Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3235332e302f32342d3234203d3e203532373438.roa
File:                     3137372e3133372e3235332e302f32342d3234203d3e203532373438.roa (raw, json)
Hash identifier:          SN0p+hhIGNmXpKDQhF8jHJ4cjfqn7Z6e+zx+n6VxlCA=
Subject key identifier:   DC:43:F1:01:C4:22:CF:EE:8C:A0:03:10:B0:0B:7D:FD:5D:53:5E:EA
Certificate issuer:       /CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
Certificate serial:       7520338CE6EE9E6B3CE865C34661C1477E55C6FF
Authority key identifier: 4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3235332e302f32342d3234203d3e203532373438.roa
Signing time:             Mon 15 May 2023 20:41:46 +0000
ROA not before:           Mon 15 May 2023 20:36:46 +0000
ROA not after:            Mon 13 May 2024 20:41:46 +0000
asID:                     52748
IP address blocks:        177.137.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:20:33:8c:e6:ee:9e:6b:3c:e8:65:c3:46:61:c1:47:7e:55:c6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
        Validity
            Not Before: May 15 20:36:46 2023 GMT
            Not After : May 13 20:41:46 2024 GMT
        Subject: CN=DC43F101C422CFEE8CA00310B00B7DFD5D535EEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:b5:1a:d5:a4:02:c9:75:24:8b:fc:43:f9:
                    52:8b:18:ea:32:a0:84:2a:5c:ab:6e:50:bf:ff:94:
                    51:ef:92:9d:f0:aa:6b:91:d3:82:ed:35:e6:7b:8f:
                    77:6f:6a:ca:df:77:67:22:fe:6e:a6:38:99:98:2c:
                    62:7e:5f:0d:a6:2f:bc:a4:57:24:4d:07:d2:de:62:
                    b1:b2:72:37:eb:2b:39:a5:5a:da:30:5e:67:db:54:
                    d8:56:6a:8d:51:0f:9f:7b:1b:32:b5:a4:d2:5a:24:
                    16:9b:77:52:70:06:75:4b:b4:03:01:4b:03:e4:69:
                    48:26:c5:c7:37:bb:d6:0e:7b:a1:ca:8b:04:81:9c:
                    e8:7f:01:44:77:78:24:34:f4:e6:ee:c3:76:60:db:
                    d7:e2:25:ee:83:b7:81:75:90:2c:0e:db:c9:eb:8e:
                    18:35:d7:61:f5:7b:6b:68:20:8b:45:9a:61:12:05:
                    20:e2:a9:79:23:93:95:ae:ba:0d:54:fe:14:42:d8:
                    c8:14:a7:98:5c:06:34:d8:cd:75:b1:ba:36:39:3a:
                    49:20:63:74:59:cb:f0:bc:6c:43:54:5d:23:ae:ae:
                    32:8d:3f:71:e8:0c:2e:4d:92:1d:60:bb:67:9d:ce:
                    6f:f4:d1:62:68:33:5d:a3:cd:4b:13:c9:c3:58:b8:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:43:F1:01:C4:22:CF:EE:8C:A0:03:10:B0:0B:7D:FD:5D:53:5E:EA
            X509v3 Authority Key Identifier:
                keyid:4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3133372e3235332e302f32342d3234203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:9f:07:8e:b6:28:a2:0c:04:8d:3b:ae:02:a2:5b:d8:c8:19:
         5b:3b:3f:45:68:c8:cd:29:3e:e5:1c:4a:7f:a9:b7:cc:25:ed:
         1b:58:75:c9:39:6f:a5:65:bb:80:e1:08:ce:a5:11:14:7a:93:
         26:b4:58:7f:3d:3d:e9:cb:f2:e2:15:9a:b7:78:f2:19:f5:6f:
         9c:90:20:5f:72:35:78:26:bb:8a:fb:49:0b:01:69:01:14:53:
         f2:20:24:5b:76:bb:a7:1b:ce:11:4b:23:64:ae:4c:c2:ed:4d:
         11:9d:cc:8b:b6:4a:42:73:4c:4b:5b:7f:b0:02:31:7a:f6:bf:
         41:08:d3:68:c1:da:d9:7d:b7:a4:e2:4e:32:04:34:b3:d1:4f:
         8f:17:71:72:e5:4d:dc:b7:d2:6c:22:e4:e4:eb:7c:a7:c5:05:
         a6:80:d0:f1:6c:6e:2e:a2:77:4d:1a:ed:33:3e:e1:53:c8:3f:
         65:30:d1:13:d3:03:50:70:46:f9:dd:8e:d9:a0:bf:1b:52:89:
         cf:ee:50:76:0f:63:11:13:9a:88:4d:1a:76:7a:2f:94:fb:1c:
         f5:57:04:af:c3:a9:e3:0d:d6:2d:e8:fe:ce:bb:fc:14:00:19:
         9e:d2:79:bc:85:2d:c1:65:53:ed:49:5b:06:f0:9e:ea:50:7b:
         0a:21:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org