Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa
File:                     3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa (raw, json)
Hash identifier:          DyndSaQ6pSYqdybyAPpkCd3xCrEIsK6330o0mSVF+EU=
Subject key identifier:   F7:DB:F6:B3:68:20:EF:B9:77:0F:ED:F9:C8:21:F9:DB:BE:0F:8A:64
Certificate issuer:       /CN=28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC
Certificate serial:       49229771F1B13955032A8C705BA15C9AEDEB02BE
Authority key identifier: 28:E0:59:6E:CD:47:44:C8:A4:FE:7F:3B:94:A6:12:BE:A4:82:D9:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa
Signing time:             Tue 02 Apr 2024 19:00:00 +0000
ROA not before:           Tue 02 Apr 2024 18:55:00 +0000
ROA not after:            Tue 01 Apr 2025 19:00:00 +0000
asID:                     262945
IP address blocks:        177.154.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:22:97:71:f1:b1:39:55:03:2a:8c:70:5b:a1:5c:9a:ed:eb:02:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC
        Validity
            Not Before: Apr  2 18:55:00 2024 GMT
            Not After : Apr  1 19:00:00 2025 GMT
        Subject: CN=F7DBF6B36820EFB9770FEDF9C821F9DBBE0F8A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:01:de:8f:9c:fa:e8:b9:f7:f5:19:45:4a:
                    04:9f:8e:db:41:0e:01:04:66:a9:cc:70:bc:9c:d5:
                    88:49:b9:93:85:36:d4:0f:61:05:e3:82:b7:7b:b8:
                    6d:46:ff:9e:f0:8c:6d:5f:a4:21:ee:d5:46:c9:25:
                    a7:51:9a:9a:3a:80:cf:0e:89:9b:1e:c7:9e:96:01:
                    fb:11:0d:77:72:aa:10:8d:7b:80:3c:68:29:08:64:
                    b9:ea:e5:74:09:f6:ec:0c:9b:cd:6b:a2:de:b1:15:
                    4c:8c:ab:b3:1c:c9:ad:39:f9:96:f9:cb:af:1a:12:
                    2b:4b:d9:8c:89:d1:90:71:8b:7c:71:74:6c:7f:a9:
                    17:71:d5:f0:53:8a:13:e4:bb:65:d6:49:fc:20:6e:
                    5e:e3:5e:00:33:77:f1:3f:63:50:6f:1d:2c:5b:6a:
                    fe:7b:2c:85:67:e2:d7:74:2a:1e:f7:b3:52:0a:ce:
                    21:92:5c:e5:11:0b:bd:4f:bc:95:af:66:5a:5e:75:
                    db:90:2e:3b:21:62:5e:e0:95:2a:49:83:1d:de:ff:
                    2d:1e:ed:52:70:b3:ac:09:1b:ee:fc:26:75:cb:13:
                    2d:55:74:fd:3a:b8:16:ca:ae:a9:2a:ed:c1:38:2f:
                    bd:eb:bd:e5:ff:08:a4:59:12:6c:71:3d:72:c2:2e:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DB:F6:B3:68:20:EF:B9:77:0F:ED:F9:C8:21:F9:DB:BE:0F:8A:64
            X509v3 Authority Key Identifier:
                keyid:28:E0:59:6E:CD:47:44:C8:A4:FE:7F:3B:94:A6:12:BE:A4:82:D9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/3137372e3135342e32372e302f32342d3234203d3e20323632393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:bc:6e:26:33:b3:5e:fd:e5:c3:cb:6c:e3:43:3f:5c:b0:ef:
         4f:70:aa:44:eb:21:e1:6a:97:2f:de:d1:55:33:a2:89:fc:ed:
         ff:c8:7f:3f:ad:01:c4:9d:f1:b2:53:ad:6e:8c:d5:4e:eb:ba:
         37:83:9d:88:e5:79:ae:bb:b1:8d:5f:c0:2b:56:9c:3e:49:72:
         55:b1:4c:cb:29:78:5c:69:00:98:b0:83:d0:64:18:d0:61:69:
         fb:86:67:8c:67:19:e9:00:53:c4:64:d9:9d:3f:31:66:18:08:
         4f:1b:76:0e:68:79:72:47:57:81:e0:2e:eb:d5:7f:5c:72:2a:
         01:6a:f4:b6:39:19:f1:18:7e:0d:06:7d:d0:fa:4c:af:53:b4:
         e5:66:e7:f2:b9:e9:6a:84:ba:4c:3a:c0:d5:20:b8:4f:44:20:
         b8:70:e8:87:34:cf:af:3d:e6:30:8d:3d:32:c6:34:5d:2b:7e:
         50:fb:9e:91:00:b6:e9:7f:43:f5:bb:1b:5d:74:32:43:ed:e6:
         f4:75:04:eb:c3:6a:72:3e:be:5e:45:c0:77:ab:c4:c5:37:77:
         87:ec:6a:43:f1:b3:74:e8:38:e0:56:37:f4:0d:83:e3:82:ec:
         4a:93:19:42:fa:c9:db:4c:ae:f0:ac:10:e5:54:8d:e4:fc:49:
         f5:4a:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org