Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3235322e302f32332d3233203d3e203532373438.roa
File:                     3137372e3133372e3235322e302f32332d3233203d3e203532373438.roa (raw, json)
Hash identifier:          k3nbIw09Ju/byrlfHO44G9jAgc/Uv9re++xAGu22qAo=
Subject key identifier:   01:8E:DE:64:9D:1E:4F:81:54:57:00:E1:E4:B3:7C:14:D8:02:21:91
Certificate issuer:       /CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
Certificate serial:       0B16ACB3CCA35D8F80CFB62E9E94F875C8E84BB7
Authority key identifier: 4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3235322e302f32332d3233203d3e203532373438.roa
Signing time:             Mon 15 May 2023 20:41:41 +0000
ROA not before:           Mon 15 May 2023 20:36:41 +0000
ROA not after:            Mon 13 May 2024 20:41:41 +0000
asID:                     52748
IP address blocks:        177.137.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:16:ac:b3:cc:a3:5d:8f:80:cf:b6:2e:9e:94:f8:75:c8:e8:4b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
        Validity
            Not Before: May 15 20:36:41 2023 GMT
            Not After : May 13 20:41:41 2024 GMT
        Subject: CN=018EDE649D1E4F81545700E1E4B37C14D8022191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:8b:a5:26:f6:05:5c:72:19:14:c0:af:f5:
                    9f:3a:bc:fe:df:98:8f:3e:d4:3f:89:f8:b8:a0:4b:
                    45:34:ce:70:55:25:a7:65:cb:22:38:20:61:e0:d2:
                    46:22:ca:8f:79:46:dd:64:c9:69:e5:79:8a:7c:19:
                    f3:6a:9f:5c:47:d1:9d:1d:d6:02:b6:c2:95:a0:4a:
                    ab:e0:82:82:82:46:f3:54:dc:af:16:df:ce:6a:5d:
                    fe:e5:f5:b9:c9:c0:d3:b8:e4:fc:42:6e:be:00:0b:
                    db:1a:aa:d6:ad:57:b7:7e:32:55:b8:f6:72:f0:2a:
                    56:10:aa:ad:64:21:b2:e4:76:9a:09:a6:5e:01:9a:
                    17:3f:71:28:a0:27:f0:45:b7:0a:c8:cf:bb:f2:89:
                    73:c5:3b:56:b5:b8:45:c7:3a:dd:06:3e:44:ba:79:
                    15:77:0d:88:fd:60:72:b5:da:65:aa:6a:54:66:99:
                    0d:94:ef:ca:fa:86:e7:7e:51:b0:1b:fe:7a:24:48:
                    1c:48:97:1f:42:9e:0c:ff:bc:aa:86:00:5e:c8:f6:
                    67:6b:3b:a1:00:bd:71:82:2d:c5:f3:c1:9e:f0:54:
                    d2:bd:1a:8e:0d:76:1e:69:82:98:65:ea:39:ab:f9:
                    a6:0f:cf:28:2a:96:07:01:e0:61:13:26:4b:11:fd:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:DE:64:9D:1E:4F:81:54:57:00:E1:E4:B3:7C:14:D8:02:21:91
            X509v3 Authority Key Identifier:
                keyid:4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3235322e302f32332d3233203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:c3:73:a5:f0:02:58:42:ca:0e:ef:8d:05:9b:84:ab:a5:03:
         4f:ef:c4:66:8b:7b:ce:95:87:7c:e0:05:d4:da:93:61:84:d2:
         83:88:3c:35:3b:8b:fb:62:a9:03:f7:ac:ec:e8:86:a0:c2:73:
         30:21:aa:5e:17:67:18:2d:0e:df:64:f7:0f:4e:d8:ee:96:48:
         fb:0b:2a:d2:6b:fc:98:84:c8:17:74:de:26:30:6a:07:40:b1:
         81:bf:ee:83:5d:6c:57:1c:46:b4:9c:22:75:7d:b5:a2:1f:9e:
         28:3d:8b:eb:34:45:8d:0b:34:43:49:c8:8c:2a:99:93:c4:9d:
         68:03:bc:8f:d0:85:43:17:f4:ea:1f:07:a6:58:f7:e6:97:d6:
         3f:af:0e:03:b6:c9:c1:af:68:1f:10:7e:b8:5c:8d:f8:6a:17:
         36:d2:a9:c6:bb:a2:c0:d4:bb:19:70:5b:8a:12:72:e2:c9:a8:
         8c:0d:40:89:fe:59:29:33:f2:36:0d:71:73:54:7d:73:29:87:
         f2:1d:08:7b:80:fc:b5:9c:67:20:e7:f2:76:81:50:e4:fe:5e:
         e7:f7:6d:f2:7f:ae:bf:31:c8:2f:03:b9:9e:a3:c0:d8:5f:97:
         a1:6a:d6:9f:75:1b:30:12:56:82:09:81:53:a5:ba:e7:ad:8a:
         d6:d8:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org