Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3132382e302f31392d3139203d3e203238353938.roa
File:                     3137372e33362e3132382e302f31392d3139203d3e203238353938.roa (raw, json)
Hash identifier:          UKRCJ1wUTpufYlBXDKxiK768QxeE9XvFoMylE6nWwxM=
Subject key identifier:   3D:0C:17:53:EF:F4:90:64:4D:68:5D:2B:19:DA:DA:11:59:67:64:D7
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       1CDA3012322CE426B830F335BAA0F755B63077D9
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3132382e302f31392d3139203d3e203238353938.roa
Signing time:             Fri 17 Mar 2023 03:51:18 +0000
ROA not before:           Fri 17 Mar 2023 03:46:18 +0000
ROA not after:            Fri 15 Mar 2024 03:51:18 +0000
asID:                     28598
IP address blocks:        177.36.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:da:30:12:32:2c:e4:26:b8:30:f3:35:ba:a0:f7:55:b6:30:77:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Mar 17 03:46:18 2023 GMT
            Not After : Mar 15 03:51:18 2024 GMT
        Subject: CN=3D0C1753EFF490644D685D2B19DADA11596764D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:64:4d:c7:34:19:02:27:c9:f8:ff:76:57:
                    5a:de:4a:87:b4:d5:58:b3:3b:ad:ad:ee:e0:08:cc:
                    ee:d1:ef:5a:eb:0e:ef:9d:79:74:e0:8a:79:ee:0f:
                    80:c8:ae:fc:26:e7:7d:e5:53:63:b8:72:a6:e6:58:
                    38:5d:ef:9b:53:f6:83:6e:0f:35:9b:d3:47:a9:f7:
                    a9:bc:94:3a:ce:8c:e2:f2:82:98:7e:63:33:59:04:
                    58:0e:f2:9c:a2:6a:bd:ae:6f:d9:81:5a:8e:aa:b5:
                    e7:2b:ce:c5:28:d7:c6:dc:e3:73:31:3d:be:50:12:
                    72:1f:8d:b4:30:c0:12:05:cd:51:ed:5c:43:37:2f:
                    e4:ef:e2:5d:75:51:68:1b:71:49:76:13:f9:96:bb:
                    22:53:0a:df:f2:95:7d:7f:28:03:d2:c0:80:7b:e1:
                    2f:af:dd:c1:b2:55:e5:a3:a8:52:10:f1:d5:36:5c:
                    44:f1:77:ae:6b:51:27:2f:4a:4c:d7:2f:7a:d3:33:
                    52:bc:f7:82:e4:3b:f4:a2:6c:0a:c3:b6:b2:ab:0a:
                    a4:63:62:42:ef:68:b0:34:38:17:bc:e4:24:c4:84:
                    0a:1e:90:10:72:f5:5a:f3:79:f2:75:a0:7a:a7:f5:
                    dc:62:86:d0:e3:60:49:25:20:7a:e7:cd:ac:83:19:
                    d0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0C:17:53:EF:F4:90:64:4D:68:5D:2B:19:DA:DA:11:59:67:64:D7
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3132382e302f31392d3139203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:39:4f:61:a9:42:4e:be:1c:d6:e6:7e:97:a1:9a:6c:68:94:
         ca:b6:fe:87:89:2a:6e:e8:5c:77:00:f8:de:8c:c3:f0:7a:6a:
         99:49:a8:a8:68:40:1f:45:de:f2:08:93:2f:e9:e8:ec:34:0d:
         20:9a:b4:55:b5:0a:18:b4:98:f1:9c:90:b1:e6:96:08:81:0a:
         c7:d8:8b:80:cd:41:30:e1:36:b6:7b:b0:6c:39:77:78:b6:3a:
         68:fc:82:0e:38:e0:3b:04:b8:08:b6:86:a1:9e:87:77:e7:36:
         8e:29:9c:8a:be:40:c5:60:4f:39:7a:8d:2a:9b:d3:0f:c9:05:
         a1:15:77:94:02:22:22:0a:a1:6c:78:12:21:40:50:95:82:c0:
         ce:5c:77:e9:2e:46:dc:11:22:a1:45:b0:1d:83:8e:83:2d:f4:
         22:38:f1:ee:e4:87:48:ef:f7:f7:90:1d:da:4e:d4:35:8d:71:
         42:46:d6:af:24:9c:ed:97:c0:58:bf:2a:2c:c9:85:ff:04:44:
         9d:d6:bf:f5:2f:93:a8:b9:ae:a2:1e:90:50:04:08:1c:69:f7:
         18:8e:f0:d5:c2:10:bd:d3:3c:cb:73:6d:4b:ad:0c:3c:73:f5:
         76:da:16:10:f9:78:e3:17:9b:d0:09:e0:ba:e5:3a:f6:02:77:
         2a:c1:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org