Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa
File:                     3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa (raw, json)
Hash identifier:          rAFuGESiI7V5IULvAY1yoWjUVK6P3mjSF7q/IHF9ORo=
Subject key identifier:   37:B0:AB:97:1D:94:2E:53:3C:22:1A:FD:FF:25:2A:D4:8A:48:B1:36
Certificate issuer:       /CN=728041EE59CE20A182864537B9A0E2502263D7BD
Certificate serial:       398C57867593E89222D0C96EF4BCFF75C18F7F87
Authority key identifier: 72:80:41:EE:59:CE:20:A1:82:86:45:37:B9:A0:E2:50:22:63:D7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/728041EE59CE20A182864537B9A0E2502263D7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa
Signing time:             Fri 05 Apr 2024 02:28:13 +0000
ROA not before:           Fri 05 Apr 2024 02:23:13 +0000
ROA not after:            Fri 04 Apr 2025 02:28:13 +0000
asID:                     270567
IP address blocks:        201.216.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8c:57:86:75:93:e8:92:22:d0:c9:6e:f4:bc:ff:75:c1:8f:7f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728041EE59CE20A182864537B9A0E2502263D7BD
        Validity
            Not Before: Apr  5 02:23:13 2024 GMT
            Not After : Apr  4 02:28:13 2025 GMT
        Subject: CN=37B0AB971D942E533C221AFDFF252AD48A48B136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:f6:15:67:9b:d3:d2:94:30:75:a7:87:b5:
                    79:4d:d9:09:95:eb:56:1e:76:1f:89:a8:ab:0b:5f:
                    11:62:d5:4a:ed:57:f6:1c:84:18:32:d7:63:25:18:
                    fb:36:11:7b:78:a5:21:67:f2:23:8d:17:c8:f1:01:
                    e2:a5:c4:99:3e:41:c9:fa:4f:75:af:72:69:00:9b:
                    7f:99:de:5e:1d:9c:4f:ba:f3:8d:45:7a:f8:03:f1:
                    d5:96:44:d2:08:1c:7b:08:f4:c5:9f:1b:3b:40:b7:
                    f1:73:e6:f3:cc:6a:f0:e1:59:59:a7:e5:6e:64:b6:
                    11:69:b5:30:b1:23:46:08:7d:3e:06:38:c4:96:2f:
                    ff:db:96:19:09:f3:fe:38:06:8b:39:e3:c0:b8:30:
                    75:93:8c:5a:01:7a:92:22:c3:14:5d:15:bb:ba:16:
                    ec:81:71:0f:d7:23:2a:eb:d0:5c:2c:8c:48:27:df:
                    82:e5:a3:92:d0:97:81:26:e0:2c:46:08:d4:a9:9a:
                    26:ed:f9:4f:2d:09:b5:07:c9:68:d3:3a:a6:38:50:
                    ac:07:4f:ee:47:72:d6:83:aa:ba:18:05:5e:44:b3:
                    87:76:37:07:3a:97:40:0c:43:06:76:0b:32:c4:d4:
                    6f:ba:fe:2d:8a:e2:35:0e:2f:cd:89:d0:1c:99:e9:
                    74:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B0:AB:97:1D:94:2E:53:3C:22:1A:FD:FF:25:2A:D4:8A:48:B1:36
            X509v3 Authority Key Identifier:
                keyid:72:80:41:EE:59:CE:20:A1:82:86:45:37:B9:A0:E2:50:22:63:D7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/728041EE59CE20A182864537B9A0E2502263D7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/728041EE59CE20A182864537B9A0E2502263D7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d8:ed:28:ac:d0:bd:28:c7:f8:8e:75:5c:f9:d2:b6:80:44:ce:
         fe:cc:4b:a0:00:b9:40:9c:49:76:1b:a3:a3:7d:7a:f2:97:2e:
         c7:d3:20:e7:3a:18:0e:ba:2d:bd:d0:4e:be:8d:33:27:f6:7f:
         57:97:b8:25:fa:76:27:6a:70:fb:85:da:d1:0b:3c:c1:b0:b3:
         76:f4:ee:6e:e4:07:72:e9:c9:79:6f:96:9f:aa:01:1f:23:c6:
         43:6f:f0:55:05:92:26:82:20:91:cc:05:4f:1d:93:16:bd:4e:
         fd:29:1d:2c:4a:9b:77:6f:5b:9b:ae:a6:a1:7f:c5:e7:6d:cd:
         8c:01:fe:4b:8b:8b:ef:5e:92:79:32:a1:87:dd:f4:8e:98:4a:
         a3:b0:1c:91:d1:04:db:1e:ad:71:f8:da:46:08:81:b1:7d:9f:
         8b:01:4f:37:84:08:e1:e3:2f:5f:c1:15:2b:f2:d0:d0:b7:77:
         72:e9:00:68:a6:d0:de:05:a6:21:d8:86:4d:e7:99:ea:d9:55:
         62:ea:ae:b8:bc:b2:6b:62:d8:15:e6:83:d9:9d:cf:f5:62:d9:
         a6:79:ab:92:b8:ac:4f:22:7c:23:ad:f0:91:17:51:51:21:f1:
         6e:55:a1:b8:ca:72:56:c1:dc:d0:2c:dd:d2:23:fb:c6:33:57:
         78:34:33:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org