Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa
File:                     3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa (raw, json)
Hash identifier:          q3v91uvgJ7c1mLtjk5Kkz/LcG6maCP23mvnuM95Wu4s=
Subject key identifier:   35:F6:28:01:CB:2F:C9:D9:75:5B:34:99:5E:BC:3C:70:FA:D8:F2:9F
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       0DDD0FEF6F8DC43A2010C6DA1E4B5A5B65664591
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:46 +0000
ROA not before:           Sat 04 Nov 2023 12:27:46 +0000
ROA not after:            Sat 02 Nov 2024 12:32:46 +0000
asID:                     262401
IP address blocks:        177.36.128.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:dd:0f:ef:6f:8d:c4:3a:20:10:c6:da:1e:4b:5a:5b:65:66:45:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:46 2023 GMT
            Not After : Nov  2 12:32:46 2024 GMT
        Subject: CN=35F62801CB2FC9D9755B34995EBC3C70FAD8F29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:28:4f:3b:74:ff:11:f9:ed:76:ea:2d:c2:
                    2b:a7:da:89:1f:be:15:3f:76:9a:6a:36:a9:88:32:
                    ac:68:64:70:3f:11:42:40:8f:24:d4:d2:d4:f2:e7:
                    cd:cd:08:90:23:51:f3:af:9a:be:d6:1a:48:ff:a0:
                    3a:02:00:4a:e1:b3:7e:bb:5a:71:80:dc:a5:bf:d9:
                    93:54:89:53:d6:11:86:f1:02:fc:27:ba:4e:95:b2:
                    ce:6e:26:97:08:a1:6f:fc:63:aa:f9:af:1a:b5:55:
                    f0:e7:46:95:eb:57:f7:9e:6f:a8:40:1b:1d:b2:2b:
                    d3:6e:35:09:a6:41:79:23:8b:d8:72:d6:9b:77:e0:
                    90:f4:d6:f7:da:97:e6:54:f4:41:e3:3f:d1:b8:c0:
                    c6:39:13:90:1b:44:6d:23:76:9c:ed:d8:55:96:f5:
                    87:89:aa:0e:f7:98:42:e2:7e:af:8f:56:d6:54:c7:
                    a2:7f:21:52:64:ca:d8:ae:42:96:24:10:12:bd:2b:
                    e7:b0:6f:49:b3:6d:df:d2:d7:20:ab:63:ea:6e:98:
                    c3:28:9f:ee:b6:f4:9d:75:f1:05:3d:1a:dd:a9:e8:
                    fb:8b:2a:97:ee:1b:4b:9e:09:ba:45:84:47:26:07:
                    b0:05:5a:55:30:e5:80:b7:e7:8b:60:f6:69:56:6b:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F6:28:01:CB:2F:C9:D9:75:5B:34:99:5E:BC:3C:70:FA:D8:F2:9F
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c3:29:a3:52:c9:39:67:a4:da:2c:08:c5:26:b2:9f:f6:79:05:
         12:7c:3f:5d:6c:8c:f3:60:ea:cf:07:86:46:9b:32:df:b1:1b:
         49:12:70:4d:50:f4:18:2c:f9:19:5f:5c:68:c3:55:3c:88:36:
         5e:fa:11:b2:c1:48:0e:2e:ce:4a:f3:07:c0:9a:22:e2:c4:76:
         85:fe:3b:69:69:88:7e:8a:c9:5b:0c:f3:ca:4f:0a:9e:1b:67:
         e6:6e:71:e2:76:cf:a7:fa:78:9f:0d:ce:dc:cb:9e:37:3b:5f:
         f0:01:82:15:fd:91:96:09:e0:a5:cd:5a:1e:d9:58:f5:2b:f8:
         bf:97:dc:0b:82:58:20:cf:6c:81:c0:c9:2a:d2:3a:22:1e:0c:
         70:f8:e1:e3:7a:42:e7:ca:da:56:0e:53:de:e3:c7:d4:e7:2c:
         cd:5f:07:f8:9c:a7:e7:fa:d6:ad:04:a4:58:cd:f1:6b:ef:c2:
         6f:48:8c:65:e2:9c:36:aa:0d:23:1d:34:dc:ad:65:f4:af:50:
         f2:01:e3:d0:f5:f9:73:eb:70:b2:11:a2:10:78:a0:f5:84:8c:
         1f:d6:41:cd:cc:c6:a1:b7:7b:49:b5:12:ad:a5:2d:26:56:92:
         8f:06:0e:21:71:1a:a9:f4:f0:37:72:73:d5:7a:84:5a:85:a0:
         01:72:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org