Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3235322e302f32322d3232203d3e203532373438.roa
File:                     3137372e3133372e3235322e302f32322d3232203d3e203532373438.roa (raw, json)
Hash identifier:          fvbJT7HcEbpbGFIeHRye6KRGawuJ4IRJr2l7vyGckss=
Subject key identifier:   4B:42:54:BA:72:E6:25:B0:25:E4:D7:B9:63:3D:0F:44:4A:85:0C:10
Certificate issuer:       /CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
Certificate serial:       2D7BFD33262706AB5B6BC25A45F36D87502A4B34
Authority key identifier: 4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3235322e302f32322d3232203d3e203532373438.roa
Signing time:             Mon 15 May 2023 20:41:39 +0000
ROA not before:           Mon 15 May 2023 20:36:39 +0000
ROA not after:            Mon 13 May 2024 20:41:39 +0000
asID:                     52748
IP address blocks:        177.137.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7b:fd:33:26:27:06:ab:5b:6b:c2:5a:45:f3:6d:87:50:2a:4b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
        Validity
            Not Before: May 15 20:36:39 2023 GMT
            Not After : May 13 20:41:39 2024 GMT
        Subject: CN=4B4254BA72E625B025E4D7B9633D0F444A850C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:08:e2:98:8d:7c:59:81:ac:de:b5:26:63:
                    2a:7e:22:2e:23:62:5c:70:39:8f:e3:e1:47:7b:f6:
                    81:ed:75:62:53:0b:4a:34:96:08:7f:ec:ea:37:f4:
                    b1:f4:9b:7b:e1:7c:7b:33:0f:22:13:e5:db:72:75:
                    45:81:26:94:86:f5:d8:d3:e7:32:80:99:b1:68:16:
                    f9:f6:fc:04:48:52:02:79:c9:be:5a:4f:62:35:f8:
                    2c:40:c4:e6:26:75:50:c1:c2:cf:9f:ef:aa:6e:38:
                    43:14:98:32:9a:0b:a5:ce:64:96:78:75:3c:4e:3e:
                    e0:f9:02:b6:e1:fb:09:42:32:3d:ee:5c:e0:41:9f:
                    0e:13:16:bb:a6:bb:56:f8:d3:8c:34:29:2f:c3:4d:
                    25:62:e9:af:64:02:77:21:3d:6b:be:bc:11:fc:48:
                    15:b2:a0:9d:f5:b0:76:1e:26:d8:14:f9:1e:e7:a2:
                    d5:4c:6d:7e:6c:ae:8e:df:84:a5:c3:d6:9d:e5:64:
                    58:51:43:a6:af:7f:6d:4f:ed:33:fa:0e:c3:a3:a1:
                    ba:b9:fa:7a:8d:19:14:55:47:ca:99:d5:d9:b9:66:
                    dc:b9:1d:d6:30:9d:a3:8f:38:1a:c8:21:ee:69:cc:
                    ce:14:3d:ac:c9:e3:e7:6b:85:d8:ba:a6:b3:51:ac:
                    43:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:42:54:BA:72:E6:25:B0:25:E4:D7:B9:63:3D:0F:44:4A:85:0C:10
            X509v3 Authority Key Identifier:
                keyid:4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3235322e302f32322d3232203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:7a:7b:e6:ca:8d:a3:89:6c:9a:ba:02:9c:26:6d:bb:6b:65:
         9e:ad:e0:fb:2f:15:14:17:f0:2b:f9:25:b3:71:9d:fd:ef:c3:
         49:b9:aa:e9:60:e0:00:ce:2c:06:fa:40:03:5f:3a:da:de:2a:
         0d:2e:77:bf:a4:bf:26:d1:e2:27:45:6a:c0:ae:78:f8:88:43:
         e6:49:77:15:33:d6:5d:24:60:20:07:1f:87:70:63:ce:30:75:
         97:7b:bc:80:3c:45:eb:e7:d4:ce:75:c7:84:ef:61:e6:90:64:
         65:16:19:8d:f5:d4:0d:96:ab:5c:ee:01:e1:10:26:b0:5a:67:
         38:2f:2a:03:ad:f9:61:5d:62:d5:0e:92:89:53:ce:d2:1c:6b:
         ab:00:da:67:a5:0d:3f:54:d0:51:f6:16:27:39:50:12:46:72:
         6e:43:06:4a:a6:ce:85:5e:7a:0b:70:9c:58:1a:a8:82:16:37:
         d7:26:6d:32:a7:6a:9f:a5:91:b7:2a:80:07:1c:08:d0:30:ff:
         19:88:f7:3b:7d:93:cc:84:97:f9:a6:77:76:69:ba:83:ef:f0:
         91:a4:19:ae:d6:f2:16:68:33:21:b6:98:f1:0b:f6:76:02:3f:
         b9:c3:42:a0:a8:07:90:01:f8:fc:6a:a7:8d:35:05:02:e3:7c:
         07:18:6a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org