Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32322e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e32322e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          AIQqN5tDHF24vjN7Dt+uTnTSmskX3gTeo44OiXvKsks=
Subject key identifier:   7A:55:4F:A8:AD:6E:35:45:A9:B4:E5:2E:23:44:D4:6F:C5:DA:AB:A2
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       5C76AEA47AA22683AAC28B50CF8918FADCD68225
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32322e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:36 +0000
ROA not before:           Thu 17 Nov 2022 17:58:36 +0000
ROA not after:            Thu 16 Nov 2023 18:03:36 +0000
asID:                     28360
IP address blocks:        177.8.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:76:ae:a4:7a:a2:26:83:aa:c2:8b:50:cf:89:18:fa:dc:d6:82:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:36 2022 GMT
            Not After : Nov 16 18:03:36 2023 GMT
        Subject: CN=7A554FA8AD6E3545A9B4E52E2344D46FC5DAABA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:47:45:00:36:b3:25:c7:10:c8:b1:2b:5d:
                    fb:e0:22:d5:39:67:8b:ed:65:5b:33:cf:89:c3:65:
                    1e:87:4f:98:5c:a3:1a:92:75:e1:71:7b:a6:03:c0:
                    5b:35:43:fc:45:0f:aa:15:bb:08:97:be:c7:a4:a7:
                    0a:c0:8b:0c:a0:65:24:5b:92:9a:c4:01:f9:12:b5:
                    61:b9:cd:ff:71:96:28:79:02:b5:00:20:61:5d:66:
                    5b:2b:cb:f0:44:5a:4b:ff:1f:53:87:5d:33:d8:70:
                    f5:6b:5e:4f:53:49:89:99:94:19:5e:bd:48:ee:4e:
                    c8:a9:49:1d:01:8a:22:7b:dc:20:08:63:e2:7c:8e:
                    ff:08:ff:1f:4b:22:04:a5:ca:7b:cf:13:1a:03:4b:
                    84:a8:0d:85:a9:7c:4d:9e:c2:30:3c:aa:14:06:48:
                    27:bd:9b:92:15:4f:8f:20:97:36:ad:12:9f:bb:3d:
                    27:11:1b:36:2e:26:db:ad:17:07:1c:b6:16:12:5b:
                    20:37:41:aa:f8:72:1f:ef:a2:39:a6:fc:e1:ea:ec:
                    27:52:2a:60:be:f9:b2:fa:c3:d7:a2:8c:5d:b5:48:
                    79:26:18:59:3b:90:84:d5:a1:61:20:c4:84:8f:60:
                    27:71:28:e8:7a:82:ac:e8:91:67:79:0c:40:40:8c:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:55:4F:A8:AD:6E:35:45:A9:B4:E5:2E:23:44:D4:6F:C5:DA:AB:A2
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32322e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ae:f0:07:b7:6d:bf:e8:13:e8:7d:0d:bb:00:80:e9:bc:8a:
         f9:db:ed:d8:57:04:ab:4b:7d:e2:82:fb:0c:23:e8:08:4b:5f:
         24:05:4c:6b:40:b6:ae:84:8c:2e:ff:54:b4:ba:7b:b2:12:86:
         17:6d:8d:27:41:cd:75:c1:f9:4d:ed:5b:7d:44:cc:d4:c2:4b:
         c9:48:98:75:8c:8e:86:5f:15:5c:bb:8d:72:e6:e9:c8:19:32:
         9c:05:bb:92:ce:24:1b:eb:a6:6c:e0:a7:ae:72:a5:67:ae:47:
         27:66:c4:b9:f5:a4:ce:49:35:5b:59:87:78:96:cc:ef:5d:47:
         4d:69:92:62:73:21:bb:10:8e:3d:7f:9e:02:35:cf:1d:be:bc:
         32:79:9d:17:2f:9f:39:4b:d0:4d:9e:d2:e2:63:b3:49:4b:0a:
         38:a1:27:46:92:43:9c:55:06:e7:a5:24:58:fc:ab:fc:36:67:
         19:b5:3d:73:21:16:58:ed:97:57:9c:52:71:8b:a2:66:3e:6e:
         d2:6c:85:ea:ae:d7:4c:e9:15:9c:e8:3d:b1:23:a3:f3:e0:2b:
         82:19:78:65:40:a7:c9:8c:36:c0:bb:ad:00:ee:16:ff:71:43:
         18:b1:7d:9b:09:ad:68:ac:47:e8:58:ff:5d:7c:c9:26:1a:8f:
         07:e9:75:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net