Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137342e302f32332d3233203d3e20323634323337.roa
File:                     3133382e3131372e3137342e302f32332d3233203d3e20323634323337.roa (raw, json)
Hash identifier:          vdrvU5Yp5kL4Oh9DLJk81Q7PblgQ9evcVrtP3Ve063Q=
Subject key identifier:   8E:5B:A3:05:81:5C:0F:CB:0C:0B:04:BA:2B:6E:0C:82:B6:AA:B0:3F
Certificate issuer:       /CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
Certificate serial:       7E32411FD029B34FE8777B7F225D1374FDAFEE9D
Authority key identifier: 2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137342e302f32332d3233203d3e20323634323337.roa
Signing time:             Fri 22 Apr 2022 14:18:31 +0000
ROA not before:           Fri 22 Apr 2022 14:13:31 +0000
ROA not after:            Fri 21 Apr 2023 14:18:31 +0000
asID:                     264237
IP address blocks:        138.117.174.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:32:41:1f:d0:29:b3:4f:e8:77:7b:7f:22:5d:13:74:fd:af:ee:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
        Validity
            Not Before: Apr 22 14:13:31 2022 GMT
            Not After : Apr 21 14:18:31 2023 GMT
        Subject: CN=8E5BA305815C0FCB0C0B04BA2B6E0C82B6AAB03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:2d:d3:72:47:b3:de:ce:04:b3:0e:3d:c2:
                    72:35:b0:55:f5:19:64:b3:ff:a4:03:49:b1:52:b3:
                    59:e0:05:33:38:0d:f7:1a:5e:f2:e4:0d:7d:06:ae:
                    5b:aa:88:19:21:74:3a:e2:3c:22:76:de:04:ec:df:
                    03:12:3f:e3:63:9d:48:19:6e:cc:a3:a2:90:47:e4:
                    d7:3d:f9:0f:5d:62:2a:ae:17:25:73:63:9f:5c:b5:
                    ad:c6:c0:e9:42:bd:b8:07:bc:c1:8d:92:a9:c1:e0:
                    4c:e7:c6:9d:5d:6d:92:76:eb:a0:93:52:62:d2:c7:
                    67:e9:50:41:34:fe:72:0f:29:85:e2:b1:fd:86:28:
                    d3:92:05:6f:91:b7:fc:71:22:70:f8:46:6d:3e:e5:
                    7b:fc:33:e7:b2:e6:4d:61:f1:ed:50:ee:7c:b6:a1:
                    1e:19:ca:0c:ea:16:75:61:bf:69:ef:ca:96:00:5a:
                    bf:65:f8:ab:12:73:01:98:91:e1:e4:8c:30:f3:e7:
                    12:3b:c5:bb:d6:cf:51:86:9d:ff:60:77:25:a6:c9:
                    18:c0:69:ec:09:a9:52:bc:48:03:38:29:67:40:03:
                    71:63:5a:c5:07:23:32:3e:b8:48:63:55:75:cc:0e:
                    f2:86:4b:fe:ed:69:c8:7f:aa:c4:8a:04:be:5b:01:
                    9d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5B:A3:05:81:5C:0F:CB:0C:0B:04:BA:2B:6E:0C:82:B6:AA:B0:3F
            X509v3 Authority Key Identifier:
                keyid:2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137342e302f32332d3233203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:4d:54:cb:a0:2e:26:56:34:66:97:d1:57:8a:33:08:41:ae:
         48:e4:56:f4:aa:d5:d5:b0:56:2d:19:24:f8:5b:3e:13:bf:1e:
         34:54:d0:b0:92:c1:56:50:f2:4d:48:f7:f6:04:12:c2:57:df:
         3c:08:fe:5f:01:e6:52:94:bc:66:57:df:8c:e3:cd:39:12:cc:
         37:d1:0f:b7:65:57:da:70:ea:73:d6:4a:fa:53:b7:57:21:01:
         66:a0:39:1b:bc:bd:36:db:04:60:3f:95:19:5b:d6:2b:9c:a0:
         5d:c8:24:da:c2:ac:f1:c0:92:92:62:f8:de:de:79:d7:7e:1b:
         49:b6:ec:9d:84:98:d3:e7:c1:fd:01:f9:51:6d:c2:7e:a4:95:
         a5:b1:c7:7b:92:aa:50:07:d5:bd:ed:25:91:23:ce:a3:1a:a8:
         57:d5:ef:1c:0c:1c:55:2b:6c:f3:1f:41:d2:92:a3:03:45:d1:
         21:59:34:a2:ee:a1:cb:a3:25:a7:3c:7b:be:c4:0a:cb:ce:77:
         72:27:65:61:c5:1d:15:15:27:d0:cc:5c:a7:10:48:ac:33:34:
         0e:b6:a9:d8:fe:5d:da:db:e1:ff:ed:74:39:e7:14:94:84:9a:
         36:62:3f:0a:c2:61:74:07:18:ae:3a:1b:8f:b0:e4:e5:57:7f:
         e0:52:54:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:49 2024 by rpki-client on console-ams.rpki-client.org