Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/3137372e31302e32382e302f32322d3234203d3e20323632383431.roa
File:                     3137372e31302e32382e302f32322d3234203d3e20323632383431.roa (raw, json)
Hash identifier:          X/N6ASEFf/+Zu83ORUCivW0u3zn692OOORKpG6pArC4=
Subject key identifier:   73:FE:E4:CA:A3:60:01:52:5D:44:DB:42:95:62:B2:18:12:84:64:F3
Certificate issuer:       /CN=7C6FDECE05E8F2BEA15333D9AF84310947309C98
Certificate serial:       3283C6C375F64C8FE7B4B57914160D6F4E2FA85E
Authority key identifier: 7C:6F:DE:CE:05:E8:F2:BE:A1:53:33:D9:AF:84:31:09:47:30:9C:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/3137372e31302e32382e302f32322d3234203d3e20323632383431.roa
Signing time:             Thu 02 Nov 2023 03:40:34 +0000
ROA not before:           Thu 02 Nov 2023 03:35:34 +0000
ROA not after:            Thu 31 Oct 2024 03:40:34 +0000
asID:                     262841
IP address blocks:        177.10.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:83:c6:c3:75:f6:4c:8f:e7:b4:b5:79:14:16:0d:6f:4e:2f:a8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C6FDECE05E8F2BEA15333D9AF84310947309C98
        Validity
            Not Before: Nov  2 03:35:34 2023 GMT
            Not After : Oct 31 03:40:34 2024 GMT
        Subject: CN=73FEE4CAA36001525D44DB429562B218128464F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:b5:0a:42:c4:74:0a:5d:40:19:9d:cd:dc:
                    30:fa:a2:12:60:04:eb:63:f7:25:c6:8d:60:e9:81:
                    02:5f:4b:ef:91:b8:ce:ef:20:44:2f:f4:04:ff:83:
                    2c:ba:1f:3c:3b:40:4e:2b:fd:bd:f7:47:01:1d:7b:
                    1d:40:60:d3:de:2a:a7:5e:bf:11:fd:bf:e2:d2:5c:
                    91:87:25:bc:6b:2f:43:45:91:83:00:28:a8:60:be:
                    bb:d1:e0:f1:3f:3d:3f:89:e3:90:ed:c4:c8:d7:1c:
                    11:fe:3d:ee:45:3e:0d:cb:34:d1:ec:25:5e:d9:59:
                    fe:81:80:8c:50:6e:28:58:0e:68:97:9f:9e:82:f1:
                    27:37:89:79:76:62:82:f8:15:de:39:17:36:db:30:
                    68:05:7b:48:c4:79:63:87:61:1d:44:f5:b6:4c:4e:
                    87:a8:9e:f4:9d:1f:6a:3d:dc:a9:ff:e1:5c:77:0e:
                    ff:d0:28:9a:c8:98:73:3c:c8:69:81:fd:8f:39:07:
                    60:f7:48:ab:46:fb:e3:c9:47:c0:e6:c3:cb:df:5c:
                    a2:74:b6:c7:2d:04:1d:45:72:c3:83:d5:c9:48:5a:
                    cd:fe:e3:b2:95:eb:a4:6c:5b:61:04:10:ea:2a:b9:
                    a4:c7:dd:c4:09:8e:fb:10:53:92:41:f8:69:3a:08:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FE:E4:CA:A3:60:01:52:5D:44:DB:42:95:62:B2:18:12:84:64:F3
            X509v3 Authority Key Identifier:
                keyid:7C:6F:DE:CE:05:E8:F2:BE:A1:53:33:D9:AF:84:31:09:47:30:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C6FDECE05E8F2BEA15333D9AF84310947309C98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/3137372e31302e32382e302f32322d3234203d3e20323632383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:92:75:66:87:50:a5:36:81:89:f9:47:2c:bd:9c:14:09:a5:
         b6:90:9e:d2:fc:4e:0c:35:ca:26:ae:9e:2e:4c:20:ee:11:4c:
         6d:75:7f:18:29:7b:14:15:45:4d:48:fe:5d:76:4e:e5:90:8f:
         a0:ab:8c:ea:b3:73:8c:cc:8d:a0:17:bd:dd:3b:de:0f:72:84:
         2d:8e:93:71:70:49:4b:5c:82:17:e9:ec:d6:0c:5a:c7:2c:1b:
         28:cb:c0:df:ff:cb:fd:d3:44:e2:43:44:c6:a8:42:ec:a1:99:
         4e:56:a0:a1:5e:91:9c:e9:3f:71:80:3c:6a:ec:0d:93:36:c4:
         df:75:e4:ef:fa:c7:12:00:45:d9:29:65:b9:0d:a1:59:ca:92:
         28:91:38:36:11:62:54:b1:be:f7:05:9b:11:e0:c0:7f:f4:03:
         b0:07:ff:a7:eb:b0:79:b9:e8:da:fa:2c:e5:e5:d7:e4:c3:68:
         b6:7a:2f:2f:48:a8:15:c3:68:7e:d8:82:74:ee:0b:aa:87:05:
         f6:c7:cb:b1:aa:70:6b:0f:06:c1:e6:db:42:dc:9a:07:51:3e:
         28:6d:34:e5:eb:d9:9e:25:2e:8f:9c:11:de:6e:cb:86:1e:c6:
         3b:10:57:45:e8:18:0f:42:32:6a:a5:e1:08:3a:fc:4b:5f:31:
         72:0a:83:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org