Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3137372e36372e3136362e302f32342d3234203d3e20323731303435.roa
File:                     3137372e36372e3136362e302f32342d3234203d3e20323731303435.roa (raw, json)
Hash identifier:          zbpCSqC1JiOCUG+dj/vrcLj/Aj+wgXu3MX7p8P3cklk=
Subject key identifier:   17:48:38:A4:2C:03:B3:DF:F1:39:CA:87:CD:81:5B:D5:43:8C:73:88
Certificate issuer:       /CN=644502B8FE18AC1B411B40E7ABAB3959C1F76DD0
Certificate serial:       1B757C82275F067E9B15FB7546E9C8DF8E4BB79F
Authority key identifier: 64:45:02:B8:FE:18:AC:1B:41:1B:40:E7:AB:AB:39:59:C1:F7:6D:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3137372e36372e3136362e302f32342d3234203d3e20323731303435.roa
Signing time:             Thu 14 Jul 2022 20:44:41 +0000
ROA not before:           Thu 14 Jul 2022 20:39:41 +0000
ROA not after:            Thu 13 Jul 2023 20:44:41 +0000
asID:                     271045
IP address blocks:        177.67.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:75:7c:82:27:5f:06:7e:9b:15:fb:75:46:e9:c8:df:8e:4b:b7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644502B8FE18AC1B411B40E7ABAB3959C1F76DD0
        Validity
            Not Before: Jul 14 20:39:41 2022 GMT
            Not After : Jul 13 20:44:41 2023 GMT
        Subject: CN=174838A42C03B3DFF139CA87CD815BD5438C7388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:c3:77:78:ac:f5:e2:17:dc:58:fb:7e:71:
                    41:de:8a:41:fa:21:56:0a:7e:bb:3a:47:57:66:d5:
                    02:e1:cc:81:06:e6:3a:36:50:7c:73:7c:26:53:03:
                    83:cc:3f:7e:df:9a:c0:b5:1f:42:bf:3d:a9:fb:5b:
                    30:14:14:c0:b7:32:d8:63:4a:ab:65:15:50:a4:2e:
                    09:7e:cf:d5:6a:95:c9:15:33:a9:1e:3c:65:a8:73:
                    a5:9b:8b:7a:d5:0b:0a:b1:11:16:ea:4b:1d:98:e7:
                    ca:00:7b:5e:f6:d9:af:1d:65:e0:64:d7:47:9f:be:
                    23:ef:d0:19:a2:55:cd:77:e3:a0:28:12:38:1a:06:
                    95:b4:37:8b:8b:b3:2f:bd:53:5d:53:0b:01:3a:8d:
                    7f:41:77:80:82:f5:76:3e:38:13:4e:14:d1:14:9f:
                    dc:a4:cd:59:0a:74:22:49:83:12:42:10:b8:35:13:
                    c2:f5:3a:eb:7d:86:33:04:4e:3b:20:6c:dc:2d:b2:
                    5e:6e:91:33:3a:06:35:10:d2:63:4d:2f:e9:c1:66:
                    66:45:a1:ec:ae:d2:23:f5:98:a0:88:3e:60:86:e1:
                    e6:6d:7c:70:f1:a8:02:a2:7a:75:c5:11:c0:a3:f8:
                    5a:a2:82:08:19:f1:ee:2f:69:39:82:69:3d:44:b9:
                    6a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:48:38:A4:2C:03:B3:DF:F1:39:CA:87:CD:81:5B:D5:43:8C:73:88
            X509v3 Authority Key Identifier:
                keyid:64:45:02:B8:FE:18:AC:1B:41:1B:40:E7:AB:AB:39:59:C1:F7:6D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3137372e36372e3136362e302f32342d3234203d3e20323731303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:61:6a:b2:19:7f:77:3f:92:06:50:49:6c:39:dd:bd:a0:91:
         2c:01:a3:20:11:f2:b8:bb:70:c7:37:7a:bf:78:9e:94:70:46:
         db:64:a4:f9:1e:6c:06:85:31:56:7e:59:7d:df:bb:e8:79:2c:
         c3:53:53:6f:54:7f:e9:5d:05:30:44:b1:72:57:be:52:1a:8f:
         fc:c3:9a:dd:fa:03:3d:b8:70:18:05:a3:c6:95:fa:24:5f:ac:
         88:56:28:de:fc:1f:88:0c:61:ec:19:3c:dd:ee:64:87:b8:62:
         00:f9:11:cb:71:ad:f0:fd:eb:07:92:ac:d4:50:b0:3f:9d:93:
         47:b6:45:ce:e1:82:62:3a:7b:89:3e:00:bf:96:c9:0b:e5:c5:
         e5:d0:18:e9:c9:89:10:45:01:47:9d:59:4d:8d:fb:c1:04:60:
         e3:d1:4c:f5:f5:66:48:09:92:a4:08:1c:bb:3e:82:b9:26:27:
         75:ca:f4:1a:0e:bc:e6:3a:65:a9:cb:07:06:5e:53:72:c7:9c:
         d1:2e:57:b9:0a:7e:51:7d:30:3e:53:ee:e7:85:24:81:b7:41:
         b8:05:28:93:17:ee:2a:c5:a9:41:3f:09:c6:ff:91:fb:83:58:
         bf:ac:c7:89:b2:3b:a2:9d:3e:50:c9:83:6b:54:f2:13:d5:a1:
         d1:b0:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:34 2023 by rpki-client on console.sobornost.net