Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137322e302f32342d3234203d3e20323634323337.roa
File:                     3133382e3131372e3137322e302f32342d3234203d3e20323634323337.roa (raw, json)
Hash identifier:          PYVfvS33FFoUeUN7nHJezgSnrXnqobIpDAuy2dcS3og=
Subject key identifier:   C8:A7:28:2C:B6:18:0E:3E:AA:93:5D:1A:D5:9F:81:3D:77:3A:F5:F2
Certificate issuer:       /CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
Certificate serial:       17F7D14C10E7C7489F9B4E11D4D31AFD8EBBA1CA
Authority key identifier: 2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137322e302f32342d3234203d3e20323634323337.roa
Signing time:             Fri 05 Jan 2024 17:00:00 +0000
ROA not before:           Fri 05 Jan 2024 16:55:00 +0000
ROA not after:            Fri 03 Jan 2025 17:00:00 +0000
asID:                     264237
IP address blocks:        138.117.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f7:d1:4c:10:e7:c7:48:9f:9b:4e:11:d4:d3:1a:fd:8e:bb:a1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
        Validity
            Not Before: Jan  5 16:55:00 2024 GMT
            Not After : Jan  3 17:00:00 2025 GMT
        Subject: CN=C8A7282CB6180E3EAA935D1AD59F813D773AF5F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:80:37:b0:04:4e:9f:6f:95:c4:e5:28:ea:
                    3e:2b:37:b5:b3:89:7d:13:a2:9c:cc:6f:7e:43:a9:
                    80:77:eb:a3:76:41:fa:b4:ef:b9:bc:39:b1:c2:44:
                    78:52:4d:d8:b6:c0:41:c9:82:a9:3f:53:9d:e1:66:
                    70:c2:62:46:25:65:09:1d:2c:8f:cd:ff:d7:53:78:
                    b5:f1:c7:32:02:e6:fa:d1:1e:00:34:b4:cb:9b:34:
                    5a:39:82:aa:41:d5:03:84:db:c1:2e:00:dc:bc:b9:
                    e8:c0:32:a7:d6:fb:d8:cf:68:2d:88:c7:8b:5a:1a:
                    b5:62:1f:77:6e:21:a4:b1:46:8d:5a:a7:ab:a7:fd:
                    dd:a4:8a:5e:8a:cf:2b:63:c9:2b:8a:39:f4:9b:f7:
                    ec:08:d1:61:73:67:ce:d1:09:6c:34:59:be:df:d2:
                    b9:9a:4f:38:53:48:31:ff:f5:cb:9a:65:f6:4d:67:
                    ec:aa:f8:8d:b6:8f:7b:00:07:a3:7a:f7:d2:3d:82:
                    52:31:ee:36:09:6e:95:64:81:15:81:5d:db:dc:16:
                    01:a7:e5:71:1c:f2:05:e0:cb:c0:29:04:53:ed:97:
                    7a:bf:6c:5a:bd:37:34:01:6a:29:ee:9a:68:7f:60:
                    4e:8c:b6:74:3a:36:f5:6b:e5:5e:db:af:27:a8:39:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A7:28:2C:B6:18:0E:3E:AA:93:5D:1A:D5:9F:81:3D:77:3A:F5:F2
            X509v3 Authority Key Identifier:
                keyid:2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137322e302f32342d3234203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:13:40:58:3d:0a:3e:28:46:f0:1d:2e:5e:a9:7e:ac:26:9d:
         42:7b:c4:38:90:9b:a8:f2:17:dc:55:a4:ee:05:b9:19:4f:8c:
         cb:33:fe:a4:a2:01:56:2b:6a:f5:6c:fe:01:4a:df:5f:e1:4c:
         d3:cb:db:1d:62:28:a6:3d:5c:b7:bc:b7:f2:d6:8c:d5:cc:04:
         4e:f5:83:2f:55:7b:fd:10:f0:bd:c3:7f:df:cf:34:9a:08:d7:
         9e:63:0a:0d:87:ad:0f:ce:2c:ac:9d:21:f6:ab:e4:ae:e9:51:
         56:60:67:84:84:ea:aa:92:30:06:09:fb:c6:17:2b:27:17:72:
         b3:80:0a:6d:96:37:13:78:83:b9:dd:63:87:3c:53:f7:16:f3:
         31:2f:a9:1f:e7:7b:5d:2d:e6:2c:d7:48:80:7a:fa:67:6f:e0:
         1a:b4:62:84:87:27:0e:e5:45:35:ab:46:44:3b:28:a0:4e:80:
         4d:66:27:54:eb:92:42:e9:a4:c5:80:af:c4:e8:07:20:a4:07:
         63:d3:3d:c5:fa:1e:bf:64:38:6c:c5:08:35:d5:8c:7c:34:34:
         cb:f2:cb:95:7c:8f:79:a0:d6:de:94:23:3c:89:f1:a0:cf:50:
         fe:7a:f2:4c:78:ae:c4:74:6a:9b:21:24:67:e2:dc:48:71:bc:
         d7:3d:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org