Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/0/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa
File:                     3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa (raw, json)
Hash identifier:          kaxbS2HWi76cdtZ7JT+wXhA8CpmarH9vjnrS7Chh7ME=
Subject key identifier:   4F:41:03:8B:0B:92:69:9A:FF:57:5A:52:12:F2:B3:45:2B:83:EA:0C
Certificate issuer:       /CN=A2113D96263FFD0C79DBDAB0399597233A3CCBBC
Certificate serial:       09F4CE76506C3A5C6334901099F753AA5DCCBE8F
Authority key identifier: A2:11:3D:96:26:3F:FD:0C:79:DB:DA:B0:39:95:97:23:3A:3C:CB:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2113D96263FFD0C79DBDAB0399597233A3CCBBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/0/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa
Signing time:             Fri 27 Oct 2023 12:59:55 +0000
ROA not before:           Fri 27 Oct 2023 12:54:55 +0000
ROA not after:            Fri 25 Oct 2024 12:59:55 +0000
asID:                     271033
IP address blocks:        187.84.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f4:ce:76:50:6c:3a:5c:63:34:90:10:99:f7:53:aa:5d:cc:be:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2113D96263FFD0C79DBDAB0399597233A3CCBBC
        Validity
            Not Before: Oct 27 12:54:55 2023 GMT
            Not After : Oct 25 12:59:55 2024 GMT
        Subject: CN=4F41038B0B92699AFF575A5212F2B3452B83EA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:66:2b:02:69:30:2d:de:d5:30:ca:ed:b0:
                    10:d2:37:d1:25:de:65:b8:cc:8e:24:e0:bc:b0:9f:
                    57:18:1b:06:60:d9:5e:d1:c1:15:0f:55:81:f3:4e:
                    ae:cf:5b:3f:32:e4:dc:11:a8:8a:d2:e6:c2:91:6a:
                    a2:33:ad:4a:98:66:6c:98:ad:24:b0:f3:e3:d5:7c:
                    80:ab:98:6b:51:70:cb:2e:14:41:1e:b4:ea:3f:57:
                    0f:fb:14:2d:ca:d2:e6:5f:9b:7a:b2:76:d0:d1:9c:
                    2c:e7:18:34:08:dc:ae:eb:f1:df:01:65:65:69:30:
                    3c:7a:05:dc:0b:f9:3e:a7:42:0e:dd:21:9c:b4:ea:
                    1e:52:69:e2:46:3f:b2:83:f0:d1:57:5a:2a:18:3f:
                    5d:45:54:cd:5d:9b:d8:fa:cb:b1:e2:2d:fb:29:ab:
                    b6:08:16:d4:35:87:be:07:c3:9f:02:de:6c:90:5e:
                    cd:01:ab:08:68:fb:79:76:a2:6b:14:33:e3:f5:f1:
                    74:db:f1:1b:0b:08:89:1d:d1:94:22:72:0d:3d:2a:
                    c1:4f:47:a0:04:ba:80:ec:8c:0c:cb:5f:b6:48:c8:
                    f7:51:a9:2a:2d:9d:a6:4a:96:f6:84:1c:e0:b6:ce:
                    68:43:9a:3e:2e:5d:5f:f5:89:25:50:9f:a8:8a:44:
                    f1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:41:03:8B:0B:92:69:9A:FF:57:5A:52:12:F2:B3:45:2B:83:EA:0C
            X509v3 Authority Key Identifier:
                keyid:A2:11:3D:96:26:3F:FD:0C:79:DB:DA:B0:39:95:97:23:3A:3C:CB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/0/A2113D96263FFD0C79DBDAB0399597233A3CCBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2113D96263FFD0C79DBDAB0399597233A3CCBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/0/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d2:a2:96:80:67:0c:db:a7:a3:52:b9:00:f3:d6:c6:44:13:
         82:49:b3:b9:84:37:07:6e:2b:d9:c2:4f:fe:e5:e4:ee:94:53:
         f1:6d:74:cd:7a:04:15:5b:fd:36:16:13:eb:39:1b:e8:87:28:
         24:e4:73:be:b5:fe:2d:81:4f:6e:31:65:9f:02:49:74:84:e5:
         e7:36:2b:a2:7c:49:64:23:4e:54:4d:2e:53:28:3d:ef:7e:f3:
         a1:95:f5:5a:6d:95:19:b0:d2:61:68:54:a0:0f:d8:55:a1:5e:
         b1:a7:ff:dc:48:ec:5f:db:94:f0:67:3c:2e:65:b8:6a:0b:8f:
         0d:31:22:02:87:ca:b8:66:9b:41:37:74:28:bf:aa:3f:68:30:
         4c:04:99:ac:f7:91:8b:c4:18:98:4d:17:d1:13:9a:50:02:3f:
         98:8b:ba:a6:9d:0f:73:52:a5:e5:74:83:df:f6:ab:08:21:d9:
         92:df:6b:c8:b5:c1:53:d0:37:d6:a0:8c:34:19:10:91:37:8a:
         2a:a3:af:d9:69:e0:ff:1e:5f:fb:d7:a3:e4:90:66:76:58:77:
         23:e7:71:00:23:3d:a3:32:79:ba:44:26:ee:a4:04:84:f3:f8:
         f4:16:15:94:b8:14:7f:df:c8:6a:d9:b3:26:00:ac:56:07:e6:
         e9:80:eb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org