Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/3137372e31302e32342e302f32322d3234203d3e20323632383431.roa
File:                     3137372e31302e32342e302f32322d3234203d3e20323632383431.roa (raw, json)
Hash identifier:          R977jW8VFVmGzyHc+BA6TA2a6wD+7EJKSSKRMKBhPX4=
Subject key identifier:   FD:17:82:A0:5A:78:01:80:C8:42:56:38:57:1A:82:89:0F:FB:F5:2D
Certificate issuer:       /CN=7C6FDECE05E8F2BEA15333D9AF84310947309C98
Certificate serial:       433A3D3A98EC41D5BBAF9E5F9E0317B97A537DAD
Authority key identifier: 7C:6F:DE:CE:05:E8:F2:BE:A1:53:33:D9:AF:84:31:09:47:30:9C:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/3137372e31302e32342e302f32322d3234203d3e20323632383431.roa
Signing time:             Thu 02 Nov 2023 03:40:30 +0000
ROA not before:           Thu 02 Nov 2023 03:35:30 +0000
ROA not after:            Thu 31 Oct 2024 03:40:30 +0000
asID:                     262841
IP address blocks:        177.10.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3a:3d:3a:98:ec:41:d5:bb:af:9e:5f:9e:03:17:b9:7a:53:7d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C6FDECE05E8F2BEA15333D9AF84310947309C98
        Validity
            Not Before: Nov  2 03:35:30 2023 GMT
            Not After : Oct 31 03:40:30 2024 GMT
        Subject: CN=FD1782A05A780180C8425638571A82890FFBF52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:8a:7f:ea:a6:09:c7:9d:f9:d1:9e:98:a7:
                    5a:b4:73:5d:28:4b:14:ca:8e:e2:99:66:42:60:e1:
                    60:7e:78:e4:a6:a6:a6:fd:8a:2a:12:93:4e:56:f5:
                    85:50:33:97:81:84:48:ea:74:fa:62:bd:0c:1a:6c:
                    3c:fb:56:26:a3:4a:fe:9d:e1:f5:be:b4:92:ca:0c:
                    5f:fe:13:16:20:a9:0c:fe:ec:e7:48:fe:db:cc:05:
                    fb:ed:1c:59:58:bb:6d:75:8d:71:62:d1:67:fe:ec:
                    78:f5:2f:86:f9:6d:f7:0d:8b:80:33:fc:dc:76:ad:
                    f8:f7:67:2b:3d:ab:1f:4c:79:a9:50:b1:71:25:60:
                    41:a5:9d:87:4e:46:45:aa:00:10:ab:b0:51:95:94:
                    32:63:3d:9e:a1:59:9c:ea:51:b8:92:48:f8:d2:3d:
                    20:2f:e4:17:3a:15:2c:f2:91:00:6b:57:54:2d:49:
                    14:b8:cd:bf:bf:77:4b:5f:e6:8c:42:73:d9:69:9b:
                    e1:c6:54:d4:7a:ef:13:07:df:69:c7:d6:46:21:46:
                    b1:29:a3:b7:e9:27:ed:86:73:b4:99:f4:cb:5b:dc:
                    6d:5e:35:d3:18:e2:f3:d9:35:10:3d:30:c5:88:ae:
                    d9:0a:89:aa:2c:ed:3a:07:8e:1a:6f:57:72:83:de:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:82:A0:5A:78:01:80:C8:42:56:38:57:1A:82:89:0F:FB:F5:2D
            X509v3 Authority Key Identifier:
                keyid:7C:6F:DE:CE:05:E8:F2:BE:A1:53:33:D9:AF:84:31:09:47:30:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/3137372e31302e32342e302f32322d3234203d3e20323632383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:15:1a:27:c3:7e:d3:b7:a6:2c:ff:12:98:1d:f6:4c:a9:35:
         0f:a6:2e:45:95:b4:4c:11:bd:4f:81:2d:2b:37:f4:67:f7:4b:
         db:07:84:38:fd:2a:a7:63:97:1b:c8:6f:14:cb:8c:88:3d:b9:
         11:1d:68:1a:20:dc:7c:4b:06:39:8d:8a:78:16:0d:3f:2b:03:
         9d:eb:84:7c:68:06:90:bd:c4:8b:cc:57:81:3f:1b:7a:1f:83:
         9b:45:2d:10:d5:f2:8a:aa:75:54:a8:bc:f9:44:07:7d:8d:b1:
         a0:26:2b:bb:b5:12:ff:04:e1:0d:7b:21:cc:6d:40:9d:fb:a8:
         90:64:ba:f6:6e:99:40:19:79:56:73:4f:2a:74:68:a7:29:a8:
         81:9a:a7:41:7d:67:53:31:63:ca:5a:21:c8:7e:35:3b:13:41:
         15:76:0d:c3:f8:1d:58:65:de:76:fc:b9:fa:cc:c0:c1:6e:6d:
         55:13:00:23:ba:c8:9d:e3:3b:c6:3e:1c:54:f2:9e:73:60:9b:
         eb:c5:de:ed:9a:be:f2:e9:af:0f:68:18:ed:0b:a6:b5:58:e4:
         22:a0:6a:b5:3a:47:a3:42:ac:07:c8:33:bb:b9:75:0b:c9:6c:
         b7:4f:1b:82:87:a9:00:1f:b3:af:1c:90:7a:1f:10:05:78:f2:
         78:7e:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org