Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa
File:                     3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa (raw, json)
Hash identifier:          6p1yp5lQB/AzxC4lcIqxRRTOc3GsvsV9tC+GOmSizCI=
Subject key identifier:   2B:03:B8:F2:5A:E1:2F:16:E7:EA:85:EE:32:C1:15:96:A5:2F:F8:C2
Certificate issuer:       /CN=28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC
Certificate serial:       0F1FDA45A074B5184F331BA9986A92016BCC19E3
Authority key identifier: 28:E0:59:6E:CD:47:44:C8:A4:FE:7F:3B:94:A6:12:BE:A4:82:D9:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa
Signing time:             Tue 02 Apr 2024 19:00:01 +0000
ROA not before:           Tue 02 Apr 2024 18:55:01 +0000
ROA not after:            Tue 01 Apr 2025 19:00:01 +0000
asID:                     262945
IP address blocks:        177.154.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1f:da:45:a0:74:b5:18:4f:33:1b:a9:98:6a:92:01:6b:cc:19:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC
        Validity
            Not Before: Apr  2 18:55:01 2024 GMT
            Not After : Apr  1 19:00:01 2025 GMT
        Subject: CN=2B03B8F25AE12F16E7EA85EE32C11596A52FF8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:89:da:03:fa:61:3b:00:f4:3d:d7:f8:a8:
                    0a:92:f3:65:94:16:2e:14:3a:5b:43:07:fc:4d:f9:
                    cb:80:6e:7c:56:49:69:41:63:ec:42:ea:db:ed:4c:
                    50:5e:6a:03:8b:45:34:e4:8a:5d:ef:dd:55:45:45:
                    f5:57:70:47:e2:ea:be:2b:b4:cd:c8:41:7f:e8:d0:
                    55:56:cd:8f:9d:7c:a6:e2:cc:18:53:7a:17:74:6b:
                    40:27:8c:c3:fb:fa:5f:e2:17:fc:43:3a:06:ca:3a:
                    4d:ed:4a:fc:e8:05:da:c8:41:19:11:67:1e:eb:bf:
                    ec:1b:82:68:04:a0:a6:98:33:fb:79:94:11:dd:48:
                    82:14:2b:15:a4:f5:41:8e:a7:cb:48:ff:7a:11:68:
                    84:e0:c4:d9:51:37:64:75:89:1d:06:b6:46:6c:f3:
                    51:91:13:41:f7:51:d5:70:eb:8d:9f:88:11:12:c4:
                    b1:34:e1:da:13:39:62:57:2c:2b:d6:65:b9:31:8a:
                    d1:79:9d:b1:23:f0:a1:cf:4b:4f:95:71:83:02:8f:
                    02:be:95:4f:a5:03:62:09:6a:40:b2:a7:a9:2d:fd:
                    50:55:5d:77:47:1e:83:14:e4:45:cf:f7:7b:93:5a:
                    59:87:af:37:0c:33:f7:2c:6d:18:6d:80:cb:c8:58:
                    6f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:03:B8:F2:5A:E1:2F:16:E7:EA:85:EE:32:C1:15:96:A5:2F:F8:C2
            X509v3 Authority Key Identifier:
                keyid:28:E0:59:6E:CD:47:44:C8:A4:FE:7F:3B:94:A6:12:BE:A4:82:D9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:85:2b:3c:d0:ff:00:b4:7a:6c:b8:e4:68:4c:a9:50:81:45:
         d0:19:de:ba:c9:a4:b4:02:5a:7a:05:68:1a:3d:f1:59:4b:24:
         0a:54:36:90:92:68:0b:45:0a:fa:c3:73:ab:3d:2c:48:8d:fa:
         af:2c:50:3e:29:fb:ce:28:6f:7f:9b:96:b5:5b:29:9c:3a:1f:
         68:33:be:92:8e:d1:eb:07:b6:ea:95:17:38:42:c3:b8:06:87:
         e4:76:ff:35:c1:37:fe:fb:f7:e4:2d:ca:f9:14:fa:05:f7:a9:
         7b:e1:21:64:94:46:8a:95:83:3c:df:f4:cf:e7:3a:8b:fa:9f:
         d5:55:96:3f:d9:de:f4:94:ec:1e:8e:eb:b7:ac:4b:1d:ac:f0:
         50:28:68:60:79:4f:04:ae:1a:d7:9e:55:a0:5b:ed:fe:58:de:
         53:26:fa:34:a5:a2:da:34:11:68:7e:f3:d0:73:d9:1b:6b:62:
         00:44:b2:7a:4c:a3:61:58:ff:8a:ee:e3:69:1f:12:3e:b8:ec:
         cd:71:8a:19:b5:3d:3e:c3:2a:df:6c:18:59:d4:aa:81:6a:7e:
         b9:6d:e5:ec:f7:d5:c4:4a:f0:e5:d9:bc:59:04:98:24:a6:a3:
         0c:55:83:47:17:b5:2e:45:ce:f3:45:c2:3e:78:fa:a5:38:dc:
         a9:01:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org