Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134312e302f32342d3234203d3e203238353938.roa
File:                     3137372e33362e3134312e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          aelxY5Mk+tGaEuZyg54xsOiNSbV4n2B7sdRkILAI7+4=
Subject key identifier:   D4:69:55:DB:BA:0F:16:88:D8:0C:CD:C8:15:B0:73:21:73:28:6B:A1
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       20C0B2EA9E0E7F76567164B03768DAB59C068051
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134312e302f32342d3234203d3e203238353938.roa
Signing time:             Fri 17 Mar 2023 03:51:19 +0000
ROA not before:           Fri 17 Mar 2023 03:46:19 +0000
ROA not after:            Fri 15 Mar 2024 03:51:19 +0000
asID:                     28598
IP address blocks:        177.36.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c0:b2:ea:9e:0e:7f:76:56:71:64:b0:37:68:da:b5:9c:06:80:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Mar 17 03:46:19 2023 GMT
            Not After : Mar 15 03:51:19 2024 GMT
        Subject: CN=D46955DBBA0F1688D80CCDC815B0732173286BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c6:02:8d:aa:ee:12:3b:a1:20:2f:bd:5b:c5:
                    f3:01:19:7a:75:a4:44:16:9f:66:f9:71:8e:d1:0b:
                    ee:19:8b:32:78:69:f9:5d:e4:21:c6:d1:47:f7:a4:
                    66:6d:5b:ad:62:08:05:05:bb:de:c8:ec:fc:ec:c8:
                    49:73:39:eb:2f:a3:a4:19:87:5d:1d:14:48:e3:a3:
                    43:92:ce:11:b9:52:7f:29:f6:6c:d2:99:bd:40:ae:
                    25:ba:24:14:31:96:bc:b4:7a:9b:de:72:39:2e:23:
                    e9:d3:60:a4:af:e0:4a:c4:90:f8:8a:37:f8:e5:1a:
                    e4:ec:79:b8:53:66:72:c2:64:75:c2:3f:97:6d:4e:
                    70:50:23:d5:0c:71:07:03:f4:3e:88:4f:89:02:bc:
                    19:9f:4a:67:d0:2a:d5:8b:fa:93:58:ad:22:21:e2:
                    84:d3:28:6b:75:43:2e:c8:01:ec:d9:59:d1:d3:ae:
                    a0:71:ea:54:55:e7:b1:c4:bc:6c:33:0c:57:9c:b5:
                    70:24:71:27:04:e5:0a:ce:e5:ed:d1:02:a8:08:35:
                    d4:83:bc:06:bf:07:a4:b4:62:3b:4c:9c:b7:73:50:
                    04:30:0e:07:e6:4f:b0:0c:65:2d:f1:f5:ee:6b:5b:
                    76:ba:a2:51:ea:2c:65:0f:ea:cf:e8:19:ba:f0:1f:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:69:55:DB:BA:0F:16:88:D8:0C:CD:C8:15:B0:73:21:73:28:6B:A1
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134312e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:41:55:3d:12:be:28:6a:f7:9f:35:aa:4e:5e:2a:7a:5d:
         1e:4c:fe:78:b0:d8:6d:62:78:a2:d7:49:1a:8e:c6:c6:b6:93:
         b3:cb:ad:5c:cc:aa:52:52:d1:7f:b0:48:52:df:f0:84:04:e2:
         42:99:53:af:72:bd:ed:ce:83:ef:35:64:76:b7:05:bb:f7:96:
         68:d0:70:96:b6:80:ba:97:e3:34:a8:e3:21:dc:f4:71:1e:1e:
         3b:80:7c:64:82:de:ec:c6:a5:b8:b6:c4:c2:f8:f0:90:95:b2:
         89:fc:49:7f:af:b6:13:d2:08:b0:65:71:40:57:33:e2:6c:4e:
         5b:90:50:57:65:54:5e:66:85:7b:78:9c:87:41:97:c0:7f:bb:
         f7:66:8a:5b:64:f3:b2:06:4e:32:6f:69:22:35:cf:eb:86:93:
         22:1e:3e:fb:f7:7d:59:15:04:56:1f:ba:68:83:ee:df:c7:35:
         ea:c9:98:df:02:f6:8b:ff:09:5e:be:da:87:ca:3d:e9:07:a3:
         ab:4c:b2:3f:41:36:49:fe:71:32:57:b9:32:5d:78:e8:da:40:
         2f:e9:c5:b4:10:1e:44:42:00:df:db:ee:e9:17:ac:ad:b5:02:
         42:ac:b3:c6:90:d1:8c:b8:0b:08:9d:60:97:e2:12:7d:59:34:
         04:eb:cd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org