Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32332d3233203d3e203532363739.roa
File:                     3137372e36372e3231362e302f32332d3233203d3e203532363739.roa (raw, json)
Hash identifier:          +bR2cMnnpfuzuVl02rdCnUZVk4RYsY8/m4LDCCRdar0=
Subject key identifier:   E8:85:5D:03:ED:04:6D:D2:D7:8F:1D:D4:C5:43:3D:83:52:B4:0B:A3
Certificate issuer:       /CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
Certificate serial:       451374F8CE19439E409C404BFDFB4D351284B16B
Authority key identifier: DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32332d3233203d3e203532363739.roa
Signing time:             Tue 22 Aug 2023 15:32:21 +0000
ROA not before:           Tue 22 Aug 2023 15:27:21 +0000
ROA not after:            Tue 20 Aug 2024 15:32:21 +0000
asID:                     52679
IP address blocks:        177.67.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:13:74:f8:ce:19:43:9e:40:9c:40:4b:fd:fb:4d:35:12:84:b1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
        Validity
            Not Before: Aug 22 15:27:21 2023 GMT
            Not After : Aug 20 15:32:21 2024 GMT
        Subject: CN=E8855D03ED046DD2D78F1DD4C5433D8352B40BA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:22:64:8b:69:e4:31:b8:b3:4a:15:59:93:c3:
                    c5:00:60:6a:55:86:fb:6b:0b:f9:68:f3:45:f2:31:
                    2f:80:64:1a:1f:8c:52:2f:4f:08:8b:18:af:18:b8:
                    fe:17:ba:69:74:f3:38:36:83:a2:5d:13:45:09:79:
                    9f:22:57:bd:6e:b3:8c:a2:e2:b1:9c:d0:5a:45:90:
                    25:bf:3b:03:6a:9d:ca:79:bd:46:52:c0:31:23:ff:
                    59:5f:78:81:65:14:c4:8a:4b:91:8d:20:88:37:4b:
                    e9:b8:76:6a:45:19:a2:42:d7:22:af:ef:2a:0b:a1:
                    34:26:53:e6:67:8a:ac:d4:f2:0d:5b:84:96:b7:5d:
                    13:f7:4f:e7:66:8e:58:12:a5:63:d6:21:73:a2:7a:
                    4e:50:cc:5f:5b:1c:ee:75:06:99:44:28:18:35:27:
                    27:88:17:13:39:ef:d9:73:56:53:79:4a:1b:4b:cb:
                    1c:82:b9:55:95:07:19:ad:dd:40:83:82:55:92:9b:
                    22:6f:e8:a5:38:51:47:82:89:96:a6:e6:b6:bc:f9:
                    ab:54:a9:23:a3:ab:79:e4:8d:0a:b2:41:22:3d:d8:
                    19:57:a1:a8:97:18:fc:17:11:51:65:55:8a:61:a8:
                    4d:b6:90:68:18:57:e6:ea:24:c7:b6:30:16:a1:a8:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:85:5D:03:ED:04:6D:D2:D7:8F:1D:D4:C5:43:3D:83:52:B4:0B:A3
            X509v3 Authority Key Identifier:
                keyid:DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32332d3233203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:4b:7f:89:ec:80:c0:ff:db:c7:57:65:57:b2:49:7b:f6:
         a3:fa:4f:a3:45:c1:bf:19:49:4e:72:b3:67:61:1e:07:5a:ec:
         1e:58:05:b9:91:25:15:c6:a2:15:d9:aa:8b:fb:f3:89:c1:c5:
         87:5a:1c:be:cc:59:38:aa:51:2d:d2:3b:8d:f8:8d:63:9f:b7:
         98:9a:b8:43:6b:c2:a9:7a:53:f2:6e:f9:a9:68:5b:d9:54:a2:
         25:58:e6:22:26:0d:75:fb:12:1e:4d:28:54:88:68:5d:b1:1a:
         f8:fd:50:fc:e2:a6:85:c5:e2:fb:b1:74:9c:33:7f:0c:ae:e0:
         bd:ef:ae:d8:49:87:c0:4d:5a:1f:d7:0f:f3:f0:1e:9d:7e:3d:
         86:5a:c8:f3:fa:d3:1e:b5:40:0d:1b:12:0c:54:70:8c:21:58:
         a6:7e:e6:cd:76:8f:a4:e0:a6:ed:76:1b:5a:b5:f2:48:aa:8b:
         95:32:40:76:f7:40:a3:5c:d9:5f:af:1a:01:fe:1c:35:b3:48:
         da:ad:5e:cc:75:37:c0:69:eb:d2:da:84:2c:56:9e:f0:e2:95:
         ab:23:89:3b:ba:58:59:99:14:c8:4f:9c:33:cf:34:62:3d:d9:
         0f:54:60:5e:4e:14:c9:f9:1f:95:99:50:af:05:cc:26:e8:b7:
         34:43:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org