Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/3137372e3135342e32342e302f32322d3232203d3e20323632393435.roa
File:                     3137372e3135342e32342e302f32322d3232203d3e20323632393435.roa (raw, json)
Hash identifier:          uVmNi7/9LpLVWZdNhlI3QzE98Enp0TeEKMAZKp/lYrc=
Subject key identifier:   F9:23:ED:22:0C:CE:7F:34:55:8E:DE:F5:70:08:B0:6F:BC:1D:FF:71
Certificate issuer:       /CN=28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC
Certificate serial:       26F21303AEF1678CE861181238DD537993409B35
Authority key identifier: 28:E0:59:6E:CD:47:44:C8:A4:FE:7F:3B:94:A6:12:BE:A4:82:D9:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/3137372e3135342e32342e302f32322d3232203d3e20323632393435.roa
Signing time:             Tue 02 Apr 2024 19:00:01 +0000
ROA not before:           Tue 02 Apr 2024 18:55:01 +0000
ROA not after:            Tue 01 Apr 2025 19:00:01 +0000
asID:                     262945
IP address blocks:        177.154.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f2:13:03:ae:f1:67:8c:e8:61:18:12:38:dd:53:79:93:40:9b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC
        Validity
            Not Before: Apr  2 18:55:01 2024 GMT
            Not After : Apr  1 19:00:01 2025 GMT
        Subject: CN=F923ED220CCE7F34558EDEF57008B06FBC1DFF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:b7:66:48:7b:35:bc:d8:8f:ed:5f:49:c5:
                    b5:d4:5d:90:5a:64:3b:0f:96:8c:e5:85:72:5c:77:
                    a9:ef:b5:af:e8:4c:c5:93:c3:19:76:88:7c:fd:18:
                    f2:44:3e:26:ce:56:a7:42:d7:f3:d2:d6:92:2f:8e:
                    9c:28:7b:89:8d:76:7f:2e:90:51:72:4c:d2:44:bc:
                    72:8c:f1:0e:a8:62:32:07:d1:8c:25:49:e8:07:c2:
                    b1:79:0a:90:40:e0:ef:d6:16:c4:b3:1a:ad:56:a3:
                    f3:28:0a:86:f8:4e:58:8c:b3:e7:39:70:91:76:23:
                    14:fa:13:8d:fd:3b:c6:8e:d0:eb:08:77:51:92:7a:
                    40:7f:09:a2:93:11:74:f7:bd:cd:52:11:81:98:f8:
                    bf:17:ff:2f:6f:7a:d9:a5:15:6b:ef:db:41:dd:69:
                    d8:a2:62:fd:53:59:f8:2f:91:5d:d5:94:b4:b8:5d:
                    9b:b1:da:c2:d2:27:a9:21:37:89:f3:f5:83:46:c0:
                    de:a2:6b:00:29:82:44:e7:8f:cb:f4:1b:8b:b9:da:
                    7d:b8:30:c3:b1:9c:3f:78:b4:72:2a:7d:b8:3a:7b:
                    bb:76:3c:2d:85:45:de:a9:e6:9b:54:bb:61:2c:f0:
                    43:81:1a:bc:ba:54:3d:f6:4e:89:47:f5:fe:b2:59:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:23:ED:22:0C:CE:7F:34:55:8E:DE:F5:70:08:B0:6F:BC:1D:FF:71
            X509v3 Authority Key Identifier:
                keyid:28:E0:59:6E:CD:47:44:C8:A4:FE:7F:3B:94:A6:12:BE:A4:82:D9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/3137372e3135342e32342e302f32322d3232203d3e20323632393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:88:15:15:52:5e:6b:32:39:15:1e:87:3f:f7:80:eb:23:39:
         e6:f2:ae:92:61:d8:46:a6:59:a3:02:a4:e7:5e:4c:37:2e:69:
         5f:07:1a:49:65:52:18:73:69:57:1d:74:da:19:9e:f4:a4:71:
         c3:fe:50:4f:94:8d:74:f9:94:36:2f:eb:78:f2:f3:52:2a:8b:
         d2:60:3c:6e:0c:af:c6:10:2b:ce:87:48:57:51:73:10:0e:07:
         98:7d:d7:77:56:b8:45:b7:8f:ca:59:71:11:8d:e9:2e:03:51:
         50:fb:45:bc:a7:82:4c:57:5e:2f:66:28:04:d0:cd:9d:fd:e6:
         4b:17:c0:16:0c:8a:71:9f:a3:78:55:ec:d4:41:49:b8:91:ab:
         34:9a:62:de:27:b5:6d:f1:5d:d5:de:8e:7f:be:ad:67:b3:35:
         95:83:7b:91:f9:20:25:f3:5b:30:c6:f9:ec:3e:da:15:4a:a8:
         31:4a:83:0c:d6:da:97:87:b4:17:01:56:5c:5a:a2:18:71:16:
         00:e2:85:40:91:d2:4b:c4:c5:db:8b:56:52:14:66:41:f2:ba:
         03:c4:87:b3:93:58:87:d1:de:83:cb:1f:6f:62:16:5c:39:7c:
         7a:1f:51:f7:ef:13:15:50:5b:b6:58:44:e7:13:db:ab:86:fc:
         40:1f:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:55 2025 by rpki-client