Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/3137372e3135352e36342e302f32322d3234203d3e203532373438.roa
File:                     3137372e3135352e36342e302f32322d3234203d3e203532373438.roa (raw, json)
Hash identifier:          bV6MaRbf5nm+OeW5aZLoVSquzRRs0a/gzquFiUz3ACs=
Subject key identifier:   0C:BE:6E:C4:11:FC:01:2E:A0:C3:B5:24:C5:DC:61:DD:81:E2:F7:0A
Certificate issuer:       /CN=1FB291BA7D5A8F08747CB53CB52D3920F5FB9577
Certificate serial:       0B60E54385764A0EB3C77E35F138C0A574C638CB
Authority key identifier: 1F:B2:91:BA:7D:5A:8F:08:74:7C:B5:3C:B5:2D:39:20:F5:FB:95:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/3137372e3135352e36342e302f32322d3234203d3e203532373438.roa
Signing time:             Fri 19 May 2023 16:41:42 +0000
ROA not before:           Fri 19 May 2023 16:36:42 +0000
ROA not after:            Fri 17 May 2024 16:41:42 +0000
asID:                     52748
IP address blocks:        177.155.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:60:e5:43:85:76:4a:0e:b3:c7:7e:35:f1:38:c0:a5:74:c6:38:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FB291BA7D5A8F08747CB53CB52D3920F5FB9577
        Validity
            Not Before: May 19 16:36:42 2023 GMT
            Not After : May 17 16:41:42 2024 GMT
        Subject: CN=0CBE6EC411FC012EA0C3B524C5DC61DD81E2F70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:34:4c:78:89:f9:86:d5:3d:d0:b2:dc:24:99:
                    05:e2:fb:78:46:1e:3f:4d:67:e4:91:35:a4:9b:25:
                    9c:25:e0:6d:2b:4f:d2:40:3f:f9:fe:d6:76:f0:78:
                    a9:55:8f:37:00:55:eb:4a:b4:3f:44:b6:47:41:2d:
                    1b:a3:b5:d9:44:14:d1:50:ee:2f:ed:0b:bf:43:c9:
                    bd:01:3b:48:f4:a4:01:65:ed:5b:50:da:24:d9:e9:
                    85:62:e0:27:68:5e:6e:b9:c4:dc:42:c8:ac:0e:33:
                    73:73:ba:2a:1c:a6:b7:38:b5:9a:2f:29:17:44:78:
                    9b:c1:99:01:4b:b3:01:9a:49:fe:bd:d0:70:53:32:
                    69:a2:0b:6e:84:68:4d:4e:6e:09:08:78:71:57:03:
                    2f:98:e4:b1:d2:69:12:6d:a1:e5:c6:ab:67:f7:09:
                    60:ee:06:11:fc:0d:a3:46:2e:b8:97:7b:df:98:4e:
                    72:51:65:6c:4b:b6:db:b0:c4:53:61:cc:43:e7:40:
                    03:49:fd:c1:9e:f7:2d:36:2b:fd:73:a2:07:ab:29:
                    17:4e:a0:dc:8a:b3:71:6d:3b:31:04:c2:ff:d1:d7:
                    44:58:d1:3c:46:4d:37:a3:74:4d:0c:3b:ea:53:5a:
                    be:7e:32:4e:e2:7f:b2:25:1b:ab:e1:66:43:4b:d4:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BE:6E:C4:11:FC:01:2E:A0:C3:B5:24:C5:DC:61:DD:81:E2:F7:0A
            X509v3 Authority Key Identifier:
                keyid:1F:B2:91:BA:7D:5A:8F:08:74:7C:B5:3C:B5:2D:39:20:F5:FB:95:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/3137372e3135352e36342e302f32322d3234203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:42:e8:01:62:bd:23:27:ce:ab:92:6d:4b:7b:6a:1c:52:75:
         88:1b:a4:11:95:fb:d0:5d:88:cd:1f:b7:59:94:8d:58:97:b0:
         36:29:93:e2:4d:8a:cb:6f:46:bb:fc:3c:c6:70:3d:77:8c:43:
         d5:86:eb:d1:6f:c9:60:ac:79:3a:44:0e:83:e8:38:49:f8:6d:
         af:42:b7:b5:71:ce:4e:2b:e5:c3:45:8f:2c:b7:9d:b6:48:6c:
         27:8d:71:89:b9:e6:ee:e1:4f:e5:0c:29:41:50:49:3c:a0:fe:
         d0:0b:c9:cb:51:d0:f7:9d:d0:e5:05:8c:dd:3e:b0:c2:b6:2e:
         b0:e8:e9:36:35:34:4e:3a:f5:19:74:8c:8f:45:5c:b2:8b:de:
         ff:76:fd:93:47:79:e8:ae:af:52:10:95:7b:f4:1a:29:54:94:
         4d:fd:df:79:77:f0:0c:ec:0c:b1:a4:bc:9c:d5:37:dd:ce:f5:
         4b:53:22:86:bc:d3:91:0f:87:c4:6d:51:b1:64:be:b9:ae:16:
         6b:ad:c0:3c:06:e6:c5:bb:42:9e:8b:18:21:ec:d9:49:db:36:
         9f:5b:33:2c:3c:21:0b:d1:e8:77:cd:be:9d:05:2b:d7:51:3f:
         26:9b:15:ce:ee:be:b1:ca:60:62:a2:8b:44:21:fd:53:36:aa:
         ce:33:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org