Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32322d3234203d3e203532353237.roa
File:                     3137372e3135322e38302e302f32322d3234203d3e203532353237.roa (raw, json)
Hash identifier:          bM9Eo5ZtErVPd1tSJeQs5OCexTISP0sRk/h0DlmYJM4=
Subject key identifier:   04:90:D8:35:2A:79:6E:5E:43:A6:69:EE:F8:61:48:74:E4:D9:A7:B6
Certificate issuer:       /CN=406BABB94F8FBE2BD2704292973E70C7A42A2A6C
Certificate serial:       796D101650E4B473086FAB29176D8C7439513AEC
Authority key identifier: 40:6B:AB:B9:4F:8F:BE:2B:D2:70:42:92:97:3E:70:C7:A4:2A:2A:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/406BABB94F8FBE2BD2704292973E70C7A42A2A6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32322d3234203d3e203532353237.roa
Signing time:             Fri 07 Jul 2023 18:06:00 +0000
ROA not before:           Fri 07 Jul 2023 18:01:00 +0000
ROA not after:            Fri 05 Jul 2024 18:06:00 +0000
asID:                     52527
IP address blocks:        177.152.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6d:10:16:50:e4:b4:73:08:6f:ab:29:17:6d:8c:74:39:51:3a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406BABB94F8FBE2BD2704292973E70C7A42A2A6C
        Validity
            Not Before: Jul  7 18:01:00 2023 GMT
            Not After : Jul  5 18:06:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:c0:68:80:52:fc:a5:a7:99:b5:00:e2:d5:
                    37:66:e5:be:1c:c2:b0:1c:64:07:12:4f:cf:19:f4:
                    1a:5d:fe:3a:c7:10:ec:01:22:d1:fe:a5:ce:c4:c0:
                    57:17:09:9f:13:9d:19:51:80:18:20:4e:7b:95:65:
                    f9:93:41:c6:6a:6d:c8:ae:f1:3d:af:d4:70:97:19:
                    28:ef:b2:e5:d4:26:56:40:e5:04:9b:71:06:9e:e0:
                    09:72:7a:cf:82:04:c6:2d:aa:94:f8:d8:42:16:a3:
                    3b:2a:c5:ea:b3:15:01:9e:83:f4:08:85:1f:1a:fa:
                    09:69:69:bc:96:59:85:c1:14:c1:d5:7b:54:7e:be:
                    4c:9c:de:d8:8d:84:2e:1c:dd:77:e8:04:d6:b7:b6:
                    39:99:d9:83:54:02:cd:14:6b:ad:ff:45:c9:41:54:
                    23:e6:a6:1d:e8:ad:b0:98:56:bf:b0:ba:60:b8:31:
                    d9:b1:b1:94:0d:a5:f0:29:3c:7e:b3:c3:36:3b:08:
                    d9:72:c9:14:26:05:7b:e5:41:1e:5e:71:9f:22:6e:
                    0d:1c:cd:d3:39:b4:0a:9c:f9:e6:5d:b6:b7:d5:eb:
                    e7:77:a1:1c:24:95:3a:07:46:a9:6f:0e:b2:54:ca:
                    f8:d9:4d:3f:0b:e0:d8:b0:08:93:8d:e2:4b:bb:42:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:90:D8:35:2A:79:6E:5E:43:A6:69:EE:F8:61:48:74:E4:D9:A7:B6
            X509v3 Authority Key Identifier:
                keyid:40:6B:AB:B9:4F:8F:BE:2B:D2:70:42:92:97:3E:70:C7:A4:2A:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/406BABB94F8FBE2BD2704292973E70C7A42A2A6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/406BABB94F8FBE2BD2704292973E70C7A42A2A6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38302e302f32322d3234203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:9e:a9:f7:8a:ba:2b:e7:b1:82:27:48:da:cc:86:8f:3c:2b:
         24:85:36:de:11:49:01:5b:ff:0a:b3:c7:08:ec:a5:e5:a4:c0:
         ed:a0:69:51:ea:f8:ea:91:4d:f5:33:8d:8a:0d:6e:f7:27:ba:
         12:84:37:5c:98:67:6a:58:b6:b7:ac:23:42:cd:26:3c:b9:77:
         99:f7:5d:69:f2:5b:46:80:d1:fa:75:87:a5:f4:49:c7:8b:51:
         14:cf:84:33:e6:0e:78:b0:ba:e6:8c:78:e0:28:05:98:52:03:
         85:01:34:4f:f7:f4:9e:56:c2:46:b1:a5:3f:f2:29:fd:92:47:
         35:b9:c3:31:b1:21:8a:0e:f5:e4:fb:93:80:ae:fc:6b:5e:6f:
         eb:1a:9f:1c:2a:f2:ca:9b:38:58:56:bf:20:83:59:5a:98:ef:
         56:e6:f3:91:7f:27:98:0f:a6:6e:ab:26:23:14:8b:5d:56:85:
         53:ef:5d:81:8f:b5:70:51:40:a7:98:2a:5a:68:fe:3d:05:94:
         36:04:85:6f:c3:ab:75:12:b5:7b:3c:cc:79:1e:2f:9b:28:92:
         68:a1:70:27:50:a5:28:f5:b0:8e:63:0a:5d:54:a5:7c:0a:6d:
         dd:62:79:c6:55:71:6c:84:20:98:a4:f9:94:95:b8:01:59:97:
         0e:d1:b2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org