Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa
File:                     3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa (raw, json)
Hash identifier:          YdbHNTzKdrumItP3EOQOWJ0OTsDYvUrbiXU99T18j74=
Subject key identifier:   84:49:91:87:0C:C4:43:07:DB:E8:1B:C1:F8:0B:EC:FC:F0:AB:C0:37
Certificate issuer:       /CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
Certificate serial:       22A80328AFFD9EF82522D3920CC5DA3AC541550E
Authority key identifier: 2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa
Signing time:             Wed 13 Mar 2024 19:19:41 +0000
ROA not before:           Wed 13 Mar 2024 19:14:41 +0000
ROA not after:            Wed 12 Mar 2025 19:19:41 +0000
asID:                     264237
IP address blocks:        138.117.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a8:03:28:af:fd:9e:f8:25:22:d3:92:0c:c5:da:3a:c5:41:55:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
        Validity
            Not Before: Mar 13 19:14:41 2024 GMT
            Not After : Mar 12 19:19:41 2025 GMT
        Subject: CN=844991870CC44307DBE81BC1F80BECFCF0ABC037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:83:37:d5:b0:ee:ca:60:61:b6:ad:a2:ec:
                    7b:38:20:24:e0:87:fa:f8:1d:3b:9f:c0:15:98:17:
                    ff:8c:65:d1:8a:73:ad:fc:cc:4a:6b:00:ff:e0:e5:
                    7e:7a:c9:13:a8:0b:a0:ec:7a:f5:dd:ce:55:ed:32:
                    87:b9:a6:c1:fd:4d:3b:cd:90:2b:d0:c6:b6:3a:7f:
                    75:42:ad:3e:40:84:ca:76:f4:4a:eb:af:ac:a7:c1:
                    55:88:ba:6c:c4:8c:7f:41:06:8b:74:08:97:64:21:
                    06:89:7a:03:88:cc:ef:0a:68:37:bd:fe:6d:e2:61:
                    12:ac:7c:dc:f8:37:44:7f:d5:b6:fc:f8:55:79:92:
                    c2:85:d5:62:02:25:0d:c7:a8:dc:91:4f:ee:36:37:
                    14:d3:e8:c7:2e:fd:1a:e6:80:aa:8b:79:df:09:e5:
                    64:a1:fd:c5:ab:b7:3b:b0:8f:58:88:bb:9c:f0:4f:
                    88:4e:bb:fe:43:b0:aa:70:d7:cd:5b:08:6a:ee:49:
                    af:33:b0:5d:a8:dc:48:ad:05:ac:0e:af:d4:0d:41:
                    05:00:f1:5d:c3:ad:e1:e8:80:06:fc:8f:02:2e:4d:
                    66:bd:33:eb:02:b6:13:9d:98:d5:82:5a:31:74:85:
                    b2:ac:76:07:94:88:bb:47:0b:c1:2a:df:e9:f8:9a:
                    ba:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:49:91:87:0C:C4:43:07:DB:E8:1B:C1:F8:0B:EC:FC:F0:AB:C0:37
            X509v3 Authority Key Identifier:
                keyid:2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:af:46:70:52:0a:11:54:95:8c:ca:71:ad:ce:96:6b:69:ab:
         6f:81:4a:cf:a9:78:4d:4b:df:5f:88:56:40:fd:6f:53:ee:55:
         63:75:fa:5e:c3:5f:0e:24:1e:ca:46:17:1a:35:a5:4f:41:bd:
         4a:f2:b6:cb:c3:5c:3c:cf:d9:85:79:21:0d:96:b0:c0:d6:55:
         28:bd:7c:5e:a5:29:b8:f9:f2:b8:65:f1:37:a6:5d:64:c9:9b:
         35:7b:c5:f3:07:08:57:41:43:c4:72:30:b3:f2:ac:7c:ec:9e:
         9c:7d:e8:c7:f0:a8:94:46:28:57:5d:ba:d7:c6:44:19:ec:92:
         e5:b0:f3:3d:e3:a5:f6:12:95:68:ce:07:18:3a:60:29:40:05:
         22:a8:0e:52:61:ce:ab:9e:cb:37:3c:54:3a:f8:d8:e2:07:2e:
         a8:b8:52:34:85:01:21:a0:20:68:f8:55:38:5a:c3:a1:27:55:
         57:8a:fa:eb:82:da:f7:f3:cf:15:00:af:7a:1d:94:1b:b8:ce:
         4d:2b:9c:81:31:db:bf:d2:7e:a3:a2:3c:4f:85:4c:87:6a:db:
         ad:36:32:98:dd:7c:c9:56:c8:1f:1b:fd:73:05:86:30:0c:bd:
         3c:fe:c5:72:90:de:83:46:b1:33:52:39:b4:0f:d5:2b:45:a2:
         cd:43:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org