Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37382e302f32332d3233203d3e203532373438.roa
File:                     3137372e3135352e37382e302f32332d3233203d3e203532373438.roa (raw, json)
Hash identifier:          SZHPGj7rixN7IXJnOoo7U1Z8aY7rKjbJBGZ/9DHxN78=
Subject key identifier:   CF:6E:2B:99:14:34:68:E6:36:2A:A9:68:71:32:CE:78:3A:26:B8:BD
Certificate issuer:       /CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
Certificate serial:       17ED4943F457D3354ECB314267C54902C64BF143
Authority key identifier: 4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37382e302f32332d3233203d3e203532373438.roa
Signing time:             Mon 15 May 2023 20:43:01 +0000
ROA not before:           Mon 15 May 2023 20:38:01 +0000
ROA not after:            Mon 13 May 2024 20:43:01 +0000
asID:                     52748
IP address blocks:        177.155.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ed:49:43:f4:57:d3:35:4e:cb:31:42:67:c5:49:02:c6:4b:f1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
        Validity
            Not Before: May 15 20:38:01 2023 GMT
            Not After : May 13 20:43:01 2024 GMT
        Subject: CN=CF6E2B99143468E6362AA9687132CE783A26B8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:0d:cb:49:8b:90:fb:36:b4:fb:cb:52:87:
                    95:54:ab:22:7b:83:9d:db:c2:df:15:f8:7a:32:fd:
                    18:45:0c:ec:2b:00:89:63:0e:1b:d7:7a:43:d1:9d:
                    8e:cc:b1:ee:21:40:41:b7:75:61:57:bf:a1:60:a9:
                    20:94:e1:90:b7:e0:4d:7b:4b:b2:78:7b:e6:f9:85:
                    2b:f2:96:cd:b5:c2:91:07:e7:e5:af:d0:4d:d3:cb:
                    d1:29:75:10:5e:28:49:e8:57:2c:43:a0:ef:97:eb:
                    7d:a2:9a:1a:72:cb:fc:1f:d7:4e:df:bb:dd:f0:f6:
                    53:dd:c1:da:3f:ff:5d:cb:8c:b5:da:2e:a7:67:bb:
                    b8:3b:5a:3c:c0:bf:b2:9e:d5:ec:f0:4d:5c:6e:14:
                    6f:b8:d7:66:0d:41:61:5c:b4:0e:48:7d:16:6d:d3:
                    83:b0:bc:6d:88:35:7c:17:b1:dc:bd:cb:74:b3:3b:
                    fd:0a:12:4f:6e:bd:72:b8:64:5c:62:9e:db:b8:d1:
                    2d:f6:56:d6:78:29:2d:2e:66:04:d6:97:a0:50:0e:
                    71:9f:8b:03:41:ee:97:5c:a0:ac:e1:b6:b6:3a:c8:
                    f6:7f:a7:92:af:04:aa:a9:3e:ac:db:4d:94:db:a8:
                    5e:e9:17:d8:7b:82:7c:74:73:8e:54:9a:04:aa:ad:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6E:2B:99:14:34:68:E6:36:2A:A9:68:71:32:CE:78:3A:26:B8:BD
            X509v3 Authority Key Identifier:
                keyid:4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e37382e302f32332d3233203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:c3:71:ce:19:33:42:ed:1c:c8:24:26:1d:4c:01:59:95:
         8b:cf:d3:25:6d:73:02:4d:6d:a2:c4:db:99:c5:72:cb:52:f8:
         75:e9:4c:7f:5c:cd:79:23:35:6d:10:bc:6b:82:12:25:8f:be:
         38:e1:ab:1e:04:f6:c7:49:0c:e0:00:b4:65:18:07:26:ff:3a:
         e2:91:0a:89:59:cd:c5:ff:1a:86:ba:55:a8:7e:69:49:a3:48:
         25:6f:bf:b9:6d:86:4d:e2:b5:2b:26:be:f0:25:26:6f:38:47:
         a8:8f:36:2b:99:2b:5c:25:e5:45:95:0c:15:c7:ae:4e:de:d2:
         a5:90:8b:68:e5:ae:9f:a6:f7:b3:54:c6:60:d0:89:ca:9a:e3:
         d2:9e:a9:70:8f:6c:29:d9:19:22:53:07:f9:45:a0:4e:ca:82:
         3d:3a:4c:8c:83:47:ae:c2:9d:28:51:70:c5:61:3a:cc:1f:9e:
         d0:63:4b:ec:97:a7:d2:43:ed:84:a5:dd:ea:59:b9:d5:d7:37:
         e3:90:bd:26:b8:c1:5f:31:24:c0:39:57:cb:b7:b7:86:d7:83:
         45:da:86:b7:fa:c8:05:b3:96:c9:54:53:6b:cc:ef:48:da:53:
         22:b6:21:11:b8:e7:d0:37:6e:d6:ac:45:26:0a:15:48:32:7f:
         97:e4:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org