c:1d:3d:26:98:f3:4e:0f:09:e7:
         fd:3b:e8:12:54:91:cd:5d:37:b6:7d:af:f2:9b:e3:e2:ec:44:
         38:25:9c:aa:8b:b4:74:51:ca:bf:3c:07:d7:66:9d:37:ee:a8:
         fe:d1:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org