Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e36342e302f32332d3233203d3e203532373438.roa
File:                     3137372e3135352e36342e302f32332d3233203d3e203532373438.roa (raw, json)
Hash identifier:          eEdGPBX6+wlC8oDoJAG1A0CyoYN86XCEGi6BpvhM3YM=
Subject key identifier:   F0:52:71:19:BA:D3:C7:4F:97:46:CE:32:E2:0B:84:9C:FC:4E:DA:74
Certificate issuer:       /CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
Certificate serial:       0D7ABF1BDF75A7EAB6051CDA8EAF2DEFFC40434C
Authority key identifier: 4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e36342e302f32332d3233203d3e203532373438.roa
Signing time:             Mon 15 May 2023 20:42:00 +0000
ROA not before:           Mon 15 May 2023 20:37:00 +0000
ROA not after:            Mon 13 May 2024 20:42:00 +0000
asID:                     52748
IP address blocks:        177.155.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7a:bf:1b:df:75:a7:ea:b6:05:1c:da:8e:af:2d:ef:fc:40:43:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3
        Validity
            Not Before: May 15 20:37:00 2023 GMT
            Not After : May 13 20:42:00 2024 GMT
        Subject: CN=F0527119BAD3C74F9746CE32E20B849CFC4EDA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:b6:69:0f:6e:b9:cd:4d:94:f4:30:27:64:
                    1a:b4:04:6c:fc:ed:6e:22:c8:54:09:22:4c:70:f3:
                    4b:6f:cb:cf:ea:b3:0f:20:d7:84:29:20:cd:54:f6:
                    c4:76:fc:0c:0f:a1:85:fc:ab:4b:5b:28:4f:38:9c:
                    98:5c:b7:aa:9b:c7:ee:f4:dd:7e:71:43:1c:8a:1a:
                    ac:c4:64:76:e3:22:16:48:93:08:20:1b:65:58:b5:
                    52:4f:06:ca:09:68:c3:d9:d1:0c:b0:47:48:9b:9d:
                    5e:f1:a2:9f:e5:a2:4a:70:fa:67:d8:cc:6e:34:8f:
                    95:46:a5:ed:aa:e4:2f:bc:22:f7:dc:ee:14:a5:25:
                    2b:95:e4:92:de:e2:01:00:16:7c:2c:37:e7:8d:cc:
                    42:ce:f9:0a:69:10:0a:e3:ef:c6:32:41:93:51:30:
                    f4:6e:b0:34:f7:0b:69:c2:37:80:20:22:3c:fc:cc:
                    71:e5:a1:ce:ac:e2:6d:5b:d6:d7:e3:72:3d:7d:d6:
                    66:5f:2f:50:71:6b:6f:46:53:b4:26:91:d6:34:1e:
                    2d:d4:a9:d2:d4:1d:a7:b0:b6:a8:a4:31:96:03:dc:
                    22:d7:52:85:ca:6f:e4:4b:54:17:32:14:58:96:8f:
                    f8:e2:d5:81:5a:93:ba:8c:61:f0:47:e0:30:e6:ea:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:52:71:19:BA:D3:C7:4F:97:46:CE:32:E2:0B:84:9C:FC:4E:DA:74
            X509v3 Authority Key Identifier:
                keyid:4D:36:8C:FC:AB:18:A0:A4:14:A6:03:7F:BD:BB:76:28:6C:A3:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D368CFCAB18A0A414A6037FBDBB76286CA3EFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/0/3137372e3135352e36342e302f32332d3233203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:51:9e:7c:12:59:5e:db:d3:b6:00:3d:64:b0:b1:de:f7:d3:
         57:5e:46:af:4f:72:80:09:c7:0a:72:7e:ea:a1:9a:bc:39:3c:
         96:71:4d:77:cc:d9:aa:b6:72:55:50:96:05:18:fc:58:8a:c0:
         67:2d:f0:a4:a2:38:6e:71:a2:2d:dc:92:dd:53:3c:17:30:62:
         16:36:0a:ec:e2:9d:3c:81:e8:a3:27:15:d8:c4:29:c0:10:21:
         d7:4d:1a:42:e7:6e:a1:b7:66:49:d0:f4:c3:ac:20:64:64:20:
         6c:58:2f:5e:0b:c3:22:22:b1:04:60:9e:5c:d8:d7:3d:82:2d:
         f5:2b:15:9c:4b:08:57:8e:6d:ac:fb:68:18:b6:51:3d:9a:74:
         c9:08:62:17:71:d8:9c:92:b4:10:9e:f7:20:26:4d:36:23:c2:
         03:c0:f3:40:14:e2:e4:81:b9:5c:9b:25:8b:ff:81:c0:8c:d9:
         7f:f9:48:42:24:66:27:09:50:a1:bd:1d:eb:5c:0b:97:28:d9:
         5f:36:a5:a8:05:2b:8d:1b:aa:fe:10:fa:b1:7c:2d:fa:9a:af:
         1d:87:69:ea:b9:20:23:8b:98:5f:93:32:e8:4e:ae:a5:79:80:
         4c:ec:15:44:27:77:04:12:57:cb:5e:ed:b0:16:62:18:d4:2e:
         87:d5:23:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:38:06 2023 by rpki-client on console.sobornost.net