Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3138372e3132312e3134342e302f32312d3234203d3e203533313935.roa
File:                     3138372e3132312e3134342e302f32312d3234203d3e203533313935.roa (raw, json)
Hash identifier:          TeMOzdOyJ/lCltrFZBlrbBSS5cuFCVY2SAxDy7XLjfc=
Subject key identifier:   CA:AD:03:CD:96:38:CF:27:24:3B:D4:7D:15:79:9B:3C:A8:50:66:93
Certificate issuer:       /CN=F2C7C640942BB39FFD15C83B538FCF1B441CEEFD
Certificate serial:       1F72840FE977F830669A8846D87D3247F308DF03
Authority key identifier: F2:C7:C6:40:94:2B:B3:9F:FD:15:C8:3B:53:8F:CF:1B:44:1C:EE:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C7C640942BB39FFD15C83B538FCF1B441CEEFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3138372e3132312e3134342e302f32312d3234203d3e203533313935.roa
Signing time:             Wed 10 Apr 2024 13:30:38 +0000
ROA not before:           Wed 10 Apr 2024 13:25:38 +0000
ROA not after:            Wed 09 Apr 2025 13:30:38 +0000
asID:                     53195
IP address blocks:        187.121.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:72:84:0f:e9:77:f8:30:66:9a:88:46:d8:7d:32:47:f3:08:df:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C7C640942BB39FFD15C83B538FCF1B441CEEFD
        Validity
            Not Before: Apr 10 13:25:38 2024 GMT
            Not After : Apr  9 13:30:38 2025 GMT
        Subject: CN=CAAD03CD9638CF27243BD47D15799B3CA8506693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:ff:b9:36:92:5e:8c:29:97:8c:f4:af:ce:
                    dd:b3:ec:0e:6a:95:7f:57:e0:ba:67:10:39:3b:74:
                    7e:1b:ed:b8:bd:38:42:53:8a:d5:8c:5e:0b:fa:18:
                    c6:8e:17:f2:ff:99:74:ce:03:3d:88:87:86:d0:f0:
                    c7:ec:ca:b8:ee:df:84:88:38:b1:ee:41:90:9b:48:
                    9a:b2:a1:14:a3:43:4c:da:45:3c:17:57:20:68:72:
                    fe:91:05:de:21:de:53:39:16:b2:da:7f:33:58:ab:
                    86:43:9b:8a:4d:a4:30:bc:2d:90:9f:76:c1:95:cd:
                    b9:35:9d:be:32:3f:7b:f0:11:b9:2b:62:10:4f:d1:
                    94:de:83:95:59:ff:9c:f6:4f:c8:1d:92:15:4c:f3:
                    8a:9f:03:fe:1d:ba:da:1b:5d:a5:52:bb:c1:d9:c3:
                    5a:21:6c:74:8d:ff:cc:8b:a9:92:28:7c:13:bb:d6:
                    99:e3:b5:47:ee:3f:dc:66:52:b8:94:1f:fc:82:69:
                    60:60:41:01:6a:d7:3c:df:4b:e9:d1:c0:53:65:e4:
                    7b:f3:62:d7:d0:a0:52:ed:cb:29:63:6a:95:c2:05:
                    e2:f2:b7:b9:13:ab:84:62:47:22:9e:d5:fc:5b:84:
                    b3:45:1e:24:0c:24:3c:59:a1:6b:3a:2e:70:da:6a:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AD:03:CD:96:38:CF:27:24:3B:D4:7D:15:79:9B:3C:A8:50:66:93
            X509v3 Authority Key Identifier:
                keyid:F2:C7:C6:40:94:2B:B3:9F:FD:15:C8:3B:53:8F:CF:1B:44:1C:EE:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/F2C7C640942BB39FFD15C83B538FCF1B441CEEFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C7C640942BB39FFD15C83B538FCF1B441CEEFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3138372e3132312e3134342e302f32312d3234203d3e203533313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:3c:52:ca:c8:26:33:38:98:5d:c9:8f:c2:49:0f:cf:45:3f:
         09:2a:47:8a:db:d6:30:70:da:c3:5b:36:3b:00:50:26:74:d7:
         82:2a:3c:8f:7d:77:e8:a8:bc:f2:fd:6f:49:75:8b:4d:85:b5:
         9a:b3:f2:ed:c4:64:dc:ab:00:2f:d5:27:36:ad:47:5a:b9:80:
         09:95:83:b7:1a:92:67:c4:99:b4:4f:b8:f1:dc:f9:40:e6:9f:
         0c:66:e8:19:ee:5a:eb:d8:8d:80:a6:df:c0:ee:aa:0c:70:73:
         f0:b9:ae:79:4a:87:46:97:06:fa:d8:e4:0c:0f:54:6c:dd:14:
         dd:4e:22:8d:ad:37:8e:32:6d:99:b2:5d:ad:e3:01:e0:58:20:
         71:6b:95:58:51:93:bc:e7:fb:24:a8:63:c8:b4:80:53:8a:59:
         7c:e3:2c:f8:70:ba:5c:44:85:41:70:93:0a:8e:53:64:6a:16:
         de:6e:90:8d:45:40:9a:01:b8:5e:66:52:99:6c:36:2b:ca:6a:
         11:83:14:c8:ac:85:ef:e5:fd:3e:94:07:d3:46:16:eb:3a:d3:
         ae:e5:a7:8c:9d:70:ef:b4:0b:46:17:32:b3:35:dc:5e:fd:8c:
         a6:61:bc:b0:74:37:5e:6b:05:50:cf:4b:b9:64:d3:b6:33:10:
         a9:36:19:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org