Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3230312e38372e3234302e302f32302d3234203d3e203533313935.roa
File:                     3230312e38372e3234302e302f32302d3234203d3e203533313935.roa (raw, json)
Hash identifier:          aCz7WqD0eWPhhUZ1cab2o7gn34JUWFn0MzNuSjimnGY=
Subject key identifier:   78:DE:84:25:C0:C9:2D:46:A7:51:9A:16:57:5A:4B:16:4D:DF:E7:36
Certificate issuer:       /CN=F2C7C640942BB39FFD15C83B538FCF1B441CEEFD
Certificate serial:       764FDD28B343972FF9F1E178AC306F4F0649FDF8
Authority key identifier: F2:C7:C6:40:94:2B:B3:9F:FD:15:C8:3B:53:8F:CF:1B:44:1C:EE:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C7C640942BB39FFD15C83B538FCF1B441CEEFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3230312e38372e3234302e302f32302d3234203d3e203533313935.roa
Signing time:             Wed 10 Apr 2024 13:30:54 +0000
ROA not before:           Wed 10 Apr 2024 13:25:54 +0000
ROA not after:            Wed 09 Apr 2025 13:30:54 +0000
asID:                     53195
IP address blocks:        201.87.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4f:dd:28:b3:43:97:2f:f9:f1:e1:78:ac:30:6f:4f:06:49:fd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C7C640942BB39FFD15C83B538FCF1B441CEEFD
        Validity
            Not Before: Apr 10 13:25:54 2024 GMT
            Not After : Apr  9 13:30:54 2025 GMT
        Subject: CN=78DE8425C0C92D46A7519A16575A4B164DDFE736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:16:08:c1:ec:f4:de:0d:c4:b5:10:d5:59:
                    b6:be:d5:8d:74:3e:d0:b4:f6:e9:55:29:4e:c3:1a:
                    50:4d:be:b7:a9:b9:a9:51:20:e6:49:09:33:86:33:
                    c0:3a:56:b6:0c:4d:42:4d:a1:53:6a:e1:29:0e:15:
                    81:09:76:c4:89:b3:1d:9f:07:3b:a4:90:f4:4d:c0:
                    ba:05:60:35:cf:6b:ed:28:9c:cf:24:bc:a8:f7:a4:
                    fe:59:07:36:06:fd:f5:50:fd:b6:85:77:00:cc:f0:
                    84:8a:06:59:66:94:2c:57:e0:67:6b:84:4e:1b:53:
                    69:71:39:52:e1:a6:16:96:53:17:98:66:ee:4d:6c:
                    e3:1d:d0:dc:66:c1:a9:51:92:15:a8:bd:8b:d9:65:
                    16:e7:62:8e:1b:49:5d:5a:a1:9d:14:62:39:aa:a9:
                    59:8a:69:2e:27:77:20:44:eb:cc:b3:73:38:bf:8d:
                    30:ad:d3:ce:fe:f2:97:f5:d1:eb:6f:0c:a2:f9:ce:
                    21:b2:d8:75:fb:cf:8e:f0:ff:69:19:7c:25:30:e6:
                    df:b3:0e:cb:de:9e:00:59:15:3c:02:10:4e:d3:2d:
                    78:3a:45:67:fd:dc:5a:c4:a8:71:d2:fc:bb:fb:70:
                    1f:70:9d:9e:f1:02:92:9a:07:66:5f:62:24:93:e3:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DE:84:25:C0:C9:2D:46:A7:51:9A:16:57:5A:4B:16:4D:DF:E7:36
            X509v3 Authority Key Identifier:
                keyid:F2:C7:C6:40:94:2B:B3:9F:FD:15:C8:3B:53:8F:CF:1B:44:1C:EE:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/F2C7C640942BB39FFD15C83B538FCF1B441CEEFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2C7C640942BB39FFD15C83B538FCF1B441CEEFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/3230312e38372e3234302e302f32302d3234203d3e203533313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:2d:db:f5:3c:37:16:34:ee:a8:55:62:9e:10:fe:6f:a3:fe:
         1d:2a:d5:87:27:82:c5:55:39:c0:e3:66:16:98:64:6e:30:30:
         9b:b5:45:b2:ec:5c:a2:e6:7b:aa:a2:40:c0:ad:78:8d:2f:44:
         54:f0:89:36:3d:e6:a6:77:96:f4:bd:b6:27:64:0a:89:6e:b3:
         03:8f:72:03:60:42:67:fa:ef:ed:4a:df:02:07:bb:01:e5:21:
         74:71:57:03:64:84:c3:ac:5e:49:5b:4c:f1:a1:90:10:a6:78:
         46:99:9b:5f:f5:f5:84:df:85:3e:d2:4e:57:77:3d:22:6c:3b:
         6b:06:dd:ca:2f:42:9d:f5:6c:1e:1a:8d:e4:f7:f6:d9:62:48:
         49:50:e6:45:14:3b:d7:90:03:84:0e:db:93:f5:59:bb:61:7a:
         bb:c4:70:f3:8e:22:2f:67:ff:06:57:a0:cb:0a:20:00:22:b9:
         71:8d:59:4b:29:80:95:3c:4d:b3:3d:2c:a1:8a:81:75:da:44:
         c4:80:e6:57:8d:42:38:80:10:29:f1:cf:33:82:d6:a8:bd:78:
         80:b4:f7:5e:91:92:94:00:79:f9:fd:19:9b:d9:7f:6d:78:8f:
         b2:52:71:e9:77:ae:a3:51:c3:8b:5e:e4:ea:74:55:09:81:5c:
         3a:e2:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org