Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e36342e302f32322d3232203d3e203532373438.roa
File:                     3137372e3135352e36342e302f32322d3232203d3e203532373438.roa (raw, json)
Hash identifier:          32E+dohCTUUWpNKieuWwnwp3r6m63fXVa7Q6gfRa/Mk=
Subject key identifier:   BC:53:85:0B:64:22:E6:85:24:68:C3:C0:CB:3C:9E:1E:B5:2F:4E:1D
Certificate issuer:       /CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
Certificate serial:       491A13F116FB95AAAB95938140C2A82A19EEFB31
Authority key identifier: 4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e36342e302f32322d3232203d3e203532373438.roa
Signing time:             Mon 15 May 2023 20:41:56 +0000
ROA not before:           Mon 15 May 2023 20:36:56 +0000
ROA not after:            Mon 13 May 2024 20:41:56 +0000
asID:                     52748
IP address blocks:        177.155.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1a:13:f1:16:fb:95:aa:ab:95:93:81:40:c2:a8:2a:19:ee:fb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
        Validity
            Not Before: May 15 20:36:56 2023 GMT
            Not After : May 13 20:41:56 2024 GMT
        Subject: CN=BC53850B6422E6852468C3C0CB3C9E1EB52F4E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:c7:ef:d4:96:87:39:0d:94:87:97:5d:9d:
                    db:ce:c6:36:08:f8:04:e3:d3:19:4b:e3:c1:b4:6d:
                    c4:90:4b:6d:7c:f6:0b:2f:7f:03:42:12:a6:b3:7b:
                    87:5d:fd:d8:ca:db:1f:51:c5:78:31:df:7e:15:33:
                    2e:36:5e:c9:43:8f:04:93:6f:44:95:16:a3:b5:05:
                    4b:1f:9e:30:83:a2:66:38:d7:64:fe:35:a6:54:0b:
                    c4:e9:a8:43:81:44:5f:33:a8:f6:e0:30:f0:21:a6:
                    8c:3a:b6:4a:04:c7:b4:3a:d2:36:6e:6f:db:af:08:
                    2e:b9:b3:5c:f3:e8:65:82:51:a1:01:d7:ba:fd:51:
                    82:a6:92:b1:fe:d4:f8:d8:04:6e:76:2a:25:82:99:
                    ee:85:93:83:7a:79:28:a4:ba:57:be:f4:db:56:cb:
                    6d:f3:99:28:27:7c:3c:e4:9a:57:d6:be:15:8f:3d:
                    0f:3b:f1:cb:01:d6:54:df:2c:08:2f:7f:eb:74:5f:
                    55:57:30:2f:f9:83:b7:84:f0:39:5d:e2:76:87:7b:
                    24:53:d6:76:bd:6c:01:5c:8a:7c:99:99:6c:35:32:
                    56:9d:ba:fc:38:06:be:95:f7:23:10:2d:2f:90:5c:
                    df:48:b2:e3:ca:c2:76:41:83:04:d6:cc:1a:8e:87:
                    16:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:53:85:0B:64:22:E6:85:24:68:C3:C0:CB:3C:9E:1E:B5:2F:4E:1D
            X509v3 Authority Key Identifier:
                keyid:4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e36342e302f32322d3232203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:69:c4:8b:63:84:5b:6d:17:7f:fa:0e:b9:28:40:53:7f:75:
         2e:94:e3:82:57:88:f6:7e:ca:ac:00:f0:59:b7:a4:30:56:c1:
         16:6e:04:2d:b8:62:f1:e2:dd:d9:de:12:c2:25:57:58:2b:ac:
         3a:a7:eb:14:b6:10:96:fc:6b:28:e1:e0:72:69:0a:1d:78:1e:
         f4:61:06:4b:82:86:f3:25:db:00:a5:87:2a:15:76:37:a8:a3:
         6a:e7:8c:51:2e:0a:48:44:0e:ac:0b:5e:22:42:5e:2f:ab:19:
         da:53:4a:67:70:38:d1:0b:1d:ff:0c:0c:1c:96:4f:55:df:28:
         a0:d2:5d:9c:7a:5a:14:11:99:f6:40:c0:6d:53:c3:bb:91:3f:
         a3:3d:53:25:08:de:2b:dc:3b:d0:8d:c6:e9:1e:08:2a:fd:d0:
         53:a6:de:aa:7a:35:ab:d6:96:9f:9c:11:fb:c1:72:ef:86:00:
         68:de:23:36:6d:63:d0:bb:f5:61:c0:d6:ff:90:04:46:3f:b9:
         3c:7c:16:25:96:5a:3e:b9:31:59:3c:ab:43:5f:35:6b:5a:22:
         95:49:8c:40:4b:50:eb:bc:ed:e4:d1:66:14:3a:e4:4c:e7:d7:
         b3:75:f3:35:62:9d:6d:cb:00:4d:a9:9d:d8:f8:79:ce:33:b2:
         af:e5:3c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org