Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133372e302f32342d3234203d3e203238353938.roa
File:                     3137372e33362e3133372e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          EQjzhKoBZmv/ap4sZl6+9zh92ryfb03qHx3xVP1vqOo=
Subject key identifier:   4E:16:73:38:98:BF:76:1E:58:59:21:46:66:1E:FD:68:D9:6A:93:DE
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       2BB68FAACAA776AAF576E03290C5BCDC16F2BF10
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133372e302f32342d3234203d3e203238353938.roa
Signing time:             Fri 17 Mar 2023 03:51:19 +0000
ROA not before:           Fri 17 Mar 2023 03:46:19 +0000
ROA not after:            Fri 15 Mar 2024 03:51:19 +0000
asID:                     28598
IP address blocks:        177.36.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b6:8f:aa:ca:a7:76:aa:f5:76:e0:32:90:c5:bc:dc:16:f2:bf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Mar 17 03:46:19 2023 GMT
            Not After : Mar 15 03:51:19 2024 GMT
        Subject: CN=4E16733898BF761E58592146661EFD68D96A93DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:c5:87:f7:fe:57:41:6c:23:fb:92:ff:3f:
                    a5:4f:15:18:6e:10:b2:17:52:19:1d:61:c6:7b:e3:
                    35:b8:c4:80:b2:50:4c:ca:9e:ad:a4:22:90:8c:6a:
                    f4:c3:9e:ec:38:4e:ed:e2:af:f9:61:1d:ac:f4:fb:
                    7d:85:7e:94:e6:95:08:c7:e0:f8:0d:d5:d9:77:65:
                    e9:47:ca:4d:de:11:27:af:a1:cf:08:3d:f0:0d:b5:
                    93:0a:ef:77:77:43:a8:ae:ce:cb:80:2d:0a:5d:5b:
                    ea:c1:f0:91:ed:dd:d3:cd:ee:b2:d1:6a:d6:49:b9:
                    9f:d5:ae:73:1c:39:6d:09:b9:ed:36:06:e7:fa:91:
                    e0:a6:dd:52:75:c4:44:ba:fc:ab:af:14:f6:07:5e:
                    12:94:ab:13:20:43:58:ce:06:79:41:82:04:be:12:
                    cc:4d:b9:5b:e7:c3:8e:fd:8c:23:cb:f4:a2:c7:cd:
                    66:f2:22:f7:45:85:b1:92:56:2a:80:b7:de:15:01:
                    d6:a3:7e:d7:70:29:ff:45:42:f7:5e:63:cf:b3:cd:
                    4c:39:95:3f:94:ce:b1:dc:44:5c:a8:81:8c:f2:23:
                    74:b8:5e:8b:14:69:36:b7:c4:b3:f7:3f:56:63:6a:
                    74:6c:be:6c:c1:ca:f4:7f:ab:f3:a4:b9:33:d9:e2:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:16:73:38:98:BF:76:1E:58:59:21:46:66:1E:FD:68:D9:6A:93:DE
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133372e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:34:b3:ee:c1:45:22:43:84:cb:b3:bf:b1:da:8a:39:6b:8f:
         ad:6d:49:d6:47:f2:68:3a:6a:31:75:94:ab:54:31:60:53:b3:
         3f:8e:73:fe:0d:ec:12:39:66:a2:7e:58:c7:f7:59:d5:a2:52:
         bd:55:e3:0b:d2:04:db:4f:1d:f1:cf:97:1a:65:23:bf:c9:d5:
         c2:e6:2b:e2:92:45:cf:36:59:7c:80:9f:f1:bd:f4:3a:6b:00:
         c4:5e:2f:df:ae:81:1f:c1:b9:9c:de:3e:ef:87:f9:a3:f5:c7:
         a7:49:c6:4d:52:e4:0b:a1:53:35:5a:a8:46:23:4f:99:38:d5:
         4d:fd:4d:89:91:fd:02:d8:96:dc:bb:0d:cb:21:32:78:7c:0a:
         b5:13:b0:b7:1f:59:2e:2d:e1:8b:31:c3:53:b4:3d:cc:02:60:
         c5:5f:c3:bb:e4:b0:e7:55:60:fd:35:89:2c:ad:3f:3c:7a:c5:
         8c:40:cb:b4:d7:6c:cf:9d:db:65:e4:38:c0:f5:30:7c:5c:5f:
         a1:4a:d7:91:88:02:51:e2:04:c8:e9:bd:ee:5f:e8:01:7b:16:
         33:95:e4:72:65:af:8a:65:f1:fe:c5:da:df:43:1e:bc:f5:5b:
         41:3d:d0:17:be:0b:9e:94:4e:b2:b1:96:ef:b4:86:d9:43:f1:
         99:14:2b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org