Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa
File:                     3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa (raw, json)
Hash identifier:          tDoSoaEQ7cY5bhTIatBg86K+3iIRFn9Xi/X02okDv7A=
Subject key identifier:   D8:F7:E8:E8:27:E0:F5:49:EC:75:7A:DD:F4:63:E1:7C:52:FE:6A:33
Certificate issuer:       /CN=C0722F0738AD50072E4BF03B0DE71DEE7CF27382
Certificate serial:       79195E56F3215A5BF6C9CD9BF3CCE4C291D2282B
Authority key identifier: C0:72:2F:07:38:AD:50:07:2E:4B:F0:3B:0D:E7:1D:EE:7C:F2:73:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0722F0738AD50072E4BF03B0DE71DEE7CF27382.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa
Signing time:             Tue 05 Sep 2023 15:12:33 +0000
ROA not before:           Tue 05 Sep 2023 15:07:33 +0000
ROA not after:            Tue 03 Sep 2024 15:12:33 +0000
asID:                     262368
IP address blocks:        177.128.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:19:5e:56:f3:21:5a:5b:f6:c9:cd:9b:f3:cc:e4:c2:91:d2:28:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0722F0738AD50072E4BF03B0DE71DEE7CF27382
        Validity
            Not Before: Sep  5 15:07:33 2023 GMT
            Not After : Sep  3 15:12:33 2024 GMT
        Subject: CN=D8F7E8E827E0F549EC757ADDF463E17C52FE6A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:de:ac:2f:01:b6:79:e9:2d:a0:b7:d9:99:
                    65:62:cc:8d:ba:92:d8:e4:f9:26:80:79:e5:6e:0a:
                    a2:67:1f:6b:69:4f:06:f5:b5:a4:10:25:57:ee:8d:
                    7c:41:34:4b:c6:28:f1:67:38:22:75:e6:84:0b:7c:
                    19:7f:0f:b7:a4:d5:a2:98:43:eb:c7:9b:f7:46:a5:
                    bd:f7:0c:bc:d8:85:fe:59:bd:81:e9:5f:02:ca:12:
                    1b:80:30:60:9e:b1:9a:16:e7:3e:dc:bc:58:75:d2:
                    d9:a8:ce:ea:b3:37:1a:3d:12:bf:a1:de:db:71:dc:
                    a8:9c:cc:6c:eb:27:56:2f:f0:0c:43:ae:e9:9e:ce:
                    52:e7:f1:a3:f0:c8:02:0a:39:95:a0:ec:bb:43:9a:
                    a2:7a:51:d8:67:b6:a4:5c:ea:ad:67:b3:84:26:05:
                    55:38:5f:c8:6d:f9:a3:1f:cb:01:4a:bb:d0:d5:f4:
                    8e:65:8b:77:59:5c:9a:0e:e1:78:34:1a:58:0d:2c:
                    4b:23:82:ec:64:74:cd:ca:ee:82:c2:c7:7e:bd:85:
                    be:79:74:e6:58:3f:be:bc:19:6d:1a:cd:0b:d8:99:
                    eb:32:cf:78:bd:48:d8:d0:c4:c0:c8:3b:21:ea:7c:
                    6c:3c:81:d3:05:fb:76:ac:cc:0e:2f:8d:15:c0:46:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F7:E8:E8:27:E0:F5:49:EC:75:7A:DD:F4:63:E1:7C:52:FE:6A:33
            X509v3 Authority Key Identifier:
                keyid:C0:72:2F:07:38:AD:50:07:2E:4B:F0:3B:0D:E7:1D:EE:7C:F2:73:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/C0722F0738AD50072E4BF03B0DE71DEE7CF27382.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C0722F0738AD50072E4BF03B0DE71DEE7CF27382.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:af:af:1c:8c:f7:d8:49:22:50:7a:dd:2b:1a:5b:eb:c1:a0:
         66:24:e1:34:70:47:57:d6:29:69:eb:4b:7c:b9:ab:37:67:21:
         8d:eb:54:79:b4:de:61:c7:f1:80:e8:92:c0:8c:bd:5a:a3:6e:
         90:b1:0f:98:11:df:77:24:22:54:2b:0a:5c:7a:13:dd:13:3a:
         01:13:63:52:79:10:ba:53:e6:22:38:84:5b:4a:06:08:56:be:
         36:e0:cf:b2:19:22:7f:4f:a2:84:16:f9:d5:a3:a2:e4:70:1f:
         36:75:a3:c2:08:0b:02:1f:74:7f:1e:db:42:e1:d2:57:d1:e0:
         8e:95:e7:fc:9f:46:fe:f7:f6:51:bf:bf:47:bb:0f:c6:60:c4:
         a8:de:cd:8b:5b:eb:2a:51:fe:74:1b:7a:2e:dd:66:bd:94:3a:
         18:ab:13:9f:48:b6:44:31:2b:0c:9e:21:7f:db:c3:d8:f7:35:
         14:7d:2f:f5:5b:f2:dc:c6:89:18:7c:b6:bd:91:5f:85:26:f8:
         46:76:ff:e2:21:2a:fd:19:b0:fe:b7:57:6f:ca:c7:a6:20:df:
         e8:c6:19:69:d4:fc:66:e7:cd:f5:1e:51:ab:c3:da:62:a7:de:
         79:66:35:38:5c:a3:86:14:d9:b8:0a:b2:ee:a1:65:3d:32:08:
         9b:84:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org