Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37362e302f32332d3234203d3e203532373438.roa
File:                     3137372e3135352e37362e302f32332d3234203d3e203532373438.roa (raw, json)
Hash identifier:          VcQ+rCNcbt9KvP1VR3CPwOEbw1rDkC04z7yvIKKbQ2s=
Subject key identifier:   A9:27:A6:08:0E:8C:6D:BB:BC:6E:96:61:0D:52:F3:8E:5D:6C:E7:8C
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       36DED31499A56C230DBDC3F1CE0D2B22AB97F00F
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37362e302f32332d3234203d3e203532373438.roa
Signing time:             Fri 19 May 2023 13:33:55 +0000
ROA not before:           Fri 19 May 2023 13:28:55 +0000
ROA not after:            Fri 17 May 2024 13:33:55 +0000
asID:                     52748
IP address blocks:        177.155.76.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:de:d3:14:99:a5:6c:23:0d:bd:c3:f1:ce:0d:2b:22:ab:97:f0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 19 13:28:55 2023 GMT
            Not After : May 17 13:33:55 2024 GMT
        Subject: CN=A927A6080E8C6DBBBC6E96610D52F38E5D6CE78C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:f9:76:04:24:74:58:19:9f:ac:7b:73:f7:
                    5e:af:19:6d:f7:0c:fa:65:9f:c4:31:28:fa:c6:64:
                    77:eb:b1:ec:ea:0e:9d:9f:b7:ce:00:18:96:80:6d:
                    87:f8:d4:ba:99:0e:df:72:89:c2:19:e5:b3:22:84:
                    72:49:1a:c2:8b:37:85:73:26:4f:1b:58:02:60:35:
                    e4:9c:77:cc:57:fd:4c:8b:6a:93:99:3a:e8:db:b9:
                    d6:17:c5:f6:d7:09:5a:1a:24:5d:70:2d:6c:59:99:
                    61:b9:c7:88:5a:72:da:a4:b0:96:9c:ac:44:66:e2:
                    aa:9a:d9:54:c3:3c:71:e9:a5:9e:db:e4:68:4f:51:
                    8e:13:ac:57:b5:1c:76:1d:cd:72:f5:dd:16:91:ef:
                    84:8f:2d:2a:8e:54:ef:c1:db:ae:48:b7:ad:f3:19:
                    9b:29:de:cd:df:97:35:f9:9d:e3:1d:ec:ae:bd:d5:
                    fe:52:6f:01:7a:1b:c2:f0:e3:bf:1c:2f:59:83:59:
                    89:ca:dd:47:e0:06:28:62:2a:34:d5:3a:cd:2b:62:
                    42:97:57:26:95:9a:ac:af:64:80:e1:ce:30:3b:89:
                    98:eb:5a:74:87:28:38:f8:5d:89:12:32:a1:e0:54:
                    35:f0:d4:af:05:14:dc:b2:38:fc:95:1d:94:7e:78:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:27:A6:08:0E:8C:6D:BB:BC:6E:96:61:0D:52:F3:8E:5D:6C:E7:8C
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/3137372e3135352e37362e302f32332d3234203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:05:f2:85:14:e4:50:e7:5e:00:91:35:16:ce:74:53:a4:93:
         b3:b8:97:e9:e0:44:81:7e:cd:4f:93:fe:05:e2:91:13:b2:c7:
         be:74:fc:ca:54:9f:ba:85:e8:e9:32:5a:96:6b:e6:a8:69:78:
         23:d3:4a:d9:a5:53:d4:50:c7:ea:95:d8:0d:a8:8c:2d:2e:20:
         11:7e:d0:0e:bf:6a:e7:16:d1:b6:05:e6:48:91:fe:b6:99:7f:
         c8:c4:db:32:8a:62:75:cc:d4:cd:b4:8f:9d:c2:56:f6:fb:d0:
         0a:ed:7f:9f:dd:f1:e2:39:8d:64:2d:bc:70:f7:35:67:2c:43:
         15:1a:c6:3a:f5:2d:cc:24:85:5d:31:08:13:e9:ed:f9:0b:bd:
         41:11:be:24:72:88:ac:3b:35:e9:7d:4c:23:4a:4d:29:90:86:
         b5:3a:ad:60:8b:6c:78:4d:cf:19:c1:1f:ee:b2:dc:41:ba:37:
         69:dd:e7:0f:cb:fd:e5:4c:3c:04:cb:17:94:91:09:ee:43:83:
         fb:c4:44:b3:77:ea:44:81:0f:f5:3f:9d:a5:11:fc:5a:0e:7f:
         42:78:11:a6:64:2b:bb:21:b4:56:31:c4:63:c8:c1:2a:52:52:
         bb:76:49:a7:8e:93:c8:5c:43:1a:05:2c:8a:80:26:79:b1:88:
         75:36:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org