Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37322e302f32312d3231203d3e203532373438.roa
File:                     3137372e3135352e37322e302f32312d3231203d3e203532373438.roa (raw, json)
Hash identifier:          9JPheIUNBA5QUFxh4N2WnLq87NFi3otMNmUPE33ek68=
Subject key identifier:   01:E2:C9:32:E2:82:02:6F:94:81:94:89:5D:02:AA:C5:9D:3E:69:9D
Certificate issuer:       /CN=744C871E408F6C1C747A737D3AACACE3BFFA0A63
Certificate serial:       7D25E0AC5223CB8C44D2FAB3BBC16C9F3D769E74
Authority key identifier: 74:4C:87:1E:40:8F:6C:1C:74:7A:73:7D:3A:AC:AC:E3:BF:FA:0A:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/744C871E408F6C1C747A737D3AACACE3BFFA0A63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37322e302f32312d3231203d3e203532373438.roa
Signing time:             Tue 06 Dec 2022 18:00:06 +0000
ROA not before:           Tue 06 Dec 2022 17:55:06 +0000
ROA not after:            Tue 05 Dec 2023 18:00:06 +0000
asID:                     52748
IP address blocks:        177.155.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:25:e0:ac:52:23:cb:8c:44:d2:fa:b3:bb:c1:6c:9f:3d:76:9e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744C871E408F6C1C747A737D3AACACE3BFFA0A63
        Validity
            Not Before: Dec  6 17:55:06 2022 GMT
            Not After : Dec  5 18:00:06 2023 GMT
        Subject: CN=01E2C932E282026F948194895D02AAC59D3E699D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:08:03:d6:70:75:3a:74:80:d7:64:6a:33:
                    c7:20:c6:d6:72:f3:63:10:92:e4:ea:96:f0:da:f2:
                    1f:8f:e0:39:34:0a:42:dd:38:3d:e1:52:b2:a8:7d:
                    c3:34:14:de:35:83:95:5b:14:b0:e3:34:f3:9d:a9:
                    ca:d9:18:ba:f2:18:d3:f3:a1:73:bd:e8:87:3e:56:
                    60:73:3e:af:cc:a8:b3:b2:84:f5:ec:08:a6:cd:b2:
                    55:12:ba:4d:a7:25:61:dd:6d:fd:53:27:7a:4f:65:
                    61:1c:c1:91:d6:8e:75:cf:ac:6e:15:cb:95:3b:90:
                    72:79:c9:b6:ad:dd:9a:3e:69:94:bf:74:6a:de:ec:
                    ab:d9:aa:20:e6:c1:f3:41:e1:75:8e:74:ef:03:14:
                    ba:ec:85:83:e8:1c:7f:86:27:5a:01:d9:bd:7b:91:
                    f5:40:62:f6:9b:d0:5b:96:a2:05:6b:ef:16:b8:36:
                    4e:30:97:88:57:2c:f5:39:cc:b5:a0:06:20:61:ec:
                    ac:f3:0e:08:0f:0d:71:13:c6:ab:37:0f:20:cd:45:
                    91:41:83:53:df:97:66:19:d0:28:4d:93:33:e3:ab:
                    63:0a:04:95:9e:c9:5a:e8:a2:bd:97:b2:62:11:22:
                    db:07:e0:be:65:09:ac:63:c8:f0:a4:31:56:dc:57:
                    59:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E2:C9:32:E2:82:02:6F:94:81:94:89:5D:02:AA:C5:9D:3E:69:9D
            X509v3 Authority Key Identifier:
                keyid:74:4C:87:1E:40:8F:6C:1C:74:7A:73:7D:3A:AC:AC:E3:BF:FA:0A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/744C871E408F6C1C747A737D3AACACE3BFFA0A63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/744C871E408F6C1C747A737D3AACACE3BFFA0A63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37322e302f32312d3231203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:f1:2a:d5:87:ee:27:29:b8:d0:f3:db:16:59:09:36:da:11:
         21:40:1e:4a:a2:a0:1d:62:ef:3f:fb:a3:28:c3:78:0b:44:c6:
         a2:2e:06:e5:f8:75:c2:a3:bd:91:b1:ac:dc:05:7f:84:18:61:
         16:22:a7:00:2b:bc:8a:dd:c1:c2:a2:24:a7:50:f0:0e:ae:e3:
         02:4a:ea:b0:cd:e6:9d:13:e7:bd:cf:3f:b6:e3:0f:4b:83:90:
         3e:b8:9a:e7:4d:1d:34:7f:ff:ee:0c:cc:18:00:20:20:cd:7c:
         c6:a7:14:84:4a:3c:e3:d6:07:6f:5b:d1:3b:71:1f:01:3e:18:
         2b:2a:10:fd:ec:5d:14:77:24:85:31:51:07:3b:a8:30:73:72:
         63:69:3b:d1:d5:a8:f2:d3:fa:5f:6d:98:2b:f5:b3:2e:a0:06:
         90:65:b1:d4:b0:7f:12:7f:2e:9d:e9:6c:e7:44:47:82:69:80:
         f8:85:57:09:30:f9:b3:43:8f:ae:3f:0f:74:e6:41:79:8f:9b:
         ca:55:49:8b:a9:48:d9:4b:8f:16:7a:1c:fd:e3:ed:1e:f6:48:
         a0:50:39:a8:23:54:e3:d2:66:7d:c8:8a:a8:93:68:8a:76:5a:
         b2:82:81:8a:48:ee:be:7f:b1:f5:6b:f8:73:07:f3:50:b3:21:
         46:7c:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org