Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133332e302f32342d3234203d3e203238353938.roa
File:                     3137372e33362e3133332e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          9OHyr34KerBfW38RhBCUQp1bXDOrQuOlqp8oZeHENeg=
Subject key identifier:   81:77:76:55:2E:61:9B:C0:F5:1D:38:DE:DE:D4:1B:0E:8A:F7:80:32
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       42F49D53BFAF52593066E9BFB9811C01559EBBFF
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133332e302f32342d3234203d3e203238353938.roa
Signing time:             Fri 17 Mar 2023 03:51:15 +0000
ROA not before:           Fri 17 Mar 2023 03:46:15 +0000
ROA not after:            Fri 15 Mar 2024 03:51:15 +0000
asID:                     28598
IP address blocks:        177.36.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f4:9d:53:bf:af:52:59:30:66:e9:bf:b9:81:1c:01:55:9e:bb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Mar 17 03:46:15 2023 GMT
            Not After : Mar 15 03:51:15 2024 GMT
        Subject: CN=817776552E619BC0F51D38DEDED41B0E8AF78032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:a5:67:8a:3c:a8:59:c7:9c:21:4b:d4:1b:
                    22:23:be:9f:b7:8b:c0:57:f6:9a:c5:f7:31:70:7d:
                    bd:f0:c4:e4:93:6a:6b:62:87:8e:9e:d5:91:05:17:
                    2e:05:93:b0:6c:06:01:87:ee:60:d1:84:95:ec:44:
                    e8:73:bd:49:10:2a:01:41:73:84:3e:8d:26:62:bd:
                    f7:e2:f1:c6:f0:a3:f7:54:d0:0e:e5:d5:79:d6:9a:
                    ad:79:b4:5b:a8:51:1b:ab:20:6d:17:7c:cc:94:82:
                    9f:2b:77:f1:0f:29:43:b1:e3:46:a1:9f:06:3f:cc:
                    a1:ba:81:d9:cb:46:ed:88:07:96:3e:72:24:0d:8a:
                    a7:7d:41:a9:d7:2d:4e:37:ed:3d:78:57:da:68:b8:
                    35:73:d8:b0:e2:76:2d:81:0b:a8:7d:07:12:dc:f1:
                    9c:16:d3:5f:46:77:01:08:e7:e4:6c:df:f1:8b:4f:
                    79:4c:d9:ea:f4:45:a0:5f:e9:4d:44:8b:c9:fc:cc:
                    78:3b:92:73:0e:33:d0:3e:4f:b0:a0:28:02:8c:bd:
                    21:6b:21:fc:6c:a4:30:2d:44:dd:f9:84:eb:15:f7:
                    0d:94:d3:46:f6:21:f2:28:5b:5e:9d:d2:07:86:d2:
                    5d:b8:1d:3e:dd:47:d8:c1:e2:a8:0f:88:b9:f0:c8:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:77:76:55:2E:61:9B:C0:F5:1D:38:DE:DE:D4:1B:0E:8A:F7:80:32
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133332e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:4b:27:3d:1c:3d:c3:c9:be:c5:c0:e4:25:cb:0a:47:ed:8f:
         e7:4f:45:10:22:28:27:bd:a5:d2:72:89:a6:5a:9e:ce:b0:bb:
         67:dd:00:eb:68:4a:39:7b:b9:dc:10:83:b7:1e:66:fd:e1:c7:
         62:10:f9:ce:fb:a0:ac:a2:05:67:52:87:12:f8:94:2e:c1:d6:
         85:35:c8:85:94:40:c6:9f:9b:78:2f:eb:ad:3a:4b:6d:a5:84:
         a4:7e:04:12:20:8a:6e:c9:9f:e8:77:12:f9:79:cf:81:be:c5:
         86:da:24:65:a9:29:eb:c4:78:3f:f6:0c:3c:0b:67:f7:70:27:
         e9:a2:b1:8b:9d:f0:b8:2a:bc:09:f0:09:64:24:ab:2b:c5:60:
         ec:9a:ab:fc:48:e2:1b:c5:77:da:28:d4:34:91:26:0e:7d:43:
         e2:7b:1d:52:71:ac:5f:89:a7:b5:fb:aa:d7:cd:33:6d:fa:bc:
         ba:da:a7:d6:f8:bd:02:ae:75:2e:36:9c:c4:f9:11:a6:54:c1:
         e2:71:93:81:3f:14:23:c2:53:0f:14:89:1b:74:53:79:e3:94:
         f7:d9:cd:fe:03:49:f9:48:bd:e8:ad:47:5b:2b:bc:59:55:e8:
         78:5a:4d:13:4b:cd:21:0a:31:a6:3e:fd:3e:1c:75:af:34:96:
         ac:a0:e9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org