Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/3137372e3135352e36382e302f32332d3234203d3e203532373438.roa
File:                     3137372e3135352e36382e302f32332d3234203d3e203532373438.roa (raw, json)
Hash identifier:          uaMlC3SiTBiFWcASBMMCJO7UNNJOkNLU7mAdz3spPbs=
Subject key identifier:   96:16:79:E8:AD:48:2E:79:D9:2E:D0:18:A4:24:27:D0:0C:F4:15:DF
Certificate issuer:       /CN=1FB291BA7D5A8F08747CB53CB52D3920F5FB9577
Certificate serial:       77E84F88F7B18CDC7C3CABE30B5E7069A4952841
Authority key identifier: 1F:B2:91:BA:7D:5A:8F:08:74:7C:B5:3C:B5:2D:39:20:F5:FB:95:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/3137372e3135352e36382e302f32332d3234203d3e203532373438.roa
Signing time:             Fri 01 Mar 2024 12:33:42 +0000
ROA not before:           Fri 01 Mar 2024 12:28:42 +0000
ROA not after:            Fri 28 Feb 2025 12:33:42 +0000
asID:                     52748
IP address blocks:        177.155.68.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e8:4f:88:f7:b1:8c:dc:7c:3c:ab:e3:0b:5e:70:69:a4:95:28:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FB291BA7D5A8F08747CB53CB52D3920F5FB9577
        Validity
            Not Before: Mar  1 12:28:42 2024 GMT
            Not After : Feb 28 12:33:42 2025 GMT
        Subject: CN=961679E8AD482E79D92ED018A42427D00CF415DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:c4:e4:77:7c:c7:5c:e8:0e:9d:ae:40:09:
                    8c:ac:d9:47:8d:82:48:a8:11:7b:ec:a9:b8:7d:d8:
                    ce:8e:3c:db:55:f6:dc:bd:d6:f6:fe:02:17:6e:c2:
                    d8:36:ab:71:26:42:ec:5c:5b:8e:67:8a:f4:da:25:
                    d5:27:7d:c0:1a:00:76:59:a9:43:4c:69:60:b3:53:
                    20:1a:a5:38:d6:85:aa:95:6e:f2:7a:48:8c:98:88:
                    d1:f6:4d:37:56:27:e9:db:00:96:a2:c8:bc:bf:36:
                    59:74:18:bc:30:62:ba:aa:0d:28:b5:04:4a:39:02:
                    6c:7b:50:51:2b:81:a6:75:06:39:32:d7:05:00:d8:
                    51:1e:e4:84:15:22:8c:4e:10:f0:57:34:b0:46:c5:
                    23:ac:17:0d:06:f7:ad:39:69:97:ad:42:6d:2f:9f:
                    38:ae:c4:d7:94:fe:ec:53:9e:83:b1:75:78:a0:95:
                    0e:3a:b5:a9:41:34:d2:1d:41:af:90:1b:51:eb:2b:
                    e2:e3:0a:9d:4e:91:ae:f6:81:f2:d6:f4:03:59:7c:
                    3a:e2:e5:ca:c8:ca:16:ba:95:1a:bb:cf:3d:98:55:
                    82:8d:02:36:4a:1e:b2:24:87:59:a1:f4:16:62:35:
                    c5:76:99:18:35:ff:d8:6c:3b:69:42:60:58:17:23:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:16:79:E8:AD:48:2E:79:D9:2E:D0:18:A4:24:27:D0:0C:F4:15:DF
            X509v3 Authority Key Identifier:
                keyid:1F:B2:91:BA:7D:5A:8F:08:74:7C:B5:3C:B5:2D:39:20:F5:FB:95:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/3137372e3135352e36382e302f32332d3234203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:5e:95:8d:9e:c9:a9:7c:79:9a:70:ff:01:e7:db:18:51:
         51:89:6c:97:14:69:f3:f9:eb:68:62:dc:0f:1f:58:a2:8c:38:
         d7:24:ec:9f:b2:d9:e5:c4:ba:77:1d:ff:1d:f2:cb:4f:b0:b0:
         a7:35:03:be:61:23:6a:93:eb:71:b7:63:e1:c9:75:3e:73:ad:
         27:0b:d0:8d:2d:41:1a:42:23:9e:6d:a3:87:4f:10:c6:c6:b5:
         32:56:fb:6c:b3:64:cf:a5:d9:b3:18:4a:8f:b4:fa:fe:21:88:
         3e:1c:59:7e:04:70:95:28:82:ab:d0:72:c4:73:3a:38:8b:2e:
         39:9a:5f:5a:d3:73:74:78:ac:0f:6e:65:19:b3:00:8e:65:07:
         f7:ae:6c:3b:ef:f2:c9:fd:5b:d4:85:74:be:1e:8f:01:9c:f2:
         d7:59:7c:1d:9a:d7:fc:e8:07:a0:a2:a3:84:80:15:fc:17:d2:
         84:cf:9f:cb:c3:27:95:bd:17:c4:2f:fa:24:f2:c8:68:0a:43:
         9a:dd:6a:19:08:3f:40:1c:04:cc:bd:04:79:6a:8e:00:44:ec:
         3a:a0:c3:d5:b0:ce:ee:46:c4:de:e1:b7:2b:29:80:49:61:fd:
         93:b0:ba:40:d5:01:8f:0c:25:d2:5f:e8:8a:92:63:d4:85:eb:
         70:c3:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org