Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133352e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3133352e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          ZtRVlNh882ZdJk0BikFWgn9+KDZJFrFW4U6HTcAzQ3o=
Subject key identifier:   F0:B1:C2:BE:A0:D8:32:C6:B6:CF:AA:FA:5C:F0:DB:B9:46:63:6A:D4
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       164F2241B9F426619CA9A5A4147074EC4B4A8F82
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133352e302f32342d3234203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:15 +0000
ROA not before:           Sat 04 Nov 2023 12:27:15 +0000
ROA not after:            Sat 02 Nov 2024 12:32:15 +0000
asID:                     262401
IP address blocks:        177.36.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4f:22:41:b9:f4:26:61:9c:a9:a5:a4:14:70:74:ec:4b:4a:8f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:15 2023 GMT
            Not After : Nov  2 12:32:15 2024 GMT
        Subject: CN=F0B1C2BEA0D832C6B6CFAAFA5CF0DBB946636AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:d7:0b:45:1b:59:d9:9c:1b:e6:a6:91:30:
                    2c:6a:f7:fc:f6:e6:59:f9:6e:6a:4c:19:ee:c4:85:
                    74:ad:ad:9c:2a:25:de:a1:47:e0:71:3a:53:c4:36:
                    90:6d:bf:69:42:a6:45:70:04:cb:a1:0b:ee:4a:42:
                    42:6f:cc:bc:11:13:44:47:26:77:0a:0a:ea:10:86:
                    cf:90:c4:85:d4:06:da:f5:95:5f:3f:00:c1:fa:3a:
                    ea:75:93:1d:15:5b:3e:44:1e:36:69:11:e6:5b:44:
                    b5:a8:56:60:2d:2e:83:9f:a3:ad:d8:28:08:e9:49:
                    54:56:e4:00:f9:73:0d:0f:a5:38:6f:07:71:dc:85:
                    f6:ba:eb:7b:7a:1b:6d:5b:04:c4:af:22:86:78:f7:
                    57:b2:bd:cf:74:8d:1e:05:a2:a0:3f:01:1c:5e:2d:
                    b1:22:0b:a5:cc:ab:e0:7b:88:70:27:1d:43:7c:33:
                    93:e0:4c:ae:c5:8a:3d:37:82:53:37:ae:60:04:7a:
                    e2:3f:2d:8d:62:1e:5d:98:e7:0c:97:b0:c4:2d:ab:
                    57:60:f5:5c:be:20:79:74:81:06:e2:1e:37:2c:ca:
                    82:47:38:07:7e:cd:d6:e0:e8:3e:86:48:4a:04:96:
                    75:d9:cf:49:7d:2b:ed:77:69:b1:7d:a0:6e:32:8d:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B1:C2:BE:A0:D8:32:C6:B6:CF:AA:FA:5C:F0:DB:B9:46:63:6A:D4
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133352e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:68:5a:09:90:f0:63:00:33:1c:03:f6:29:32:fa:ed:64:55:
         f4:d8:f5:c8:c1:31:82:f1:0a:5b:36:44:f7:7c:5f:e8:c7:9b:
         a0:b6:2b:b8:74:c1:74:59:bf:99:f4:a1:ed:2f:9c:dc:62:e6:
         2c:30:c0:89:07:cf:bb:41:a7:d9:5c:63:d2:91:eb:7d:1f:09:
         ef:4b:d1:0d:36:54:ee:57:dd:69:f4:96:4a:dc:df:53:33:1a:
         01:22:1e:ff:01:1d:6b:78:be:f6:41:57:21:2d:be:6c:f1:12:
         dd:92:59:1d:70:da:5a:6f:e2:8b:29:93:11:c4:93:f7:77:1f:
         ca:c2:31:48:36:e3:88:bb:aa:34:e4:02:93:35:9c:2d:a7:a2:
         f6:4d:1c:dc:2d:8d:50:7e:ac:91:6f:79:8d:3a:20:af:03:e6:
         06:9b:22:8b:59:48:a0:54:cd:8a:1f:ee:a9:30:2b:2a:e1:84:
         b5:56:d7:d9:e4:7e:2e:97:9d:e0:86:3e:bd:35:66:88:a9:54:
         ca:32:5c:52:4e:95:ed:9d:33:75:7e:5e:ea:23:f7:7b:52:8f:
         8f:b9:c3:45:79:34:f2:50:bc:c1:7f:11:74:7d:cd:58:cd:dd:
         29:2b:f3:1c:4d:c8:c2:35:da:7f:1c:64:d5:f1:28:fa:98:a6:
         1c:3d:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org