Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134372e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3134372e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          /XwaZDonfUhPxM+0kiq5g5mvicon953gJjaDtwxm1+c=
Subject key identifier:   60:59:28:FF:C1:3C:94:67:41:CB:70:F7:84:DB:25:92:6E:FC:7A:1F
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       749C1A2D1AC89ED34C9F4D66CFEFC1120072E25D
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134372e302f32342d3234203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:11 +0000
ROA not before:           Sat 04 Nov 2023 12:27:11 +0000
ROA not after:            Sat 02 Nov 2024 12:32:11 +0000
asID:                     262401
IP address blocks:        177.36.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9c:1a:2d:1a:c8:9e:d3:4c:9f:4d:66:cf:ef:c1:12:00:72:e2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:11 2023 GMT
            Not After : Nov  2 12:32:11 2024 GMT
        Subject: CN=605928FFC13C946741CB70F784DB25926EFC7A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7c:eb:d0:fe:15:7f:5b:f7:cf:1b:43:44:4f:
                    12:b0:6b:6b:61:64:8b:4e:7f:79:f6:dc:e7:73:21:
                    c0:85:62:20:0a:9c:4c:90:19:d8:8b:1d:b6:28:61:
                    7b:d2:a0:d1:36:11:9a:b8:e9:da:ae:9e:f1:ab:ae:
                    25:f7:15:a5:f9:5f:f3:ce:59:2d:b3:41:96:23:8a:
                    b9:e2:bd:d3:35:b1:a8:f8:21:99:a3:7d:1a:0a:b1:
                    5f:6c:d2:5b:f5:f6:04:ba:be:03:53:7c:e8:76:3c:
                    ff:65:89:af:ba:8a:01:85:eb:73:1f:04:b2:34:3d:
                    31:29:bb:89:a3:fd:41:0d:50:18:70:d0:1c:27:c1:
                    8f:e8:b7:62:32:dd:97:ba:2c:5a:f7:d6:00:ab:19:
                    ee:e3:28:c6:1f:ee:53:a1:66:9c:b3:5a:7d:72:6d:
                    0a:99:b2:4e:02:3d:2d:e7:7d:e7:e1:98:08:ab:6b:
                    92:26:43:50:4a:af:88:39:a3:db:a0:26:10:1e:36:
                    c8:35:11:ad:67:b5:73:88:2e:08:2a:9f:05:f7:90:
                    3d:1a:90:c4:3d:a3:b3:e2:a8:97:8e:d2:2c:7d:c5:
                    16:58:6d:b9:08:50:e3:2e:1c:c9:52:1d:3f:66:1d:
                    3a:88:03:19:ae:39:3a:7f:1b:a4:1b:fb:fb:6d:0f:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:59:28:FF:C1:3C:94:67:41:CB:70:F7:84:DB:25:92:6E:FC:7A:1F
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134372e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e6:d6:db:6a:27:0a:80:6a:f3:8b:ae:0c:52:bc:fb:26:7c:e0:
         1e:5b:cd:d2:df:e5:0d:f7:32:24:8c:fe:89:e1:cd:70:e0:12:
         4e:e0:c2:58:70:1a:40:73:ea:cb:8f:fa:cc:2a:51:5b:ed:d6:
         37:9f:d3:37:33:f3:8f:47:77:3f:3a:03:bf:01:88:7d:b3:35:
         84:33:c5:a1:3d:e2:22:c7:a7:6b:e0:fe:a5:ec:17:fe:b3:54:
         18:b5:ad:51:57:59:33:56:d8:0d:bf:45:70:17:d8:dd:6d:3c:
         1e:55:6a:b6:2d:ab:3c:a8:54:95:23:f3:29:cf:c1:64:b6:21:
         17:2c:10:37:67:e2:a7:8a:d4:e5:65:2f:27:b2:f8:e6:80:2e:
         bb:f5:06:f6:a3:2d:b1:c6:c4:ac:44:b5:77:3d:30:03:07:79:
         1f:f7:57:95:10:2b:35:d3:c3:8a:86:63:5d:03:27:6c:46:a3:
         4d:22:7d:1f:4d:a0:45:d4:f5:e6:7f:48:df:a3:ec:49:4f:8b:
         5b:35:98:fb:91:a7:d7:74:ad:a1:ef:b8:a2:31:5a:a5:86:dd:
         c5:48:76:80:82:07:e9:7a:eb:e6:8e:5c:5e:69:aa:5f:9c:0f:
         f4:17:f2:b2:e8:eb:93:99:97:f3:4b:f9:38:dd:18:54:e5:d8:
         3f:57:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org