Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134342e302f32322d3232203d3e20323632343031.roa
File:                     3137372e33362e3134342e302f32322d3232203d3e20323632343031.roa (raw, json)
Hash identifier:          zPtRwopyWhA0V3uAVhwOsHVpxYRRQCCLUY7qxCQtrIw=
Subject key identifier:   F6:64:E1:4D:49:66:8E:39:43:10:23:A6:1D:51:AC:1C:AB:38:E4:65
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       714C18A60B69C9AC788EAB75516C46F1740B8C11
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134342e302f32322d3232203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:19 +0000
ROA not before:           Sat 04 Nov 2023 12:27:19 +0000
ROA not after:            Sat 02 Nov 2024 12:32:19 +0000
asID:                     262401
IP address blocks:        177.36.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4c:18:a6:0b:69:c9:ac:78:8e:ab:75:51:6c:46:f1:74:0b:8c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:19 2023 GMT
            Not After : Nov  2 12:32:19 2024 GMT
        Subject: CN=F664E14D49668E39431023A61D51AC1CAB38E465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:f9:1e:67:53:a4:23:4f:8a:1e:07:36:f1:
                    6d:65:c7:1b:0c:e4:c5:56:49:7c:f9:50:a8:93:d0:
                    a3:5d:78:1d:ec:e3:ff:be:6a:fa:bc:0c:a3:b7:1d:
                    de:91:d9:f5:54:ed:2a:c1:5b:29:82:4f:b0:d2:bf:
                    bb:d9:b0:0f:98:60:6d:e6:35:6d:13:13:83:d5:47:
                    80:f1:43:be:6f:00:39:63:43:2f:fa:d9:d6:bc:ff:
                    e9:af:2e:66:b6:5b:03:df:71:ff:27:96:4a:57:5a:
                    97:55:a4:75:4c:f0:18:cb:d8:d8:0b:f3:28:ee:bb:
                    8b:37:ec:8c:fc:87:01:9d:89:3c:3c:c4:f0:2b:ee:
                    c6:ea:79:92:8b:a7:81:ee:a3:e6:00:c3:8f:08:fd:
                    49:f7:66:37:b0:83:ff:9c:2a:bd:53:54:40:ed:02:
                    88:1b:97:c6:5d:19:c0:23:92:3a:f8:09:f7:5c:9b:
                    6c:a8:eb:87:76:15:a9:4a:5c:3a:06:8d:c0:8d:a0:
                    b5:af:48:37:38:74:de:24:d2:fc:22:1f:94:7c:1d:
                    09:ce:ba:19:16:ac:46:dc:11:26:cd:3f:db:00:ff:
                    da:6f:38:7f:c5:50:f1:75:2f:c1:f8:77:56:bf:b8:
                    5f:98:f2:e8:5f:e7:18:b5:f1:0f:39:dd:ce:d5:ae:
                    37:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:64:E1:4D:49:66:8E:39:43:10:23:A6:1D:51:AC:1C:AB:38:E4:65
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134342e302f32322d3232203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:ce:7f:ca:2d:2e:f8:32:fc:fa:75:bb:9d:db:8c:a1:6c:99:
         c6:06:44:65:52:19:1c:71:68:3b:52:c1:f2:d7:6b:11:14:a6:
         9a:a6:88:35:17:b1:57:82:32:8b:81:70:95:fb:5a:74:fb:a9:
         da:25:c1:18:07:42:a1:1b:2e:32:51:19:70:75:c1:03:94:4c:
         3b:75:63:32:43:d4:8a:15:32:83:e1:4b:d2:66:79:75:81:a2:
         38:7b:04:ba:4b:4a:8d:5a:e6:da:c5:b0:e5:ac:9d:46:fe:60:
         bd:06:6f:c0:9a:a0:88:5b:68:82:98:b4:cc:bc:55:1d:4c:ce:
         82:e6:da:20:50:4f:eb:c6:d9:23:2b:8d:40:71:77:9f:c4:36:
         15:7b:56:4e:f0:33:68:32:a3:a9:d7:c7:3e:91:8e:1e:34:44:
         2c:b2:75:43:7a:d8:68:d5:9d:52:6d:92:4b:f5:26:d9:c3:8a:
         a5:bd:87:7a:76:75:ef:be:7c:f3:51:40:0d:25:c9:74:c0:79:
         2b:23:a0:2b:e1:b9:13:e6:d4:65:4c:de:8a:ca:5a:a9:9a:ce:
         4b:43:a3:ed:80:cb:cf:a1:c0:ce:c1:51:20:68:34:3a:3b:7f:
         74:c7:1a:f9:e8:42:3c:c1:a0:13:75:8e:fc:5d:fc:6a:11:91:
         5f:d5:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org