Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3137372e35352e3234302e302f32302d3234203d3e20323632353332.roa
File:                     3137372e35352e3234302e302f32302d3234203d3e20323632353332.roa (raw, json)
Hash identifier:          +dHfVqyIri+bH1CiFSSBKNzDtGj2hMtWoE5UdGaSEz8=
Subject key identifier:   F8:9B:7B:6E:AB:1E:C6:CE:13:8C:AA:26:6C:8B:D4:B1:F2:D5:5B:6D
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       57E8354167BA560541B7E38EA57D51C3E9F2CE6F
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3137372e35352e3234302e302f32302d3234203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:04 +0000
ROA not before:           Wed 28 Feb 2024 14:06:04 +0000
ROA not after:            Wed 26 Feb 2025 14:11:04 +0000
asID:                     262532
IP address blocks:        177.55.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e8:35:41:67:ba:56:05:41:b7:e3:8e:a5:7d:51:c3:e9:f2:ce:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:04 2024 GMT
            Not After : Feb 26 14:11:04 2025 GMT
        Subject: CN=F89B7B6EAB1EC6CE138CAA266C8BD4B1F2D55B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:d7:d6:89:ea:70:94:ea:f6:47:bf:41:57:
                    51:e6:97:f5:40:22:2d:be:f8:5c:22:1a:4b:f3:f1:
                    da:a5:bd:de:20:9e:cb:e5:24:b0:91:67:17:ca:b4:
                    00:d3:0c:05:7e:15:9c:29:e6:34:1c:9e:9a:fe:a6:
                    1c:35:ca:ee:fb:0b:40:f4:06:ab:8e:5e:b0:37:d0:
                    2e:23:45:33:56:b8:4d:80:00:91:20:6f:a4:72:9e:
                    07:33:f4:a9:97:28:9a:37:ff:6c:ff:82:5d:c0:cb:
                    0b:b5:39:9b:a2:24:b0:98:12:75:45:d2:73:12:99:
                    47:40:34:1e:0b:c0:41:17:f6:09:24:ad:fc:8b:fb:
                    d6:f1:9d:6b:83:43:d4:1f:6c:3b:17:10:42:96:30:
                    17:f5:92:cf:04:02:14:f6:f9:6c:e9:a8:d7:84:7e:
                    7a:0d:1a:f7:20:13:cb:7c:59:99:87:ec:19:54:53:
                    86:4f:01:8d:95:5a:e9:ff:03:8d:cd:58:d7:7f:fc:
                    c5:f7:99:78:77:12:05:ae:bf:70:62:b4:d5:f9:22:
                    9d:21:94:0b:09:76:81:24:8a:24:42:5b:f4:c7:ee:
                    aa:a7:04:b1:78:26:19:95:42:31:90:55:f7:bf:85:
                    e1:fb:aa:99:a4:97:8b:17:e0:83:d3:6c:45:25:df:
                    51:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9B:7B:6E:AB:1E:C6:CE:13:8C:AA:26:6C:8B:D4:B1:F2:D5:5B:6D
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/3137372e35352e3234302e302f32302d3234203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c6:da:ec:66:95:7d:bc:e7:b1:00:6d:06:ee:28:19:5c:c0:67:
         0b:5d:d2:84:fe:79:21:de:db:79:01:9f:fa:53:90:b1:ab:f3:
         08:82:5a:01:a5:05:b0:32:b8:e9:b3:47:16:1e:79:a8:84:51:
         96:d7:87:24:f6:88:73:7c:92:6b:cf:cc:9a:0f:57:1b:81:6c:
         28:56:51:4a:4a:e6:2f:90:08:85:8d:a9:a7:6b:52:00:5a:0b:
         ac:1a:ee:b1:cf:08:63:00:4c:1b:fc:78:64:54:31:a6:74:67:
         75:76:39:26:bb:05:68:10:9e:1b:f3:37:d0:38:d8:84:c8:0e:
         7b:99:5e:bc:47:63:40:4b:81:2f:f5:33:29:ea:92:a9:ef:f3:
         f6:fa:07:60:58:8f:9f:8e:91:06:07:a0:f3:9a:73:fc:73:14:
         41:11:9c:36:a9:b3:23:cb:34:7b:17:54:6f:fb:30:03:bc:6c:
         da:d4:bf:39:34:ec:aa:7e:b8:23:6a:9f:ff:e8:70:ae:8d:a8:
         7f:18:f1:75:16:03:fb:1e:f0:39:fa:1f:b6:f5:7a:3a:97:01:
         f9:34:fc:36:be:bf:ce:5b:54:3d:f2:d9:64:e9:cb:84:d0:0b:
         8f:91:2b:ea:4a:79:d2:a7:98:a8:fd:bb:59:94:4a:68:15:64:
         dc:84:46:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org