Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133352e302f32342d3234203d3e203238353938.roa
File:                     3137372e33362e3133352e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          R+q1sFjYAe9PrCg/6HXAoRKqlGElMG7VtQpo3Tw9GAY=
Subject key identifier:   65:8B:4D:AB:97:B3:86:56:35:2A:E2:3C:FE:21:70:90:F0:7B:AA:CA
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       12F0DCE953E91EF284F1BE6FC4EA340FD707A2AF
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133352e302f32342d3234203d3e203238353938.roa
Signing time:             Fri 17 Mar 2023 03:51:14 +0000
ROA not before:           Fri 17 Mar 2023 03:46:14 +0000
ROA not after:            Fri 15 Mar 2024 03:51:14 +0000
asID:                     28598
IP address blocks:        177.36.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f0:dc:e9:53:e9:1e:f2:84:f1:be:6f:c4:ea:34:0f:d7:07:a2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Mar 17 03:46:14 2023 GMT
            Not After : Mar 15 03:51:14 2024 GMT
        Subject: CN=658B4DAB97B38656352AE23CFE217090F07BAACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d9:96:67:8b:56:11:ae:28:cf:9a:b9:df:af:
                    38:73:ab:ef:51:7d:6c:2a:cd:a0:0f:2f:57:3a:e4:
                    49:18:98:b2:d2:2d:cc:bd:de:9f:27:9d:84:78:41:
                    74:f8:e6:aa:c9:b0:ef:d4:85:31:73:34:c8:a3:e4:
                    03:98:48:d0:a5:70:30:29:73:8d:bb:64:2b:2a:7d:
                    c3:94:d6:2a:ba:c4:d6:d6:8e:38:60:dc:48:b2:b4:
                    1a:3d:21:86:9d:13:d7:4e:b4:bf:6a:f9:a5:0e:c5:
                    c7:61:9c:7c:a2:53:e3:11:5f:90:b2:8e:d6:dc:f8:
                    e3:4a:f5:f8:3f:af:66:10:97:d1:0b:be:4b:9b:16:
                    a0:5b:84:ef:80:b3:06:77:af:6e:2b:e1:dc:61:ec:
                    6b:92:ee:d6:da:29:73:f1:a3:d6:94:9a:b3:21:f3:
                    64:89:80:0e:82:ab:81:80:45:ce:e5:89:4c:05:67:
                    7a:19:16:5a:8d:6a:50:6e:d1:1b:d0:7e:98:1e:02:
                    f7:14:5d:c2:cb:be:aa:46:1c:ad:83:c9:52:0e:d9:
                    7d:a6:d5:e0:4c:09:62:2a:df:de:c1:57:4a:3a:59:
                    0d:4d:47:19:94:eb:7e:ff:1d:58:53:ff:10:98:a7:
                    e1:9a:eb:26:ed:1f:02:b3:7d:3b:ff:ee:ee:90:39:
                    4d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8B:4D:AB:97:B3:86:56:35:2A:E2:3C:FE:21:70:90:F0:7B:AA:CA
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133352e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:d3:fc:2c:96:5b:a3:30:48:6b:c0:25:ba:9e:8e:96:3d:94:
         7b:87:f4:5f:2a:08:c7:e9:e9:cd:d9:2c:43:6c:8b:59:26:34:
         fc:c4:7a:94:65:f5:37:1b:85:3c:38:c3:ea:9e:7e:80:14:4e:
         36:a0:19:11:48:a1:08:25:ae:23:a5:d1:64:82:84:7b:26:eb:
         1e:93:12:95:09:f8:9c:53:9d:c3:6f:87:1a:45:cc:62:35:d2:
         88:29:40:e9:41:8a:3c:ac:5d:7a:64:59:7f:d5:dd:37:5d:21:
         5a:0e:d7:68:22:17:fc:63:4d:f8:42:15:19:6f:06:c1:17:9d:
         e8:69:a0:4e:cd:9b:dd:c4:f4:99:55:f1:ed:6f:53:04:da:5b:
         6e:0f:f7:62:8f:0f:ae:3b:14:a5:fc:f2:c8:42:a5:9a:af:b5:
         6b:0f:0d:76:0a:25:31:00:33:31:88:f5:6d:e4:5f:e1:1f:2f:
         a7:85:01:62:dd:c6:4b:2e:16:78:9b:0e:f9:9c:62:cb:4e:10:
         2a:60:a9:db:b3:62:07:97:3f:fc:e0:70:00:35:0d:f1:23:85:
         89:6b:83:f3:76:3a:b0:6c:1f:3e:30:83:3e:fa:a0:06:20:14:
         9d:03:1a:29:83:9c:4d:58:ad:10:7d:65:55:94:7e:54:51:1f:
         64:d5:a7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org