Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37322e302f32322d3234203d3e203532373438.roa
File:                     3137372e3135352e37322e302f32322d3234203d3e203532373438.roa (raw, json)
Hash identifier:          f5DQdCRbW8z99rq41rZP4Wc1nXjnHJ8bCHYPKj4iZVI=
Subject key identifier:   30:18:4C:7A:7D:B1:8F:5B:BB:A6:46:12:2D:BB:9C:D7:7C:B6:C8:4F
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       74531CEC55F691E7986F61A27EA419C3D14C8B08
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37322e302f32322d3234203d3e203532373438.roa
Signing time:             Fri 19 May 2023 13:33:47 +0000
ROA not before:           Fri 19 May 2023 13:28:47 +0000
ROA not after:            Fri 17 May 2024 13:33:47 +0000
asID:                     52748
IP address blocks:        177.155.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:53:1c:ec:55:f6:91:e7:98:6f:61:a2:7e:a4:19:c3:d1:4c:8b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 19 13:28:47 2023 GMT
            Not After : May 17 13:33:47 2024 GMT
        Subject: CN=30184C7A7DB18F5BBBA646122DBB9CD77CB6C84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:4c:c5:8d:ba:08:ab:82:85:ed:85:4c:4a:
                    3e:45:e1:a6:6e:b1:21:45:1a:a5:1c:b7:4b:3a:82:
                    10:71:59:54:3d:de:ed:47:a0:7c:4f:4b:61:07:5a:
                    13:20:72:93:84:bd:40:d5:2a:cf:b5:26:98:1f:35:
                    61:1b:30:02:05:b0:c9:f8:b5:45:1e:04:e1:a4:16:
                    3a:5b:32:65:50:35:bc:28:94:fb:20:fb:8b:58:99:
                    b1:fb:c1:e7:93:72:c0:0b:1b:bc:5d:1d:92:2d:f3:
                    25:37:ef:f1:8b:b4:00:dc:34:f2:c9:4a:84:fb:53:
                    f2:dc:c3:5d:d0:2f:56:c2:14:94:bc:eb:1e:87:b7:
                    b7:22:5f:64:09:88:cc:77:37:9e:1b:6c:20:5a:b1:
                    f7:83:2c:75:70:6d:19:19:e6:63:ed:21:92:54:79:
                    98:f1:b4:da:78:d7:23:08:29:f0:e6:0f:9e:4e:c2:
                    99:85:0b:d3:50:f9:d0:05:91:43:f2:20:d8:8f:89:
                    d9:d8:1d:83:64:ae:e4:fd:cc:62:58:d5:d9:66:63:
                    ea:86:d2:b2:f0:74:39:cc:b9:6f:62:97:e0:13:dd:
                    99:2f:fc:42:aa:d4:8a:67:c1:1d:a7:4c:f4:bc:6a:
                    ea:00:94:db:75:02:90:5b:59:7c:c3:7c:b2:a8:c8:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:18:4C:7A:7D:B1:8F:5B:BB:A6:46:12:2D:BB:9C:D7:7C:B6:C8:4F
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37322e302f32322d3234203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:04:21:60:49:43:3d:50:07:3a:57:26:45:c8:6b:79:63:48:
         df:86:24:76:ad:19:64:91:18:b6:f8:ee:51:de:39:2f:33:b2:
         de:52:d3:ab:4b:a4:43:d8:8d:83:c1:df:ed:6e:84:46:11:18:
         11:ee:56:5e:de:5b:81:46:c1:f7:2e:5c:3a:c1:5e:c8:a1:11:
         21:a9:75:e6:60:cc:71:47:2f:43:0b:e2:c7:e5:ff:63:31:a0:
         52:4c:96:1e:7e:a1:2a:11:5c:0a:eb:ab:bd:52:62:81:12:2e:
         5b:33:8d:53:0b:d5:4e:30:0b:af:14:c1:3d:14:1a:5f:79:f4:
         f7:9c:9a:35:0a:45:1a:12:5d:d4:24:43:1d:d1:42:36:0b:79:
         e4:c9:7c:4d:a4:c2:2c:93:d5:f9:1a:6a:ca:16:83:78:e8:af:
         1f:af:30:f9:94:d4:18:d9:3e:e2:67:3f:72:ee:51:9b:83:9b:
         13:ea:8c:bf:c6:d9:f7:a8:60:7a:db:b8:e4:14:e2:59:ec:ce:
         c9:c3:9e:8a:62:23:93:6d:d4:3a:38:bb:99:ec:06:c7:81:b3:
         a7:ad:e6:1f:db:55:ca:ac:ec:4c:ea:02:eb:97:a0:55:8d:4d:
         15:7a:3e:9a:7e:a4:e6:8f:31:dc:fa:8f:f7:19:41:23:44:04:
         9e:56:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org