Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37302e302f32332d3233203d3e203532373438.roa
File:                     3137372e3135352e37302e302f32332d3233203d3e203532373438.roa (raw, json)
Hash identifier:          IohuP3ODLNh9Yv7XxwkRyvWGKl01VM/t+LuOnpQJYew=
Subject key identifier:   9C:7A:3E:5F:4E:54:20:8C:4E:7E:6E:31:66:D4:51:8B:A4:58:E4:49
Certificate issuer:       /CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
Certificate serial:       6B4267ACCB64523DA156B8BB8A40C6D6A91E94F4
Authority key identifier: 4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37302e302f32332d3233203d3e203532373438.roa
Signing time:             Mon 15 May 2023 20:42:11 +0000
ROA not before:           Mon 15 May 2023 20:37:11 +0000
ROA not after:            Mon 13 May 2024 20:42:11 +0000
asID:                     52748
IP address blocks:        177.155.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:42:67:ac:cb:64:52:3d:a1:56:b8:bb:8a:40:c6:d6:a9:1e:94:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
        Validity
            Not Before: May 15 20:37:11 2023 GMT
            Not After : May 13 20:42:11 2024 GMT
        Subject: CN=9C7A3E5F4E54208C4E7E6E3166D4518BA458E449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0d:a0:f7:a6:ff:9f:e6:e4:de:2a:0b:7a:6c:
                    5f:84:41:b3:c5:15:85:8e:1e:b3:fd:fa:e3:10:5c:
                    4a:6b:7e:7d:aa:4a:a4:ad:76:0f:40:15:53:18:cd:
                    13:99:ce:50:9e:38:c6:8f:4c:51:43:c0:f2:26:e8:
                    0b:2f:31:8c:e9:3a:ed:56:68:f5:2c:2f:72:30:ad:
                    45:4e:cf:96:c2:fe:b1:92:b2:24:a6:2a:ea:4e:6a:
                    40:c4:8c:d9:8b:a8:1b:a7:2e:c5:6e:b8:17:e8:87:
                    89:e1:35:86:eb:55:bf:75:ae:96:b1:5e:ea:61:c0:
                    8e:76:7b:2b:bc:c0:c5:23:03:7e:4b:e9:cc:dc:ae:
                    69:7a:32:52:21:f7:79:60:e6:3e:1b:c4:d4:db:2e:
                    e0:7d:95:d4:dc:49:fd:5a:92:a0:ec:a0:0d:79:e7:
                    32:aa:07:a5:76:21:33:e6:07:ff:f8:4f:38:99:e8:
                    ab:93:b0:39:40:db:9f:3a:f9:d4:22:9c:2d:6e:f6:
                    a3:db:3a:17:6e:5f:e1:58:f4:21:d3:e9:95:1c:27:
                    a0:f9:5b:43:25:ff:ea:90:8a:ed:21:49:d6:ab:ab:
                    d8:7b:63:ec:86:6d:b5:16:cc:9b:e8:3a:f1:4f:3f:
                    3a:0e:a8:99:b6:5f:d4:fa:51:ec:04:83:5e:ea:82:
                    db:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7A:3E:5F:4E:54:20:8C:4E:7E:6E:31:66:D4:51:8B:A4:58:E4:49
            X509v3 Authority Key Identifier:
                keyid:4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37302e302f32332d3233203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:c5:c9:0b:2d:34:f2:d6:c2:e7:55:e0:bb:f7:ae:71:b4:f7:
         4e:3b:f6:cc:42:63:2f:23:1d:a7:5b:64:7e:e0:c2:bc:a9:0d:
         36:13:13:ac:4b:54:ba:0f:3b:a5:45:98:c3:4c:00:fc:3e:fb:
         83:db:9f:9a:20:eb:6f:b3:ce:3e:42:71:a3:c2:8a:81:6a:6d:
         0c:32:f4:dc:60:ee:a3:80:13:b1:0e:68:2b:20:f1:19:1c:9c:
         51:11:0f:ac:bf:e2:c6:70:e4:00:30:21:6a:54:a9:f7:bc:34:
         4a:59:4d:be:f3:46:7b:8e:87:18:cc:e3:9e:a9:85:58:2a:5b:
         ee:0e:34:54:b1:b9:76:a7:94:8c:17:bf:8c:32:a0:f4:7d:bd:
         47:ba:28:6e:f4:8a:b0:cd:77:49:bb:14:8c:9f:2d:8b:df:2a:
         dc:3b:9f:17:91:cd:eb:dc:bd:97:3c:0f:b8:d3:ac:5b:89:5e:
         79:0f:18:a5:ff:51:b7:c3:0f:8e:59:de:e4:7d:42:bc:2b:f5:
         0b:f2:a0:0b:81:cf:e4:b4:a1:89:6e:95:b6:e0:ac:0f:c7:34:
         11:ee:b0:26:73:d6:80:df:ad:53:85:aa:6b:8a:e8:50:00:71:
         fa:78:e3:20:f6:95:43:0b:ba:83:9e:e8:d1:1a:ea:66:57:de:
         1e:de:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org