Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32342d3234203d3e203532363739.roa
File:                     3137372e36372e3231362e302f32342d3234203d3e203532363739.roa (raw, json)
Hash identifier:          zP53Bk7MosCwp/rW/e7Qcdagfi6O8LsgcIyNvVVKSJI=
Subject key identifier:   CF:54:91:51:EB:BA:67:98:09:E1:2B:92:E4:8D:4E:35:6B:94:E3:0F
Certificate issuer:       /CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
Certificate serial:       05C869CAB3CDC10A2C19C2A7EA2E38BE0E1CEC6A
Authority key identifier: DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32342d3234203d3e203532363739.roa
Signing time:             Tue 22 Aug 2023 15:32:26 +0000
ROA not before:           Tue 22 Aug 2023 15:27:26 +0000
ROA not after:            Tue 20 Aug 2024 15:32:26 +0000
asID:                     52679
IP address blocks:        177.67.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c8:69:ca:b3:cd:c1:0a:2c:19:c2:a7:ea:2e:38:be:0e:1c:ec:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
        Validity
            Not Before: Aug 22 15:27:26 2023 GMT
            Not After : Aug 20 15:32:26 2024 GMT
        Subject: CN=CF549151EBBA679809E12B92E48D4E356B94E30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:16:ae:63:c1:44:e0:f2:e5:97:ad:a4:7c:
                    32:f7:78:66:42:51:ef:a1:25:2b:29:bc:ce:ec:0d:
                    b5:6b:b5:b7:58:6b:0e:a5:43:26:b5:92:8a:bb:d6:
                    49:41:a9:b6:e1:fc:c2:80:38:48:3f:49:5a:ee:63:
                    6f:f8:62:8d:64:4b:ea:b6:d1:7b:a4:6b:7c:ea:bd:
                    8d:bf:41:9a:a4:21:6a:9e:17:67:63:0e:68:3e:49:
                    b7:d5:84:ca:d2:c4:85:2f:0e:47:41:0c:28:3a:7b:
                    d7:71:45:31:ac:29:55:64:ab:50:42:cd:18:15:c8:
                    e7:e1:f6:47:d1:7e:9e:cb:e7:88:7f:e7:d9:19:df:
                    3c:16:95:2f:89:e2:50:df:ca:ba:3c:43:04:1f:ee:
                    ee:5c:11:8e:7a:76:9e:4a:cf:57:68:9d:03:e3:0a:
                    a2:ce:19:9f:df:4b:2f:6e:d2:bb:b8:42:c8:86:5f:
                    6a:ab:fe:80:23:3c:0c:02:c9:90:7b:fa:f6:56:db:
                    0f:e3:78:b5:4a:61:07:00:a8:ca:82:76:ea:ee:7a:
                    6c:18:84:bc:cb:36:d6:02:1d:d1:24:ed:9a:64:db:
                    5d:80:47:96:34:0e:62:41:ca:81:a2:bf:5e:59:51:
                    3b:24:8a:f0:cf:57:d3:29:e3:41:37:44:ff:fc:bd:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:54:91:51:EB:BA:67:98:09:E1:2B:92:E4:8D:4E:35:6B:94:E3:0F
            X509v3 Authority Key Identifier:
                keyid:DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3231362e302f32342d3234203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:dc:69:9e:7b:36:9b:d8:bc:68:d4:fe:1f:de:76:c7:18:ac:
         15:22:68:3d:13:24:c4:9e:c0:1a:7a:e3:7e:55:f6:2b:1a:2c:
         c4:0f:79:ef:0a:7e:8f:eb:ac:0d:6e:80:69:6a:53:ca:45:d6:
         84:31:66:b3:b4:3c:a5:1a:d2:97:bb:52:2b:0f:f4:81:28:be:
         81:3b:c5:24:f4:82:67:06:c3:3e:75:1f:36:81:02:39:8c:ad:
         ad:db:5c:03:1d:63:1c:ad:2c:fd:7a:30:a7:27:61:cd:a1:9e:
         c2:90:39:47:b9:05:26:e3:f1:34:f5:5c:20:77:8a:d2:40:ca:
         24:af:1c:d5:f3:08:70:23:12:73:76:de:7e:94:a4:b0:8f:6f:
         88:d2:79:e3:67:fe:e9:28:8a:c9:b7:8c:f1:e3:9a:60:18:31:
         82:6b:f6:e4:56:93:a3:9e:c4:a3:1f:9c:6b:55:7d:8b:9a:c4:
         c9:01:f7:34:5c:97:01:b6:fb:f6:ac:3a:d5:be:5e:11:d2:90:
         9b:06:86:e9:19:ae:49:6c:21:f4:2a:5b:8f:df:60:a5:6e:a2:
         a3:23:d9:69:d0:fa:4b:b9:53:83:61:85:d5:6e:6a:1b:ac:d2:
         66:bf:e3:03:1e:42:45:9a:0f:da:a3:48:31:b2:c5:7c:5a:d0:
         26:2f:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org