Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa
File:                     3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          urtnpucaRCXaUXIB6ttk98kw5ymiW+3l7s0Juyrt9JE=
Subject key identifier:   3B:E6:3B:6B:AA:DC:FF:EF:F0:30:28:82:96:F0:07:EA:70:EE:2B:4F
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       10C1BB6086B0C96E2DA486068DA0243F585E02AC
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa
Signing time:             Mon 22 May 2023 16:57:59 +0000
ROA not before:           Mon 22 May 2023 16:52:59 +0000
ROA not after:            Mon 20 May 2024 16:57:59 +0000
asID:                     267301
IP address blocks:        177.155.76.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c1:bb:60:86:b0:c9:6e:2d:a4:86:06:8d:a0:24:3f:58:5e:02:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 22 16:52:59 2023 GMT
            Not After : May 20 16:57:59 2024 GMT
        Subject: CN=3BE63B6BAADCFFEFF030288296F007EA70EE2B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:ff:cc:4a:b1:98:31:d2:1d:51:4a:5f:ef:
                    3b:57:60:4b:26:29:28:bc:76:f6:0b:ba:18:3a:75:
                    6d:8c:51:80:61:11:6d:22:c9:ba:09:b1:98:01:b7:
                    64:06:b1:c4:a5:55:b4:60:06:3a:22:e0:8a:29:0a:
                    ba:10:cb:ef:c1:4b:ce:12:7c:3f:0a:ee:b9:f7:16:
                    0e:e9:ec:7e:8a:93:68:18:6d:6b:19:b0:d4:3e:a8:
                    23:54:55:cb:ce:37:d8:e3:b1:be:32:62:10:60:fb:
                    a5:94:ce:05:0f:ad:9e:9f:b1:2a:45:2a:8b:c9:04:
                    38:62:68:d1:79:50:15:7d:32:b8:a2:99:90:e5:a9:
                    29:c8:81:7f:6f:61:4d:75:89:53:92:a8:23:76:11:
                    89:8b:a8:96:36:75:e6:7a:3f:b8:f4:73:a7:84:e7:
                    c7:cd:f8:8a:d9:1f:e8:83:38:3c:c6:33:e3:81:cf:
                    ee:c2:36:84:9d:26:7b:f6:89:c5:88:ac:2d:13:2a:
                    5c:7a:9d:7a:0c:59:3b:73:05:bb:9d:54:4d:8d:f4:
                    35:3a:5e:f6:7d:28:70:77:08:e7:e0:b7:3c:8d:20:
                    fd:db:05:6a:58:e1:0c:64:d1:f6:48:d5:d6:d4:ba:
                    40:4e:f8:7e:29:f5:63:52:db:ea:a0:09:c6:aa:6a:
                    e3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E6:3B:6B:AA:DC:FF:EF:F0:30:28:82:96:F0:07:EA:70:EE:2B:4F
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:f2:ca:05:c4:98:76:ad:98:42:90:76:d4:30:85:7e:77:
         b8:90:58:e0:2a:72:72:79:fc:c0:df:36:92:50:17:5c:84:88:
         6b:9f:19:96:3b:49:5e:5d:1c:2e:0e:88:07:fd:da:26:73:31:
         35:a0:8b:a5:97:a9:d5:1a:6b:25:1d:b9:88:d1:57:52:e7:c7:
         b9:0e:02:e0:05:b4:1a:70:15:d0:4e:74:28:f3:c5:11:05:97:
         c5:e6:c7:52:43:a9:f9:07:25:01:a9:7e:ed:d2:4c:f0:08:9b:
         29:20:fd:4e:34:18:ac:2b:c1:6f:8e:ec:5d:b4:e9:a4:a1:f9:
         2f:83:38:70:dc:b8:fa:2f:60:68:4f:5c:53:b8:26:c2:47:c2:
         f3:c5:7f:57:9c:03:10:23:6d:7e:a5:60:e1:87:3c:9a:e2:0d:
         29:01:8f:e1:56:ee:5d:a6:a0:17:a0:99:3e:37:da:6f:f4:4a:
         db:dc:fc:d6:fd:b8:a6:15:ea:05:45:9b:2e:a2:8d:ad:52:b6:
         c9:b2:b1:eb:41:35:01:b7:4c:b9:c3:1b:22:66:ce:dd:60:e1:
         83:c9:e6:ff:6d:2c:de:32:93:76:06:26:0e:67:91:ff:38:62:
         ec:a5:1f:5b:20:c1:90:cb:e0:39:9d:6b:de:44:7a:37:d9:44:
         20:68:48:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org