Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135362e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135362e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          9Xh96a0qoD/iwKBWgXebCMT8dFYaDgsXfXGO8FeDUBE=
Subject key identifier:   72:D2:AD:97:1C:EA:28:43:C1:3F:9A:07:16:63:F1:2F:1C:4E:D9:1F
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       11C6327E99B18C1B6616C8FA9B6F8DA2ED5CBBC7
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135362e302f32342d3234203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:16 +0000
ROA not before:           Sat 04 Nov 2023 12:27:16 +0000
ROA not after:            Sat 02 Nov 2024 12:32:16 +0000
asID:                     262401
IP address blocks:        177.36.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c6:32:7e:99:b1:8c:1b:66:16:c8:fa:9b:6f:8d:a2:ed:5c:bb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:16 2023 GMT
            Not After : Nov  2 12:32:16 2024 GMT
        Subject: CN=72D2AD971CEA2843C13F9A071663F12F1C4ED91F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:d7:b2:bf:a2:a1:f9:ab:e1:92:06:df:bf:
                    29:3f:9d:2f:49:e5:06:11:5c:80:32:4b:95:97:b7:
                    7e:06:02:9a:8f:ff:9f:cb:c4:05:ec:ca:c6:a4:90:
                    99:f5:d6:7a:f5:fc:34:98:c7:3e:ee:50:90:de:c0:
                    2b:db:69:a3:48:29:53:a4:20:f8:89:c3:1e:67:60:
                    2d:37:e5:27:87:c6:15:24:b6:b6:ee:2d:8d:4d:98:
                    77:ed:1f:23:1f:2b:5a:22:42:35:a8:1d:2f:5d:ab:
                    4d:79:be:80:01:2b:83:1e:ae:e6:01:3d:e5:db:9c:
                    66:1b:1b:30:57:a1:aa:26:f7:97:5c:e6:00:59:02:
                    46:e8:3a:a6:db:e5:69:a1:df:55:5a:10:a1:85:50:
                    b0:d1:74:0f:4f:c4:c7:36:55:91:23:13:87:77:c8:
                    48:ae:09:44:bc:ef:1a:32:9a:3b:07:02:4b:db:74:
                    ce:5f:6e:00:db:5e:86:d6:0a:1a:8f:51:f8:bc:62:
                    74:aa:f4:6f:c0:d6:68:e7:f7:c9:f6:b5:fa:ce:0f:
                    b0:d8:4f:9c:98:5a:6d:f2:a7:76:36:f8:19:ae:42:
                    93:83:32:e4:19:c5:f5:cb:44:85:2f:b7:50:8a:67:
                    52:49:86:5c:08:9b:1f:ff:81:b3:4f:2b:6a:5a:28:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D2:AD:97:1C:EA:28:43:C1:3F:9A:07:16:63:F1:2F:1C:4E:D9:1F
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135362e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:c6:77:e0:be:56:d3:ff:13:36:c8:fc:8d:b2:26:c6:7b:af:
         c3:65:14:25:f6:63:c1:49:c5:c3:3b:07:21:4d:c6:26:47:d1:
         06:42:f2:c3:f3:8a:97:14:22:e9:9f:8e:b1:c5:df:4f:cb:cf:
         5a:47:10:af:a3:2d:00:2d:5a:17:f2:c2:58:fe:95:c6:35:7d:
         de:e3:87:f9:3a:8a:04:0b:fe:bd:d5:9b:a5:c8:ec:a6:42:b2:
         57:07:e2:3d:c2:4a:56:3e:f5:08:3e:29:8f:24:cb:30:b1:09:
         ab:b3:3d:62:ca:f0:25:fd:84:a4:0f:22:d7:c1:99:e2:a6:bd:
         35:f7:94:f1:9d:01:9f:b1:54:39:f9:69:d9:fc:25:ec:fc:d2:
         23:bb:14:57:a7:9c:86:51:24:25:fb:96:c0:5e:2b:74:4e:52:
         f4:61:df:2f:3f:89:5a:cf:d9:31:64:52:ee:77:e9:35:70:5f:
         73:94:7f:a1:93:cb:3b:8e:2e:63:c7:c6:16:f3:be:d9:e9:30:
         9c:d5:e8:3e:52:86:8f:ce:bd:95:62:85:cd:81:0e:83:6e:9e:
         41:c2:d5:ce:e7:79:5c:9f:38:96:91:c7:e5:74:c9:01:26:9d:
         40:c6:49:31:ff:34:fd:a0:20:e1:63:6e:ff:6c:c4:f7:21:31:
         6c:36:e9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org