Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133382e302f32342d3234203d3e203238353938.roa
File:                     3137372e33362e3133382e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          oVo/bbUi+yxXo768mLyO6JVBAVEMhBYqxZqIZc/GOO0=
Subject key identifier:   A7:50:33:89:F7:2B:B6:8D:5A:6A:19:05:00:B0:99:64:EA:BB:A7:B6
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       4D83AE77A7735C5A7D8DA13207A3996D27783573
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133382e302f32342d3234203d3e203238353938.roa
Signing time:             Fri 17 Mar 2023 03:51:14 +0000
ROA not before:           Fri 17 Mar 2023 03:46:14 +0000
ROA not after:            Fri 15 Mar 2024 03:51:14 +0000
asID:                     28598
IP address blocks:        177.36.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:83:ae:77:a7:73:5c:5a:7d:8d:a1:32:07:a3:99:6d:27:78:35:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Mar 17 03:46:14 2023 GMT
            Not After : Mar 15 03:51:14 2024 GMT
        Subject: CN=A7503389F72BB68D5A6A190500B09964EABBA7B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:5b:ff:85:e8:0f:dd:c8:7e:2b:1d:fc:25:
                    b1:09:f2:c8:7b:80:f2:21:51:4e:aa:75:80:26:32:
                    26:65:7a:93:77:14:ba:11:79:99:3a:f0:18:fd:a8:
                    73:06:17:3b:f1:cb:8e:3b:7f:55:ff:0d:a5:3f:0e:
                    ad:b7:7f:fc:c7:51:08:42:e8:1c:91:f3:e1:81:c1:
                    70:df:29:27:1f:e5:0d:66:b0:a8:a9:29:67:2a:50:
                    70:ea:a3:10:41:f3:37:3c:dc:c1:60:3e:c4:17:ca:
                    b2:9b:c2:35:7d:55:0d:af:e8:dc:4e:48:85:24:33:
                    5e:ef:36:49:b3:2e:a4:8d:11:62:34:15:77:a7:3c:
                    0b:15:96:76:13:60:f1:be:f4:05:e6:3a:b4:63:e0:
                    e3:01:46:56:26:e4:60:27:62:c1:ab:50:3d:09:a6:
                    26:0d:94:40:1e:8e:be:d8:18:45:79:c4:e2:c6:fb:
                    c0:d7:10:6a:68:9e:bf:94:9e:ef:41:de:50:5b:62:
                    38:f4:31:c1:04:31:5b:a2:5d:86:ae:b1:6d:5f:6a:
                    65:5d:76:b9:0d:dd:37:c7:83:62:db:97:24:76:22:
                    84:fa:a0:b2:c4:67:fe:f5:86:f9:91:06:1f:a5:12:
                    13:ed:4d:d1:b1:a1:e3:d7:8c:dd:f6:d5:04:2e:b3:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:33:89:F7:2B:B6:8D:5A:6A:19:05:00:B0:99:64:EA:BB:A7:B6
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3133382e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:75:95:12:be:2d:ac:4e:1f:93:06:af:12:78:84:5b:38:1d:
         cd:25:5b:fc:61:15:fa:42:7e:00:72:48:e7:bf:8e:3a:d1:db:
         c4:0c:6b:eb:f8:c8:1a:e3:1a:53:b7:3d:c4:41:df:ff:11:05:
         0b:f7:f2:ce:33:e5:9a:57:ba:89:24:7c:9e:e9:23:58:08:5e:
         74:74:2f:e3:6c:7d:b9:6e:4e:a2:9b:43:24:97:24:ab:2c:16:
         97:4e:bf:0d:97:4d:a7:74:e3:b3:10:85:4f:21:24:78:a7:98:
         30:91:72:69:72:47:ae:32:af:22:df:bc:3e:7d:0e:3a:a6:3c:
         4f:cc:c7:eb:50:e2:62:5e:9b:d5:15:75:af:47:c6:00:51:24:
         09:b9:c7:9c:92:00:82:02:a7:28:d4:39:e2:5d:de:1c:79:f1:
         86:4c:b5:b9:0b:04:a9:86:c6:ee:34:11:80:e2:27:bc:aa:1c:
         9d:11:92:35:31:cf:a3:02:2d:c4:5d:5d:d0:b4:9f:f2:68:97:
         35:10:af:94:53:95:d4:d7:b0:72:12:59:ef:fb:05:20:b7:aa:
         89:6f:d6:5b:c5:1d:d7:26:71:2e:da:1e:69:21:ec:2d:5c:5e:
         5e:74:7c:d6:8e:e2:66:ea:fb:9c:2c:84:02:48:32:68:ed:1b:
         82:62:55:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org