Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232302e302f32342d3234203d3e203532363739.roa
File:                     3137372e36372e3232302e302f32342d3234203d3e203532363739.roa (raw, json)
Hash identifier:          9JVIfYMRxj18gupRfw+ozQUPgYdQtsVsNyQBx1Nzwyk=
Subject key identifier:   81:D1:D2:CE:70:DF:41:D3:D8:D7:FD:9C:51:48:E9:AF:5F:A3:FF:6A
Certificate issuer:       /CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
Certificate serial:       4C8D0E2A36C6B49A51E5E1856A7745E4478C698A
Authority key identifier: DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232302e302f32342d3234203d3e203532363739.roa
Signing time:             Tue 22 Aug 2023 15:32:40 +0000
ROA not before:           Tue 22 Aug 2023 15:27:40 +0000
ROA not after:            Tue 20 Aug 2024 15:32:40 +0000
asID:                     52679
IP address blocks:        177.67.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8d:0e:2a:36:c6:b4:9a:51:e5:e1:85:6a:77:45:e4:47:8c:69:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
        Validity
            Not Before: Aug 22 15:27:40 2023 GMT
            Not After : Aug 20 15:32:40 2024 GMT
        Subject: CN=81D1D2CE70DF41D3D8D7FD9C5148E9AF5FA3FF6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c8:8e:d3:a3:d6:09:c8:da:f9:a5:6b:9a:75:
                    35:9e:6f:29:dd:86:12:ff:6e:75:66:08:68:13:02:
                    16:7d:ce:11:be:15:4a:f4:1d:ed:0a:32:6d:e0:43:
                    c9:a1:f2:26:06:d4:0a:a4:a2:ef:33:85:5c:d8:90:
                    28:25:13:f3:61:e6:97:b7:83:cf:a4:71:5f:73:8f:
                    8b:5a:24:be:60:f8:76:99:4f:22:80:3c:60:ad:ab:
                    3d:fc:fa:73:3f:17:0d:26:bf:56:f0:a2:ed:ba:88:
                    fd:e8:e8:81:5c:5a:9e:90:31:05:5c:b6:62:7f:55:
                    fe:23:13:6b:c3:d3:5c:3e:26:a1:e0:d7:5e:d9:f0:
                    e4:49:a1:51:fa:ff:81:b4:e0:65:1b:c6:38:09:dc:
                    ba:b2:79:b5:2b:0f:73:99:d2:d5:a6:ff:49:ba:fb:
                    d2:ad:d4:8a:20:69:93:91:cb:28:52:7a:4a:1d:b6:
                    25:92:f5:3c:d8:a1:ce:4f:8d:60:b9:fd:08:0e:98:
                    d9:4b:20:b6:4c:30:44:ad:d1:ef:f3:36:cd:fa:56:
                    02:d6:e3:79:27:ba:46:36:55:d6:2d:9f:d4:6d:7a:
                    2f:ce:4c:51:bc:c9:04:f2:c9:b4:75:fa:97:fd:6f:
                    05:6d:1f:b3:76:bb:6f:2c:7d:f0:1c:07:78:b3:ce:
                    38:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D1:D2:CE:70:DF:41:D3:D8:D7:FD:9C:51:48:E9:AF:5F:A3:FF:6A
            X509v3 Authority Key Identifier:
                keyid:DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232302e302f32342d3234203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:b7:07:ce:21:16:5d:d3:f1:bd:e2:34:83:14:0e:83:dd:ba:
         0e:9f:d5:ab:7a:71:64:9f:60:8d:a5:9a:08:ae:31:01:4a:10:
         99:65:a5:f8:13:15:a4:2e:05:79:ac:fb:b3:79:87:a3:2c:22:
         d5:91:5f:47:45:75:31:3c:0b:49:fb:c1:22:68:6c:58:7a:a9:
         34:83:73:67:61:bf:93:20:e7:00:47:6b:2f:fc:55:a0:e6:b4:
         98:ac:1e:5e:db:8d:28:89:76:ee:1c:0a:9b:21:9a:25:33:50:
         29:25:b9:b3:a3:97:58:67:4c:03:0d:4a:74:70:3a:b9:ab:d9:
         56:59:8b:3a:9f:9d:30:b8:9a:ea:33:ce:77:b0:30:0a:47:04:
         39:a5:f0:23:75:d0:a7:bd:c6:09:a4:21:b0:c4:42:04:84:4b:
         bc:8c:f6:8d:65:1a:d3:7f:85:e4:7a:16:91:30:b6:2a:f0:74:
         13:93:bc:ba:4d:66:04:f0:58:a4:c8:40:69:17:54:64:30:4d:
         73:60:9b:e3:4b:03:7c:e9:c5:3b:2d:09:9c:23:5a:04:4d:47:
         7a:47:41:7b:dd:75:b5:38:08:d1:1c:e8:9a:8f:be:52:71:73:
         3d:eb:80:a8:27:4e:6d:8d:16:a2:db:f8:37:f1:42:be:a5:3b:
         72:64:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org