Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa
File:                     3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa (raw, json)
Hash identifier:          MYHx2rowuktC/7yh6n1gKtEZbRlqrCgrOJ0fXD5t2FI=
Subject key identifier:   1C:F2:64:5F:13:54:0D:C6:9D:02:CF:85:A0:C7:03:00:DD:08:94:94
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       0724A3A46B1C46FE87C7F4364E04553AAA8B3F3F
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:45:34 +0000
ROA not before:           Sat 04 Nov 2023 12:40:34 +0000
ROA not after:            Sat 02 Nov 2024 12:45:34 +0000
asID:                     262401
IP address blocks:        177.36.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:24:a3:a4:6b:1c:46:fe:87:c7:f4:36:4e:04:55:3a:aa:8b:3f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:40:34 2023 GMT
            Not After : Nov  2 12:45:34 2024 GMT
        Subject: CN=1CF2645F13540DC69D02CF85A0C70300DD089494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:94:15:9f:7a:b6:37:b4:dd:ff:a1:ba:62:82:
                    94:d4:ce:44:58:46:67:33:78:45:2d:dc:19:ec:69:
                    a2:d4:38:c8:f4:2e:27:a8:34:cf:29:d8:c9:79:fb:
                    db:6d:d5:6a:79:1c:3c:38:1e:17:c8:de:2e:24:e5:
                    05:14:09:11:4b:aa:e3:56:ca:9c:e1:b2:64:4a:03:
                    00:3d:c8:58:e4:73:cb:0d:1a:30:7e:d3:6b:ff:80:
                    68:37:aa:70:77:44:16:30:19:39:c4:d6:d1:6e:63:
                    b0:17:f1:a1:c0:c3:da:1b:73:18:b8:35:95:9a:b1:
                    64:a8:ec:ef:40:ab:27:b1:b1:41:72:9b:f0:f3:ee:
                    2f:1a:83:88:2f:08:ce:2b:d1:e2:df:c5:3e:5c:da:
                    8b:b1:54:5a:c9:92:60:41:2c:70:fa:bb:a7:d3:68:
                    35:43:d3:f3:e1:26:81:cb:46:e7:3e:0a:15:ff:4c:
                    ef:27:9e:45:0a:63:f4:db:e3:6f:b7:77:92:ce:7e:
                    11:1a:93:c1:22:68:4c:40:27:71:b8:fa:1f:62:3f:
                    8a:a8:99:f2:86:94:4d:24:7e:aa:83:3c:11:5c:b5:
                    96:c5:63:20:11:30:2b:e3:ad:61:5b:d6:73:ae:b8:
                    2c:76:0d:e3:8c:a1:16:c5:96:6c:5d:f9:e8:ab:39:
                    18:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F2:64:5F:13:54:0D:C6:9D:02:CF:85:A0:C7:03:00:DD:08:94:94
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:19:c8:fc:b4:3a:ce:09:6c:35:3d:1a:c5:59:58:23:80:e4:
         f4:5c:48:4c:ae:67:0d:68:f4:0f:d9:d6:9a:27:6e:1c:7c:89:
         38:f2:53:da:f8:ee:40:67:78:05:1d:f6:78:6e:e7:da:a3:ee:
         44:f8:d3:e0:1f:5b:35:fe:a1:56:25:fe:02:07:bd:2b:15:aa:
         cc:db:6b:fd:1d:18:64:c6:1f:f6:64:b2:f9:31:2d:4d:48:ef:
         2c:4b:9f:7f:01:56:43:85:b8:4a:2e:39:33:dd:e3:6e:53:e7:
         53:a5:7c:e3:f0:9a:1b:60:8d:f4:ea:51:2e:b8:a2:1c:c2:69:
         dd:a2:45:48:79:30:c8:28:9d:81:55:76:20:f4:6a:9e:5f:2e:
         fd:86:c3:a5:7c:be:47:88:3c:03:b1:63:e4:23:9a:0a:24:03:
         7a:28:c1:eb:2a:aa:d6:6a:60:08:36:a3:05:81:5a:0b:d3:2d:
         70:f1:75:0a:da:84:6d:2d:cb:07:bd:14:3b:af:75:c8:60:06:
         f0:a8:99:06:a7:66:56:a3:92:c7:d8:fe:57:ff:4d:f0:d9:e5:
         c6:d3:c2:81:5b:01:27:b1:c6:25:80:f0:31:fc:2f:35:69:d4:
         be:9c:9f:5a:e6:ee:90:e8:fa:79:5e:d8:58:f6:34:84:1e:ba:
         c8:9f:b0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org