Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137342e302f32342d3234203d3e20323634323337.roa
File:                     3133382e3131372e3137342e302f32342d3234203d3e20323634323337.roa (raw, json)
Hash identifier:          26PLDjx2Sb9MGeY5IgBF2+eIjQDMcrkb79lc+qvbQns=
Subject key identifier:   57:94:F9:3B:EA:C1:AD:BA:50:AE:17:20:81:97:D1:E1:A1:7E:B8:08
Certificate issuer:       /CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
Certificate serial:       39159E379C6F5DD56E4B77F4F6E944979C94F7AD
Authority key identifier: 2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137342e302f32342d3234203d3e20323634323337.roa
Signing time:             Fri 05 Jan 2024 17:00:00 +0000
ROA not before:           Fri 05 Jan 2024 16:55:00 +0000
ROA not after:            Fri 03 Jan 2025 17:00:00 +0000
asID:                     264237
IP address blocks:        138.117.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:15:9e:37:9c:6f:5d:d5:6e:4b:77:f4:f6:e9:44:97:9c:94:f7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
        Validity
            Not Before: Jan  5 16:55:00 2024 GMT
            Not After : Jan  3 17:00:00 2025 GMT
        Subject: CN=5794F93BEAC1ADBA50AE17208197D1E1A17EB808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:23:47:4a:28:cf:ec:1f:59:8f:c0:ad:2b:
                    b2:9a:36:98:79:3e:a5:f2:b9:14:0a:ea:f9:10:35:
                    6b:07:bd:b8:c2:19:0d:42:c7:86:af:38:8d:f4:e2:
                    b9:f6:b6:fb:10:c6:63:3d:2e:c0:e5:d8:be:be:25:
                    83:1a:5b:7d:e5:bc:2c:1a:12:9f:9a:72:b2:a5:ba:
                    ff:03:81:fa:85:49:f8:b6:0c:30:f7:38:57:d9:98:
                    31:60:db:09:b9:2c:02:ba:7b:ab:2d:e2:a9:0f:cc:
                    f9:1f:b8:d0:b4:25:fd:b5:12:01:68:75:98:8f:d5:
                    02:f4:eb:d3:93:10:33:4f:73:3e:ec:c2:0c:57:c6:
                    c7:0f:a6:50:a7:03:a1:25:af:0d:8b:0b:92:4f:04:
                    8c:21:32:46:a8:ba:44:36:b5:21:a2:29:60:76:7a:
                    59:fe:2d:7c:c2:c9:f4:e6:07:fd:e6:f4:b5:41:9c:
                    26:4b:36:f7:9b:df:91:25:29:5a:7d:71:5c:51:34:
                    b8:c4:1e:ab:08:54:0b:d4:dd:56:a8:91:e7:ac:2b:
                    6d:ff:bd:ef:3c:36:c8:81:d5:31:7e:af:18:98:0b:
                    c9:c8:d9:e9:a2:1d:df:4e:93:14:23:e5:53:70:4d:
                    52:1c:9d:2c:07:da:f1:fe:4f:6e:3d:14:18:af:a0:
                    02:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:94:F9:3B:EA:C1:AD:BA:50:AE:17:20:81:97:D1:E1:A1:7E:B8:08
            X509v3 Authority Key Identifier:
                keyid:2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/3133382e3131372e3137342e302f32342d3234203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:98:bc:57:1b:8a:81:35:1c:2c:64:e2:2b:fd:e4:0a:cc:51:
         97:d7:fd:74:1f:df:b8:85:3c:4e:de:b1:18:63:9f:cf:cf:f6:
         cb:92:0c:36:77:ee:a6:76:05:88:b3:0f:ff:87:cc:78:77:ff:
         fe:be:90:e8:95:79:5c:a1:28:24:4d:ef:43:ed:f4:38:87:72:
         3c:6a:dd:2c:06:5e:22:b9:2d:88:f1:b6:21:76:d4:a9:c2:a0:
         bd:f2:3e:6f:16:8a:35:1a:7d:cd:e5:2b:b8:8a:bd:6c:34:52:
         88:44:da:85:cb:30:89:dd:87:b0:2f:f1:9e:93:1e:16:e6:ac:
         cc:4d:01:6b:ad:03:2c:e5:76:d0:bb:c4:03:bd:ef:4a:99:ad:
         70:cf:6e:90:90:f2:17:3e:db:5f:7c:81:49:80:f8:c2:6b:fb:
         e8:57:4e:c0:75:5f:34:9e:ad:0d:06:0c:26:81:b8:62:75:8f:
         5f:19:c4:8f:93:83:b9:c2:99:d1:86:86:c9:bb:7a:aa:bc:6e:
         35:b3:f5:da:88:9f:02:34:12:ab:d9:fb:db:f2:46:59:8f:72:
         cd:79:2a:ae:f6:61:b8:f0:c8:97:7e:7e:4d:e4:04:13:01:b5:
         6e:2f:06:10:c6:16:ed:7b:4b:07:57:51:dc:d0:51:1a:b2:4d:
         02:a5:85:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:49 2024 by rpki-client on console-ams.rpki-client.org