Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3132392e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3132392e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          pFG3tLHikX4Su8+MeRFip22R4OjNMkVlLtKJI9n50+w=
Subject key identifier:   D9:7D:4C:7A:AD:AC:FB:2C:36:2A:91:E4:9B:F5:95:8A:F6:1D:E3:C0
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       5951789F5501CF3B334283A4C74BB713C6135E7C
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3132392e302f32342d3234203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:12 +0000
ROA not before:           Sat 04 Nov 2023 12:27:12 +0000
ROA not after:            Sat 02 Nov 2024 12:32:12 +0000
asID:                     262401
IP address blocks:        177.36.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:51:78:9f:55:01:cf:3b:33:42:83:a4:c7:4b:b7:13:c6:13:5e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:12 2023 GMT
            Not After : Nov  2 12:32:12 2024 GMT
        Subject: CN=D97D4C7AADACFB2C362A91E49BF5958AF61DE3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:66:b4:78:b3:18:a6:c4:8b:de:ee:df:8b:
                    38:a2:40:d5:56:2e:cc:43:36:4d:54:a5:3f:fb:4f:
                    e6:67:bc:6d:60:e5:4d:b8:11:fa:16:bf:ec:86:b9:
                    f3:41:16:ef:88:ae:4b:cb:8c:21:0a:d0:fa:d3:04:
                    b5:88:dd:13:de:7c:5f:33:fd:8c:86:d9:02:e3:19:
                    ca:88:e5:2e:cb:38:89:5c:96:33:60:7a:43:ff:03:
                    ad:57:16:ff:91:1f:50:c3:43:2f:44:ff:5b:72:0f:
                    a7:e7:93:55:5e:cc:87:ef:0b:f8:8f:aa:4a:01:bc:
                    b2:79:e8:cd:dd:45:47:c6:47:fc:4a:2f:b7:50:02:
                    61:39:ff:3e:8b:89:e1:28:a6:ff:a3:f5:ba:7e:97:
                    4a:0f:2c:35:1d:33:0e:23:a5:71:50:f6:a5:a7:6a:
                    e5:65:8b:20:b6:f4:80:66:0a:29:91:dc:5e:b9:5d:
                    c5:22:5e:c4:72:28:c3:5b:69:d4:6b:c5:73:87:fd:
                    2b:81:b3:61:e9:f9:54:21:a2:8a:38:08:e9:b2:81:
                    64:9b:84:a9:e8:6a:56:08:e0:ff:68:0e:6f:7c:1a:
                    99:ed:f2:d6:f2:68:bb:46:6b:cc:7e:5b:ec:12:99:
                    c6:fb:53:54:ea:a1:b7:77:dc:1d:21:e1:97:30:cc:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:4C:7A:AD:AC:FB:2C:36:2A:91:E4:9B:F5:95:8A:F6:1D:E3:C0
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3132392e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:e9:dc:76:72:a4:25:6c:b4:ad:6b:83:71:b4:19:1d:9b:71:
         06:f1:91:b5:a6:cc:47:3e:72:5f:06:14:a7:7b:eb:8e:b2:de:
         2a:cc:98:77:47:36:8b:2f:82:fc:13:19:e4:d7:83:ba:b9:27:
         ac:b7:84:79:1f:54:f4:79:98:bf:c8:6b:8c:a4:62:e7:85:76:
         50:47:40:01:be:c1:31:1a:31:da:90:b2:40:ba:78:db:88:4e:
         7a:91:88:50:58:72:3b:a6:d4:6e:c6:c2:79:d0:6a:15:0f:54:
         bc:9d:33:c7:fb:10:90:83:70:e9:56:36:0d:0c:f5:1f:47:2a:
         13:c6:10:d3:37:b9:f7:9b:b4:e6:d1:a7:3e:6f:77:aa:69:4e:
         ba:cd:f7:07:aa:21:a6:32:e8:c9:50:f7:4d:6f:4c:08:85:63:
         44:a1:44:00:56:ff:24:ea:d8:cc:1d:25:05:89:94:f9:32:e2:
         a5:79:4e:bb:8c:fb:ea:7e:d1:b5:4a:a1:06:16:4c:ba:06:ca:
         0f:ab:95:8c:a3:0c:a4:7d:7a:2d:bb:5f:40:62:98:e4:68:4b:
         e8:a0:18:e7:5d:59:00:da:ab:92:4d:fb:f3:10:43:80:49:9e:
         a8:93:42:c1:c6:6c:bb:4a:98:8e:cc:23:f7:ef:5a:2f:21:d4:
         bb:b4:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org