Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e32302e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          yYLCNBcDtSNFKZIZUbBQfYqVy5/7s/JXcp9+mKvDZtg=
Subject key identifier:   3B:10:D9:BC:1C:8A:BF:F5:75:5C:47:72:30:D6:A8:4A:6D:F1:5D:90
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       75EF38EAC817BEE43E35FB306E6BF4442234FAC5
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:31 +0000
ROA not before:           Thu 17 Nov 2022 17:58:31 +0000
ROA not after:            Thu 16 Nov 2023 18:03:31 +0000
asID:                     28360
IP address blocks:        177.8.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ef:38:ea:c8:17:be:e4:3e:35:fb:30:6e:6b:f4:44:22:34:fa:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:31 2022 GMT
            Not After : Nov 16 18:03:31 2023 GMT
        Subject: CN=3B10D9BC1C8ABFF5755C477230D6A84A6DF15D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:c0:b7:0a:d4:c5:c5:63:21:6b:41:43:ed:
                    2a:81:6c:86:07:d9:94:7c:b0:08:3f:31:2d:53:75:
                    3f:aa:a1:89:98:d5:d5:95:c9:c4:22:23:41:5b:df:
                    7c:3a:bb:c2:e9:dd:05:0b:fc:9d:4b:8c:59:56:4f:
                    89:1e:8c:fe:41:90:83:ad:dd:78:cd:67:37:fd:cc:
                    16:4b:fa:71:7b:66:5a:c1:54:7b:b9:e8:80:07:75:
                    ad:1c:49:1c:ab:14:57:a3:ae:02:9f:b4:11:cc:e8:
                    0e:52:f4:16:1c:c5:5c:57:fc:ba:30:47:ad:4b:6d:
                    5b:c0:85:eb:1b:aa:3e:05:75:17:a9:96:7d:7e:46:
                    d2:69:09:f0:8e:bf:3f:14:4d:b3:f3:20:06:56:2f:
                    cd:d5:e6:10:4a:c0:4e:fb:96:8b:f5:7c:e5:5d:dd:
                    7f:52:f2:67:13:d4:30:05:cc:ef:df:bd:df:25:ac:
                    7c:83:23:da:21:7e:99:93:96:40:62:21:87:01:8e:
                    d0:03:2e:56:5d:6c:a4:e3:cc:10:6e:9f:a4:8e:e8:
                    b9:b4:64:e3:cf:6c:a0:9b:18:95:db:af:ea:a8:12:
                    8d:da:96:c5:f6:1e:ab:c9:ca:99:c0:66:fc:9a:15:
                    f8:09:9b:75:e3:a7:fc:46:84:21:58:9b:78:f7:7d:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:10:D9:BC:1C:8A:BF:F5:75:5C:47:72:30:D6:A8:4A:6D:F1:5D:90
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32302e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:07:3f:8b:ce:50:36:b5:75:cc:f9:52:e4:d8:27:49:75:04:
         89:c9:00:60:95:fb:cb:d7:98:34:d6:e8:fe:b4:0a:37:91:26:
         e0:e7:c9:72:d7:49:7d:e4:35:b1:ca:8d:0a:d9:21:2f:ff:79:
         50:95:57:e5:16:c5:53:07:1c:45:ac:02:40:ad:bc:c6:00:3b:
         ed:36:1b:3d:1d:ca:71:64:53:68:6d:03:3e:46:6d:e1:ec:f5:
         79:d4:e6:9e:f6:04:a0:6e:ee:82:9d:8d:40:69:af:d4:49:80:
         a0:f8:63:9a:13:fc:af:9b:cd:ba:04:0d:c4:5d:63:ce:73:35:
         1c:f7:51:86:04:83:83:c7:49:28:bf:40:07:9c:0e:7b:47:db:
         16:5f:fa:c8:cc:ab:49:be:a2:00:cb:f1:cf:ec:c2:fd:38:f7:
         be:71:32:5e:f5:1d:0c:da:09:f0:50:55:d9:1a:5d:dd:95:f4:
         07:27:8f:e8:3c:51:09:47:68:23:ae:09:58:23:d2:d6:10:c6:
         a9:3c:41:8f:f0:b4:d6:b5:a8:99:87:c4:3e:41:65:55:3a:8f:
         73:8a:cb:41:91:b6:d8:41:86:1e:25:02:f6:83:8c:90:ef:e1:
         b7:c9:c7:66:83:c2:c9:3b:e4:00:02:ac:ae:27:14:34:e8:63:
         58:8b:5b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net