Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37362e302f32332d3233203d3e203532373438.roa
File:                     3137372e3135352e37362e302f32332d3233203d3e203532373438.roa (raw, json)
Hash identifier:          HT/SzJsR18yvmozuA5fRCS8ZkgOWrHRJi2LLQd8cf2g=
Subject key identifier:   D3:6E:2D:5F:04:75:16:C8:F6:FD:10:C4:DF:A5:2F:75:5A:59:B8:15
Certificate issuer:       /CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
Certificate serial:       3924BC53B998FFF1159284BADDAF3943141CAFC5
Authority key identifier: 4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37362e302f32332d3233203d3e203532373438.roa
Signing time:             Mon 15 May 2023 20:42:42 +0000
ROA not before:           Mon 15 May 2023 20:37:42 +0000
ROA not after:            Mon 13 May 2024 20:42:42 +0000
asID:                     52748
IP address blocks:        177.155.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:24:bc:53:b9:98:ff:f1:15:92:84:ba:dd:af:39:43:14:1c:af:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
        Validity
            Not Before: May 15 20:37:42 2023 GMT
            Not After : May 13 20:42:42 2024 GMT
        Subject: CN=D36E2D5F047516C8F6FD10C4DFA52F755A59B815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:fd:55:9d:cf:9b:28:37:d6:e2:02:0e:56:
                    79:bf:2e:af:ba:52:d1:11:23:ed:6d:60:84:28:2e:
                    e8:20:15:e5:cd:b0:e4:76:88:38:c0:c8:ca:af:93:
                    d9:77:be:af:2f:2a:63:13:8e:7e:25:d4:f0:e7:ad:
                    29:47:90:4e:e3:7c:f7:86:81:c5:1d:ad:b8:88:d5:
                    b4:22:3f:c8:58:47:da:cd:ef:67:d3:f5:02:99:85:
                    3b:ea:b2:6b:b6:cd:f1:a6:5a:52:24:c0:15:22:bb:
                    50:fe:ec:b4:1c:9a:fc:aa:94:f7:4d:02:c6:16:9e:
                    95:2b:b4:f5:78:a1:f6:41:bd:1e:bd:83:ad:16:05:
                    5a:b4:a4:ba:56:3b:77:76:80:9a:a0:d0:3a:c7:d9:
                    0f:30:f1:16:96:be:b3:71:f4:ff:5f:46:d4:ae:6c:
                    ba:e5:7a:4e:bf:71:a4:57:5d:45:84:38:3b:31:62:
                    f5:c7:c6:1f:58:6c:fd:e8:21:44:7b:93:14:6f:a8:
                    ad:f5:88:8f:70:c3:ad:55:07:32:08:e1:ed:f5:e8:
                    80:6d:f1:80:e7:8e:14:18:32:70:95:86:03:cd:f6:
                    33:8c:fd:d0:a6:79:3c:b2:81:eb:a7:14:28:c1:c1:
                    5b:b2:09:6f:e8:cd:3f:d0:bd:df:94:e1:22:7d:15:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:2D:5F:04:75:16:C8:F6:FD:10:C4:DF:A5:2F:75:5A:59:B8:15
            X509v3 Authority Key Identifier:
                keyid:4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37362e302f32332d3233203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:ca:38:f9:8e:37:6b:09:8a:37:0a:86:3e:af:e0:4a:f5:5f:
         55:c2:ab:56:e8:77:84:6c:b8:58:f2:3a:61:e5:da:7e:6a:d6:
         63:31:6d:ab:9c:ba:3e:0d:95:17:55:3d:7c:2c:f6:d6:56:a5:
         3a:69:4b:d0:ce:20:c2:eb:e2:dd:4d:a0:13:4a:6b:49:af:d8:
         c3:e4:f4:ab:26:1c:7a:b8:aa:9e:da:e5:0f:1d:75:8d:bd:f5:
         98:5d:ca:54:3d:0b:9f:28:a6:21:08:c6:c9:18:3e:7b:66:4c:
         4e:48:32:0e:f7:28:69:de:50:ac:62:3a:14:ba:89:d7:53:2c:
         0d:2a:e8:2c:88:9a:e8:33:1a:a8:06:5a:47:66:3c:a1:c4:6b:
         78:43:33:43:21:a7:cd:41:51:09:9f:36:21:36:af:7b:53:8a:
         76:1f:f3:23:77:d9:1a:cb:63:f1:10:63:48:0d:1f:63:a8:18:
         6e:ae:7c:7b:b8:39:c9:27:55:99:e0:13:7f:2f:eb:a7:ed:5d:
         98:46:de:30:53:5d:e5:bd:bd:30:a6:87:ae:c1:d7:11:fa:e1:
         05:60:a2:d9:bf:ca:5b:a1:a1:dd:71:f9:9f:96:8f:26:ed:fd:
         52:55:d7:15:d9:06:2d:5f:2c:b1:45:a7:b4:57:4b:f9:30:b7:
         dc:11:fd:6a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUOSS8U7mY//EVkoS63a85QxQcr8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQzNjhDRkNBQjE4QTBBNDE0QTYwMzdGQkRCQjc2Mjg2
Q0EzRUZCMzAeFw0yMzA1MTUyMDM3NDJaFw0yNDA1MTMyMDQyNDJaMDMxMTAvBgNV
BAMTKEQzNkUyRDVGMDQ3NTE2QzhGNkZEMTBDNERGQTUyRjc1NUE1OUI4MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hv1Vnc+bKDfW4gIOVnm/Lq+6
UtERI+1tYIQoLuggFeXNsOR2iDjAyMqvk9l3vq8vKmMTjn4l1PDnrSlHkE7jfPeG
gcUdrbiI1bQiP8hYR9rN72fT9QKZhTvqsmu2zfGmWlIkwBUiu1D+7LQcmvyqlPdN
AsYWnpUrtPV4ofZBvR69g60WBVq0pLpWO3d2gJqg0DrH2Q8w8RaWvrNx9P9fRtSu
bLrlek6/caRXXUWEODsxYvXHxh9YbP3oIUR7kxRvqK31iI9ww61VBzII4e316IBt
8YDnjhQYMnCVhgPN9jOM/dCmeTyygeunFCjBwVuyCW/ozT/Qvd+U4SJ9FXCRAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU024tXwR1Fsj2/RDE36UvdVpZuBUwHwYDVR0j
BBgwFoAUTTaM/KsYoKQUpgN/vbt2KGyj77MwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ydkpUZjg5N21uc1hFRUdGYlBxNDJiTGtNY3JicWhoWktTdnQzQTFialMx
LzAvNEQzNjhDRkNBQjE4QTBBNDE0QTYwMzdGQkRCQjc2Mjg2Q0EzRUZCMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80RDM2OENGQ0FCMThBMEE0MTRB
NjAzN0ZCREJCNzYyODZDQTNFRkIzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
dkpUZjg5N21uc1hFRUdGYlBxNDJiTGtNY3JicWhoWktTdnQzQTFialMxLzAvMzEz
NzM3MmUzMTM1MzUyZTM3MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMyMzcz
NDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBsZtMMA0GCSqGSIb3DQEBCwUAA4IBAQAyyjj5jjdrCYo3
CoY+r+BK9V9VwqtW6HeEbLhY8jph5dp+atZjMW2rnLo+DZUXVT18LPbWVqU6aUvQ
ziDC6+LdTaATSmtJr9jD5PSrJhx6uKqe2uUPHXWNvfWYXcpUPQufKKYhCMbJGD57
ZkxOSDIO9yhp3lCsYjoUuonXUywNKugsiJroMxqoBlpHZjyhxGt4QzNDIafNQVEJ
nzYhNq97U4p2H/Mjd9kay2PxEGNIDR9jqBhurnx7uDnJJ1WZ4BN/L+un7V2YRt4w
U13lvb0wpoeuwdcR+uEFYKLZv8pboaHdcfmflo8m7f1SVdcV2QYtXyyxRae0V0v5
MLfcEf1q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org