Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134362e302f32332d3233203d3e20323632343031.roa
File:                     3137372e33362e3134362e302f32332d3233203d3e20323632343031.roa (raw, json)
Hash identifier:          unYwAZXTDuDh+yMiWZk9fIrGIusj4nrWCSIqbBz9UA8=
Subject key identifier:   AF:12:9B:42:44:1B:59:BB:D9:E8:B3:BA:BF:F9:70:CB:B8:E9:17:42
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       79DF2940409E068DEFC78904DAA59FB4A3ABA6B5
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134362e302f32332d3233203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:13 +0000
ROA not before:           Sat 04 Nov 2023 12:27:13 +0000
ROA not after:            Sat 02 Nov 2024 12:32:13 +0000
asID:                     262401
IP address blocks:        177.36.146.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:df:29:40:40:9e:06:8d:ef:c7:89:04:da:a5:9f:b4:a3:ab:a6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:13 2023 GMT
            Not After : Nov  2 12:32:13 2024 GMT
        Subject: CN=AF129B42441B59BBD9E8B3BABFF970CBB8E91742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:3d:24:51:2b:5e:48:b3:a9:d4:fa:79:6e:
                    2f:f1:e8:9c:08:69:39:f5:c3:0e:50:76:c7:c9:ca:
                    e3:52:f5:a9:79:7a:a1:8d:cc:32:15:96:6e:98:de:
                    c5:94:fd:0b:50:85:6d:e5:1c:2b:c9:9e:cb:e7:67:
                    c3:d5:78:b8:99:d2:8f:16:0d:22:ee:49:5c:28:d0:
                    1e:fa:af:3b:4d:64:f0:ef:2e:ba:5b:d2:8c:d9:b2:
                    1e:9b:86:d5:bc:64:a3:38:19:76:dd:af:ae:85:4a:
                    88:e3:b4:1c:17:ce:5c:96:7a:7d:e0:e1:bf:3e:da:
                    c9:7a:1c:fd:38:41:57:fb:54:a5:46:29:61:8b:b0:
                    11:59:de:95:03:67:76:d9:ae:67:3d:3f:a5:72:27:
                    ab:ef:27:ee:d8:43:e1:25:45:d3:e1:e2:a7:4e:0b:
                    2d:e1:5d:00:c9:7b:ef:76:d4:4b:8c:84:1c:d1:cb:
                    f5:29:af:9d:69:3c:ea:ba:f0:d9:21:8c:e0:52:f8:
                    cc:5b:46:4a:df:18:a0:13:7d:00:8f:97:32:2a:14:
                    33:58:d5:27:91:3e:f0:6d:4e:07:df:ee:43:9c:18:
                    72:4f:14:74:51:40:3c:1a:f2:23:91:d4:63:6c:0a:
                    c6:90:a1:0d:83:28:7c:f5:d1:26:12:ba:cc:85:b5:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:12:9B:42:44:1B:59:BB:D9:E8:B3:BA:BF:F9:70:CB:B8:E9:17:42
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134362e302f32332d3233203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:d2:88:86:8e:3a:ed:65:63:97:58:53:e3:76:7a:c1:5f:c0:
         fb:b2:01:08:ba:46:35:e4:f2:06:42:58:8b:a3:11:40:95:7d:
         e8:4e:13:05:81:a7:17:a1:ee:74:ce:33:2a:0a:84:4b:b5:b6:
         e2:1d:33:dd:26:c7:0c:da:a3:7a:be:d2:4a:cc:12:66:61:fa:
         65:9b:34:ff:20:e0:de:bb:ab:26:2f:a5:3e:aa:6e:c5:ff:1b:
         33:bb:ab:ec:ac:cd:f0:77:e8:3f:4c:39:09:f5:1d:33:5a:86:
         ce:17:74:e3:09:6a:70:77:d4:e7:40:b1:24:30:e9:c6:47:4f:
         97:89:e2:1f:ba:43:44:9f:39:49:5c:23:cb:ab:e1:a1:bc:99:
         39:10:ce:aa:56:64:0d:c9:ea:95:47:b6:d5:4c:16:59:2a:f8:
         53:9a:ba:29:ba:7f:75:3a:1e:1e:ba:f1:0e:fa:80:53:09:5d:
         2e:7b:6b:43:1c:6e:67:a7:79:0b:99:6c:53:f5:cb:52:14:d8:
         3b:3c:03:4a:fe:3d:9d:ff:2c:ff:29:96:4d:da:19:d1:23:df:
         95:7f:9f:87:b0:47:36:3e:2f:da:03:b4:a5:d8:fb:01:1e:68:
         2f:4b:6c:a3:34:65:fe:46:bf:f5:0d:8f:f5:45:0a:29:59:37:
         1f:d1:1f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org