Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137332e302f32342d3234203d3e20323634323337.roa
File:                     3133382e3131372e3137332e302f32342d3234203d3e20323634323337.roa (raw, json)
Hash identifier:          N/5gu0qdISoi2XzbqX83Zl60aCRJs0IqqhSUt75Vo6o=
Subject key identifier:   76:80:46:4F:38:BA:F7:F9:06:B9:CC:75:EC:35:EE:84:8C:78:94:8C
Certificate issuer:       /CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
Certificate serial:       4BE829DA5EBF2B49B98CBB9D89EA43E639BF6709
Authority key identifier: 2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137332e302f32342d3234203d3e20323634323337.roa
Signing time:             Fri 05 Jan 2024 17:00:00 +0000
ROA not before:           Fri 05 Jan 2024 16:55:00 +0000
ROA not after:            Fri 03 Jan 2025 17:00:00 +0000
asID:                     264237
IP address blocks:        138.117.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e8:29:da:5e:bf:2b:49:b9:8c:bb:9d:89:ea:43:e6:39:bf:67:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
        Validity
            Not Before: Jan  5 16:55:00 2024 GMT
            Not After : Jan  3 17:00:00 2025 GMT
        Subject: CN=7680464F38BAF7F906B9CC75EC35EE848C78948C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:bf:f4:1a:bc:7f:7f:d1:99:d2:67:39:85:
                    45:bd:a5:f8:10:16:85:84:59:45:d2:4b:d6:e0:42:
                    74:b5:49:dd:6f:20:68:b8:10:dd:97:a2:68:a0:07:
                    5c:33:de:df:67:9e:f5:ec:91:de:fe:70:64:ed:90:
                    c9:6c:62:24:4b:c8:44:b9:f3:77:af:ce:8a:89:f2:
                    12:50:e8:16:4c:1e:8f:69:2b:9d:83:3d:62:6b:ad:
                    f6:17:64:01:b2:6f:bb:cb:d7:0b:8f:8f:71:9c:08:
                    6c:0b:c1:82:56:59:2f:09:23:1f:24:91:a6:14:d5:
                    43:8b:20:9c:9e:54:ca:01:02:6b:1c:77:a7:b7:81:
                    ff:04:dc:ee:12:b2:ef:3c:ca:76:c9:6b:ad:a6:c5:
                    8f:62:f4:21:91:86:42:12:a6:91:1b:60:e0:85:05:
                    76:e8:02:e7:47:2c:9c:64:73:96:93:ee:4e:e7:35:
                    b0:84:be:41:50:93:13:34:ea:99:c6:18:d8:59:25:
                    0c:6c:fe:19:30:df:78:5a:e1:3e:30:1e:18:76:e6:
                    92:5e:14:7c:20:60:ee:89:6b:74:f5:f8:ac:69:11:
                    02:a4:9b:74:0e:da:77:36:fa:26:3b:c1:4e:a6:ff:
                    73:d6:10:7d:64:66:03:1d:88:9a:e9:9f:37:57:fa:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:80:46:4F:38:BA:F7:F9:06:B9:CC:75:EC:35:EE:84:8C:78:94:8C
            X509v3 Authority Key Identifier:
                keyid:2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137332e302f32342d3234203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:0c:57:93:48:98:4a:1f:74:12:11:0a:33:d3:fb:1e:c4:a6:
         8e:87:e7:0c:05:2b:a9:88:fd:46:61:3e:e8:fe:ac:ac:87:65:
         8f:c7:76:0a:c0:8e:d9:9a:d1:c3:45:8c:13:3f:98:44:7b:ac:
         b2:ff:b9:1f:79:85:62:9c:cb:44:81:76:e3:53:97:80:7e:67:
         24:a5:b8:ee:68:46:10:63:7e:28:d1:87:3b:1b:df:17:b7:2e:
         1a:fe:a5:b7:d3:0c:09:75:67:f3:26:a3:4d:b2:06:5b:23:97:
         87:c9:68:5b:54:05:e1:6c:95:4f:1b:cf:53:dc:43:79:3a:08:
         61:8b:a6:fd:2b:6f:e8:26:ca:a8:3d:15:19:bb:20:d6:10:40:
         41:96:4e:a2:15:bd:a0:f1:cb:05:d0:3f:8c:da:56:43:dd:ca:
         1f:4c:99:34:97:2a:69:49:b5:28:d3:b4:1d:af:67:c9:e2:65:
         e0:d5:3f:2a:06:95:7b:ad:2e:71:1d:fa:72:83:fc:15:46:75:
         bd:dc:39:77:fc:49:43:3a:db:10:60:24:7a:ee:a3:d8:5b:b6:
         b7:bc:c7:f8:91:8d:87:d8:96:70:2a:51:7e:0f:a2:3b:34:12:
         3d:5f:5b:bb:2b:a2:cf:57:90:df:a4:25:47:87:95:e8:43:2a:
         0f:57:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org