Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232302e302f32322d3232203d3e203532363739.roa
File:                     3137372e36372e3232302e302f32322d3232203d3e203532363739.roa (raw, json)
Hash identifier:          b/iPzcoUDxknIWUYUhe5XvLEElGe9u0sfzgDC7tSdf0=
Subject key identifier:   EB:73:0C:00:A7:EE:BB:B5:C2:E9:70:D3:66:4D:35:A6:21:9E:E0:2D
Certificate issuer:       /CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
Certificate serial:       765D9147C5E37C70C4D26D02CE80BD5D9C70F9EF
Authority key identifier: DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232302e302f32322d3232203d3e203532363739.roa
Signing time:             Tue 22 Aug 2023 15:32:55 +0000
ROA not before:           Tue 22 Aug 2023 15:27:55 +0000
ROA not after:            Tue 20 Aug 2024 15:32:55 +0000
asID:                     52679
IP address blocks:        177.67.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5d:91:47:c5:e3:7c:70:c4:d2:6d:02:ce:80:bd:5d:9c:70:f9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
        Validity
            Not Before: Aug 22 15:27:55 2023 GMT
            Not After : Aug 20 15:32:55 2024 GMT
        Subject: CN=EB730C00A7EEBBB5C2E970D3664D35A6219EE02D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:76:74:31:d1:0c:19:60:ec:00:1e:da:0a:
                    cd:22:45:8c:7d:91:0e:e9:f6:8a:44:9b:32:f7:fb:
                    ba:b1:c2:92:6b:ee:5c:6b:c5:e6:65:39:37:e4:3a:
                    0d:3a:66:a1:19:3b:02:88:16:29:03:50:40:ed:8d:
                    b4:2c:84:4f:ae:e1:91:19:cc:84:1a:a4:e7:eb:5a:
                    10:fe:03:ec:f8:d3:7d:b4:89:48:36:d8:67:57:82:
                    7c:14:63:6b:28:de:b9:f3:1e:a5:9b:49:e8:83:af:
                    68:85:75:db:8e:2c:ea:50:74:1d:c5:c8:29:71:c9:
                    78:82:db:a1:11:e2:87:09:16:46:41:27:b8:93:f2:
                    1b:09:b3:58:ff:b1:b7:fe:b7:87:72:eb:b2:bf:a7:
                    5b:15:6c:4b:8c:fd:dd:98:6a:2d:d7:d2:a6:1f:a4:
                    fb:8c:f6:9a:34:4e:f4:43:75:23:e4:2a:b3:22:1e:
                    46:94:d0:47:9c:d0:ab:b4:2d:93:e7:09:f2:35:cd:
                    f8:9d:39:eb:78:64:98:4b:35:0c:bb:fb:e0:01:94:
                    0a:61:10:5f:94:83:ee:b5:ec:e8:8d:8a:40:79:c4:
                    f8:c2:d3:23:70:fe:4c:e5:fc:1a:9e:e7:2b:2c:5d:
                    84:75:e9:c2:48:a9:f3:64:b4:53:ac:69:99:d5:7e:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:73:0C:00:A7:EE:BB:B5:C2:E9:70:D3:66:4D:35:A6:21:9E:E0:2D
            X509v3 Authority Key Identifier:
                keyid:DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232302e302f32322d3232203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:39:ee:b4:8c:5a:b0:da:a3:97:86:00:4d:2f:a6:7a:e3:08:
         19:af:77:4c:50:47:dd:cc:f4:72:e1:30:44:52:38:0f:15:5f:
         c1:12:55:6a:fb:85:a5:b5:80:ee:16:3e:4f:56:21:34:28:61:
         fc:f9:90:c1:19:84:62:21:19:4f:9f:87:40:b6:6a:df:4b:6c:
         fb:cd:38:ff:57:f4:35:ed:5a:f5:d4:9a:3d:e7:32:76:59:1a:
         32:8d:5e:3a:a8:de:ea:5c:31:7c:4a:b8:49:19:ca:3d:d7:cf:
         fc:bc:02:d4:a8:75:cd:22:e1:6a:74:32:01:da:93:ea:53:6f:
         ba:6b:25:d8:07:9e:64:55:66:cf:51:20:c4:d0:75:ac:9d:0e:
         bd:4e:8d:a9:70:78:70:73:6f:e0:a7:09:90:b5:55:1a:07:2a:
         c7:39:56:6e:bc:9d:f0:4d:27:ab:46:88:3b:9b:b1:d2:32:30:
         f5:65:61:7d:3c:f0:60:5e:89:84:a9:9d:f0:c6:2e:29:d5:ad:
         24:fb:9d:c9:85:fc:45:d1:f5:e0:d0:70:39:04:56:ec:42:a0:
         d5:ea:3f:6c:5e:64:7c:ba:ad:18:da:d2:6d:7a:1d:45:db:24:
         63:8c:93:c2:03:23:32:9e:b7:cf:e6:6d:2f:9c:c4:aa:21:fe:
         29:1d:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org