Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/3137372e33382e3139322e302f32312d3234203d3e20323632343039.roa
File:                     3137372e33382e3139322e302f32312d3234203d3e20323632343039.roa (raw, json)
Hash identifier:          wqpP8g91Tf8Bfw07uyFTP5o5VQUqigzg4A1qwSHDzJI=
Subject key identifier:   CA:41:DB:5F:AF:4B:99:9E:39:FB:54:47:95:D5:47:80:92:86:45:FD
Certificate issuer:       /CN=CDBB2AB6D632E955A756955729107E2352C882ED
Certificate serial:       7807FDD5DA1865F1DE655A69974050A8CAE2C4D5
Authority key identifier: CD:BB:2A:B6:D6:32:E9:55:A7:56:95:57:29:10:7E:23:52:C8:82:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDBB2AB6D632E955A756955729107E2352C882ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/3137372e33382e3139322e302f32312d3234203d3e20323632343039.roa
Signing time:             Thu 04 Apr 2024 18:00:00 +0000
ROA not before:           Thu 04 Apr 2024 17:55:00 +0000
ROA not after:            Thu 03 Apr 2025 18:00:00 +0000
asID:                     262409
IP address blocks:        177.38.192.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:07:fd:d5:da:18:65:f1:de:65:5a:69:97:40:50:a8:ca:e2:c4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDBB2AB6D632E955A756955729107E2352C882ED
        Validity
            Not Before: Apr  4 17:55:00 2024 GMT
            Not After : Apr  3 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:aa:7f:76:c4:89:95:22:b1:a1:9a:14:97:
                    64:f7:7a:7b:c9:77:48:22:8d:e8:74:c5:3a:ae:43:
                    b5:ad:b6:1d:91:9b:7b:ab:8a:bd:ef:69:4a:4b:65:
                    7b:47:95:34:cb:8f:2e:32:40:23:51:33:68:10:12:
                    2b:36:fc:10:bc:72:d6:58:55:4f:8a:16:1f:37:c2:
                    88:67:3b:13:ad:ce:48:09:b2:4b:2b:3c:32:34:63:
                    0f:dc:da:06:5f:d4:fc:da:c9:36:5b:9a:de:cb:54:
                    a4:29:ed:64:f1:8f:24:f5:65:94:3f:1d:04:72:d2:
                    70:cb:83:f6:73:f3:38:0e:98:65:c7:c1:83:46:57:
                    db:68:a3:e7:b4:59:67:b2:92:06:1c:c7:08:2e:a4:
                    93:41:78:94:c6:5b:9f:32:7f:d9:80:3c:43:b8:59:
                    33:eb:e2:07:0a:b7:04:4b:1d:67:2a:50:fa:11:79:
                    a6:fe:ba:5d:4d:4c:14:4c:0e:10:bf:e0:a5:30:13:
                    26:17:2c:b4:a5:16:e7:9a:1b:ca:c7:26:0b:fe:f2:
                    69:2d:2d:1a:8d:48:d4:eb:b1:d1:71:49:d9:0a:44:
                    24:22:df:45:6e:38:bd:d5:31:38:c1:5e:94:81:fb:
                    75:f4:dc:ce:64:37:76:e8:2b:6c:cb:f8:ff:83:61:
                    99:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:41:DB:5F:AF:4B:99:9E:39:FB:54:47:95:D5:47:80:92:86:45:FD
            X509v3 Authority Key Identifier:
                keyid:CD:BB:2A:B6:D6:32:E9:55:A7:56:95:57:29:10:7E:23:52:C8:82:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/CDBB2AB6D632E955A756955729107E2352C882ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDBB2AB6D632E955A756955729107E2352C882ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/3137372e33382e3139322e302f32312d3234203d3e20323632343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:08:30:77:ff:8a:8c:70:62:0b:62:6b:50:6f:3f:d1:3d:3f:
         ed:d2:c3:e3:b9:be:ec:9b:47:09:ed:f4:cf:93:fb:f1:c3:42:
         54:97:4e:38:b2:4b:84:d2:6b:c5:06:e0:11:58:65:99:cb:93:
         81:38:bb:87:34:c6:93:1f:69:1a:9e:9c:62:59:6b:f5:67:d4:
         61:20:04:bb:c0:23:11:ed:22:e7:29:54:2e:c8:98:f0:d3:14:
         ee:8c:c8:b2:b7:f4:3d:3f:8e:a7:fa:6d:ce:48:1a:4a:43:d2:
         fc:6b:ac:58:b1:b0:88:fb:1e:5d:6e:bc:bf:f5:2e:9b:2c:f2:
         28:86:cf:cf:d8:33:80:a9:34:6c:eb:37:81:a3:9f:87:4a:cf:
         09:46:d6:73:9c:22:99:e8:af:58:e4:84:64:f5:37:7d:13:fa:
         82:4f:b1:e6:9b:23:19:e1:c8:2b:5a:cf:fc:06:a1:c6:c4:ac:
         ec:4a:d5:a6:d2:8e:56:0e:e7:bd:91:7f:cf:ee:08:e2:9c:3e:
         e4:20:5c:af:82:16:2e:5b:c5:e2:77:0c:71:1e:0c:a4:c8:78:
         be:78:67:bd:d5:73:0d:dc:e5:05:b7:3b:68:a3:ad:fe:14:dc:
         69:d6:cc:82:7b:f1:34:f6:b8:3b:f3:2b:b6:bf:fe:3a:2b:78:
         90:80:2c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org