Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137322e302f32322d3232203d3e20323634323337.roa
File:                     3133382e3131372e3137322e302f32322d3232203d3e20323634323337.roa (raw, json)
Hash identifier:          T/vQemNFeHAThNwxj85K+uXJeUdcYeyjCgAyClnX7Gs=
Subject key identifier:   73:9C:6F:43:1C:77:45:CA:BA:E8:DC:92:52:C8:31:C5:9A:BE:3C:32
Certificate issuer:       /CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
Certificate serial:       7F730CCFF955917B0A83C54F9D34845EBA59431E
Authority key identifier: 2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137322e302f32322d3232203d3e20323634323337.roa
Signing time:             Fri 22 Apr 2022 14:18:11 +0000
ROA not before:           Fri 22 Apr 2022 14:13:11 +0000
ROA not after:            Fri 21 Apr 2023 14:18:11 +0000
asID:                     264237
IP address blocks:        138.117.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:73:0c:cf:f9:55:91:7b:0a:83:c5:4f:9d:34:84:5e:ba:59:43:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
        Validity
            Not Before: Apr 22 14:13:11 2022 GMT
            Not After : Apr 21 14:18:11 2023 GMT
        Subject: CN=739C6F431C7745CABAE8DC9252C831C59ABE3C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:d5:a3:5b:79:df:f9:e6:10:43:2a:68:c1:
                    fa:b3:70:c3:df:52:f7:3c:d9:ba:74:22:4f:4e:0c:
                    72:bf:91:11:d5:b5:3c:46:8f:99:a9:1d:bb:ee:22:
                    c4:7e:9d:c5:0e:ed:af:68:de:57:81:e4:0b:6d:36:
                    7a:86:65:e9:9b:6b:ec:c3:49:b1:c8:81:79:cb:c0:
                    d0:a3:73:27:ca:dd:7e:42:5a:40:9d:4b:1b:fe:d2:
                    cf:08:ed:c6:50:0d:1f:80:4b:70:58:da:c5:19:6a:
                    db:54:95:57:3d:a8:ab:f7:d4:76:33:da:c2:6f:56:
                    44:a3:7f:a7:94:95:b2:a0:99:0c:40:f7:f2:f8:9b:
                    e8:1e:e9:ef:87:44:c8:c8:fb:d8:29:bd:4e:60:5d:
                    67:e0:6e:8a:14:4b:13:0a:c8:5f:6e:2e:9b:e3:fe:
                    dd:68:ba:1b:9c:4e:44:9b:07:a1:c9:cb:90:db:86:
                    37:ee:87:4b:e7:33:cb:70:75:d9:d4:db:89:c8:12:
                    93:c3:bd:cd:69:8c:95:e4:bc:9e:0b:22:00:d4:41:
                    1a:ca:be:77:68:22:40:8c:de:9a:df:72:7c:30:42:
                    6d:27:71:97:a1:94:3c:3a:6f:2b:21:de:f6:7a:60:
                    b2:c7:4c:0e:e9:d3:9c:86:74:e2:73:fc:b3:c5:de:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9C:6F:43:1C:77:45:CA:BA:E8:DC:92:52:C8:31:C5:9A:BE:3C:32
            X509v3 Authority Key Identifier:
                keyid:2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137322e302f32322d3232203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:03:4e:30:6a:96:0f:3d:7e:b1:fd:50:67:ea:1b:13:14:e3:
         00:a3:04:85:64:9b:50:2f:7e:81:8b:c7:3a:ac:d9:b5:e5:ae:
         f2:be:35:a0:bf:d2:6b:9a:71:38:56:c0:ae:09:48:68:ed:10:
         53:77:33:dc:05:b6:77:cb:58:65:5b:de:da:5a:bb:38:14:e5:
         ce:40:56:38:2e:cb:48:01:a1:23:6c:42:e1:3a:8f:ab:ed:f7:
         8e:26:96:44:e7:87:90:a1:50:9c:9c:63:ac:2e:06:ca:e8:86:
         3c:9f:61:3c:e8:71:4e:75:fa:c1:47:25:80:74:3e:9b:3e:c3:
         4f:65:00:65:2a:0b:6a:0c:9a:af:ef:10:26:62:34:a7:92:09:
         20:a5:ea:1a:d5:b2:ac:eb:cb:c7:d7:fa:88:0e:fb:98:f9:9a:
         8c:32:43:14:f5:a3:95:0f:0a:f8:aa:e5:78:cc:10:32:60:c6:
         58:e9:23:9d:cb:40:1a:f6:59:69:b9:54:c8:8b:67:eb:01:7a:
         04:79:6f:83:5a:d2:fc:2e:97:e1:e4:c1:00:ee:82:4f:54:5a:
         28:bb:23:3d:27:cf:34:a1:71:14:0b:2e:2a:cb:37:ac:7c:78:
         62:17:4d:cc:97:11:22:c2:b0:cb:b3:1c:60:96:39:d5:cd:5f:
         3b:23:18:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org