Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133382e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3133382e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          DBPE+atVwk3KQSqYuNF4SnCY1u436FuMXbEZWd9Wa/g=
Subject key identifier:   70:17:8C:77:89:79:17:FC:7F:07:1F:60:64:D6:40:31:BD:CC:8E:9D
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       0C6977024202A05CA6CECB2CCCF20E1D7DE64373
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133382e302f32342d3234203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:13 +0000
ROA not before:           Sat 04 Nov 2023 12:27:13 +0000
ROA not after:            Sat 02 Nov 2024 12:32:13 +0000
asID:                     262401
IP address blocks:        177.36.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:69:77:02:42:02:a0:5c:a6:ce:cb:2c:cc:f2:0e:1d:7d:e6:43:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:13 2023 GMT
            Not After : Nov  2 12:32:13 2024 GMT
        Subject: CN=70178C77897917FC7F071F6064D64031BDCC8E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:e7:20:c1:a5:ec:b4:01:7f:23:dc:3f:85:
                    16:a8:c3:03:6d:f2:c5:22:6c:a9:f7:c5:96:ce:36:
                    7e:3b:45:77:31:42:51:de:c4:3d:da:53:4e:be:59:
                    dd:7d:d4:aa:7b:8f:f9:91:dd:f4:73:7b:79:81:eb:
                    57:95:af:56:4b:3a:a7:9d:41:6a:60:04:aa:01:80:
                    41:dd:e4:e9:4f:62:56:21:31:10:3f:9d:6b:18:cc:
                    0b:3d:ac:92:e7:99:b4:e7:04:a5:f5:ea:c0:bb:0b:
                    9c:10:0d:c4:3e:f7:c0:d3:15:b8:51:0c:18:a6:7b:
                    f8:f9:6c:b1:2e:27:4b:ad:e6:49:9a:6f:83:98:bf:
                    99:54:d6:11:92:5b:8d:0a:ff:ba:ba:92:22:c8:9b:
                    f8:95:7d:c8:3d:85:61:89:8c:92:6a:5e:9d:bf:bf:
                    1b:32:98:07:af:ee:ba:a6:57:d2:58:c7:93:20:db:
                    95:b4:2c:dc:64:4c:d9:39:ae:d3:31:79:a5:2a:40:
                    08:6b:17:1b:27:8e:4f:15:16:c5:f1:4d:89:af:dc:
                    2b:31:75:cd:1b:39:37:b5:02:36:59:d8:98:2a:1d:
                    43:a9:c6:74:7b:67:5d:64:51:d9:3e:c0:c0:32:50:
                    a3:8c:3e:57:c5:84:7e:be:0b:49:d3:38:d7:9e:1d:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:17:8C:77:89:79:17:FC:7F:07:1F:60:64:D6:40:31:BD:CC:8E:9D
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133382e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:1f:da:56:27:19:85:c3:37:77:36:1d:1f:82:49:3b:a1:56:
         ed:65:98:be:33:35:5d:95:51:56:68:68:17:b8:4e:aa:43:8c:
         c9:0f:0c:9d:0b:ce:51:12:09:66:51:20:41:b5:52:c8:40:f8:
         4b:19:57:98:d5:16:76:44:e9:f1:51:a8:0d:e0:da:6e:70:b6:
         5d:f6:bd:e9:4b:eb:c0:a5:93:08:a2:db:f3:36:d7:2e:f8:8f:
         d4:86:8d:78:c4:95:1a:5a:96:40:16:aa:78:78:f4:f0:aa:8c:
         5b:f3:c2:cd:33:b4:8b:ed:b3:58:b5:ed:02:ec:f1:f3:3d:f6:
         7f:a0:11:b5:03:e9:45:40:ca:e1:1b:9e:dd:a9:fd:21:85:61:
         8d:eb:a9:c6:4a:97:e5:a8:db:c2:88:47:3a:db:d7:96:ba:29:
         16:5a:a7:11:89:51:b0:6b:ec:74:9a:4f:2d:ae:f4:18:d6:df:
         e2:7c:0d:81:e1:03:30:4c:e9:f0:d1:b5:3e:3c:14:10:87:80:
         5f:8c:94:b6:68:43:97:14:8f:f7:a8:b8:61:dd:ea:4b:c8:fb:
         c7:9e:17:9c:ed:a8:6f:e6:ac:91:e1:02:b8:25:6c:4d:2d:3b:
         08:65:0e:c3:b8:e3:5a:d5:ac:d8:70:7f:88:0b:e2:bd:04:90:
         48:d8:43:10
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDGl3AkICoFymzssszPIOHX3mQ3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlGRjM5NUFCQTU3RjYxNjRGNTU5REI1REU2Mjk3MTY2
Q0QwNjAwMzAeFw0yMzExMDQxMjI3MTNaFw0yNDExMDIxMjMyMTNaMDMxMTAvBgNV
BAMTKDcwMTc4Qzc3ODk3OTE3RkM3RjA3MUY2MDY0RDY0MDMxQkRDQzhFOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7ucgwaXstAF/I9w/hRaowwNt
8sUibKn3xZbONn47RXcxQlHexD3aU06+Wd191Kp7j/mR3fRze3mB61eVr1ZLOqed
QWpgBKoBgEHd5OlPYlYhMRA/nWsYzAs9rJLnmbTnBKX16sC7C5wQDcQ+98DTFbhR
DBime/j5bLEuJ0ut5kmab4OYv5lU1hGSW40K/7q6kiLIm/iVfcg9hWGJjJJqXp2/
vxsymAev7rqmV9JYx5Mg25W0LNxkTNk5rtMxeaUqQAhrFxsnjk8VFsXxTYmv3Csx
dc0bOTe1AjZZ2JgqHUOpxnR7Z11kUdk+wMAyUKOMPlfFhH6+C0nTONeeHfY9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcBeMd4l5F/x/Bx9gZNZAMb3Mjp0wHwYDVR0j
BBgwFoAUef85WrpX9hZPVZ213mKXFmzQYAMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NCa2Y0ckhMWDFyV3FYY2d0NXNIajU3TnRON05Zem9jNkNqWTMyWWFq
WHYvMC83OUZGMzk1QUJBNTdGNjE2NEY1NTlEQjVERTYyOTcxNjZDRDA2MDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc5RkYzOTVBQkE1N0Y2MTY0
RjU1OURCNURFNjI5NzE2NkNEMDYwMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDQmtmNHJITFgxcldxWGNndDVzSGo1N050TjdOWXpvYzZDalkzMllhalh2LzAv
MzEzNzM3MmUzMzM2MmUzMTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJIowDQYJKoZIhvcNAQELBQADggEBAJAf2lYn
GYXDN3c2HR+CSTuhVu1lmL4zNV2VUVZoaBe4TqpDjMkPDJ0LzlESCWZRIEG1UshA
+EsZV5jVFnZE6fFRqA3g2m5wtl32velL68Clkwii2/M21y74j9SGjXjElRpalkAW
qnh49PCqjFvzws0ztIvts1i17QLs8fM99n+gEbUD6UVAyuEbnt2p/SGFYY3rqcZK
l+Wo28KIRzrb15a6KRZapxGJUbBr7HSaTy2u9BjW3+J8DYHhAzBM6fDRtT48FBCH
gF+MlLZoQ5cUj/eouGHd6kvI+8eeF5ztqG/mrJHhArglbE0tOwhlDsO441rVrNhw
f4gL4r0EkEjYQxA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org