Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232312e302f32342d3234203d3e203532363739.roa
File:                     3137372e36372e3232312e302f32342d3234203d3e203532363739.roa (raw, json)
Hash identifier:          caruPluC4E/Xyjn8nwdQ4nDDB1fcfbhmaHLjddAz/lI=
Subject key identifier:   38:7A:44:C8:BF:CE:FB:FF:25:4B:82:95:DC:1B:98:93:F5:3F:93:4B
Certificate issuer:       /CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
Certificate serial:       6B2AF129D15DE9F41E880623252D06CFDB165A10
Authority key identifier: DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232312e302f32342d3234203d3e203532363739.roa
Signing time:             Tue 22 Aug 2023 15:33:01 +0000
ROA not before:           Tue 22 Aug 2023 15:28:01 +0000
ROA not after:            Tue 20 Aug 2024 15:33:01 +0000
asID:                     52679
IP address blocks:        177.67.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2a:f1:29:d1:5d:e9:f4:1e:88:06:23:25:2d:06:cf:db:16:5a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341
        Validity
            Not Before: Aug 22 15:28:01 2023 GMT
            Not After : Aug 20 15:33:01 2024 GMT
        Subject: CN=387A44C8BFCEFBFF254B8295DC1B9893F53F934B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:ec:8e:56:b2:e6:f1:b5:ea:07:e4:57:70:
                    91:f6:53:8e:ec:f9:97:11:c8:96:49:b5:0b:27:09:
                    d3:4f:67:5d:ad:8d:46:ea:d1:8c:df:9d:bf:23:b5:
                    bb:5b:8e:34:b7:2d:a5:aa:be:e6:c2:d4:62:c9:17:
                    eb:6a:26:d3:bb:2f:83:10:8d:bb:6f:e0:ab:f4:cd:
                    dd:80:4f:31:dc:6f:42:f3:e5:0a:3d:40:b9:07:7e:
                    80:3a:b1:12:f3:2c:c7:2d:15:7e:11:42:1c:06:cf:
                    7d:5c:af:3e:82:e7:e8:65:f2:29:d0:1e:1d:99:0c:
                    54:93:37:31:a1:72:fc:a8:51:08:ac:2d:6f:55:eb:
                    8f:06:80:b3:ef:00:29:30:18:1a:b2:96:74:ac:fd:
                    7f:eb:a2:35:d2:35:87:b7:34:65:c7:a0:ef:83:8c:
                    b4:ee:a6:d8:23:d2:c9:18:4e:98:3d:91:71:2c:29:
                    95:d7:42:80:9b:d5:0d:b9:d5:b2:3a:ad:d6:92:f8:
                    a9:34:63:a6:fb:a7:a6:0b:fa:13:e8:c9:40:8a:d5:
                    73:12:19:29:23:84:de:15:4f:a5:dc:ee:3b:cc:aa:
                    24:ee:b2:af:87:82:f4:14:dc:9f:2b:3f:be:c4:e9:
                    4d:d8:f1:7d:b3:55:eb:07:5a:ac:c2:99:fa:e3:41:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:44:C8:BF:CE:FB:FF:25:4B:82:95:DC:1B:98:93:F5:3F:93:4B
            X509v3 Authority Key Identifier:
                keyid:DA:DA:4A:C5:F0:53:1D:7E:76:BB:66:5A:B3:FC:5A:86:BE:15:E3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DADA4AC5F0531D7E76BB665AB3FC5A86BE15E341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/3137372e36372e3232312e302f32342d3234203d3e203532363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:c0:f8:8d:12:63:e0:b7:96:e2:3c:d2:99:92:3b:61:e8:02:
         0e:03:5a:48:a9:34:ed:01:73:82:ce:d4:42:47:d4:7f:65:5a:
         05:97:f5:48:60:8e:ba:cb:2b:19:6e:fd:22:47:5e:3c:72:31:
         28:de:25:01:f0:4c:07:00:43:9e:19:92:06:6d:4d:48:6c:3d:
         1c:ca:e0:e2:6f:3f:63:99:76:74:82:f9:07:88:6c:f6:41:72:
         da:c2:2f:9a:90:ba:43:d2:1f:d7:14:79:25:12:04:ca:fb:c2:
         f9:67:81:f2:c0:c7:60:62:fe:7c:8e:48:59:82:fc:95:f0:b6:
         83:be:05:f1:fe:21:83:66:6e:c0:93:8b:f5:9e:ad:19:2f:01:
         81:fd:2e:a5:05:2f:fb:a5:e3:18:2d:1b:88:aa:7c:cf:fe:c3:
         5b:05:8e:c8:26:4b:a2:2c:da:1f:d9:75:8d:ba:d5:2a:4c:8e:
         72:4e:49:33:e3:37:50:cb:d4:38:7c:e0:a6:7e:1d:c9:32:ea:
         5c:11:fd:0a:0c:f5:cc:38:6b:03:af:b7:b6:6b:54:80:14:7a:
         e7:6b:f6:68:a3:a2:59:c8:53:ae:16:8e:9a:04:67:c8:b1:ad:
         a8:cc:f8:0e:5a:4a:f1:63:a6:eb:13:60:ce:80:50:ed:25:1c:
         fe:98:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org