Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134362e302f32342d3234203d3e203238353938.roa
File:                     3137372e33362e3134362e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          D51xh6j+vMmLRWx/ijnHUjcLiQdKRMj/fC1vIBeDX6c=
Subject key identifier:   24:E0:BB:3A:74:CE:38:1C:BE:66:83:38:87:5D:45:C0:DA:8F:C9:54
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       7A074D9EA5AC4D29630455B42ECFF3C9BFAB54A5
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134362e302f32342d3234203d3e203238353938.roa
Signing time:             Fri 17 Mar 2023 03:51:17 +0000
ROA not before:           Fri 17 Mar 2023 03:46:17 +0000
ROA not after:            Fri 15 Mar 2024 03:51:17 +0000
asID:                     28598
IP address blocks:        177.36.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:07:4d:9e:a5:ac:4d:29:63:04:55:b4:2e:cf:f3:c9:bf:ab:54:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Mar 17 03:46:17 2023 GMT
            Not After : Mar 15 03:51:17 2024 GMT
        Subject: CN=24E0BB3A74CE381CBE668338875D45C0DA8FC954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:3c:64:59:19:6e:94:73:eb:ba:37:1f:84:
                    bb:ac:c4:59:4e:03:67:b1:2d:8b:c3:57:59:31:4b:
                    b5:28:c9:e2:4d:58:9b:a0:d8:ee:fd:e0:e5:e8:89:
                    33:51:b6:a9:06:89:68:5d:e9:0d:b1:ea:c5:e1:65:
                    e8:7c:cf:67:f2:ed:d1:ea:16:1d:a2:42:da:78:0f:
                    6d:33:33:d8:62:18:18:04:d6:28:e0:74:57:37:c0:
                    a5:6d:4b:b6:f9:95:89:2b:77:f7:f1:20:dd:e8:fe:
                    b4:2f:d3:d5:e1:c7:ef:7f:dc:c7:b0:6f:b3:16:b2:
                    ad:a5:6b:31:a3:3d:98:ce:d0:fb:72:66:ea:19:67:
                    57:02:42:39:46:61:87:c5:1e:ac:cb:0e:41:10:89:
                    a8:21:74:41:5f:4a:00:43:b3:8d:4c:42:fe:f2:5e:
                    50:3c:8b:64:cc:36:2a:35:d4:7c:51:13:25:fe:45:
                    92:57:5e:a5:02:3c:68:b1:d6:14:68:c5:b2:d4:be:
                    5a:d1:08:c2:ec:9d:b0:61:f8:c9:76:b2:da:82:37:
                    f6:89:dc:e1:ae:65:2f:0b:c2:b1:3a:98:4d:11:95:
                    55:a5:33:4c:9b:a6:bc:91:29:e0:d5:be:a5:df:52:
                    30:fb:e9:e6:a4:4d:32:97:cb:f2:df:9b:86:6d:cd:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E0:BB:3A:74:CE:38:1C:BE:66:83:38:87:5D:45:C0:DA:8F:C9:54
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134362e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:8c:f4:4b:e2:c7:a5:71:ff:9b:9a:2e:95:b3:1e:17:34:82:
         27:08:2d:09:dc:46:bf:d7:58:c9:e0:b7:52:08:b5:20:c9:f8:
         d3:c7:7b:4b:0d:77:d4:57:82:1a:28:c3:11:84:f9:dc:7b:c2:
         8a:c7:e4:36:8b:30:82:7b:97:cc:41:b6:85:7b:ca:82:43:79:
         dd:b4:ab:d1:98:55:cc:52:da:ab:e0:b5:82:10:cb:e0:8e:19:
         fb:3b:d4:18:0b:1e:0e:c0:3d:82:cb:88:2e:bf:75:10:82:30:
         5a:17:dc:28:b7:ce:1d:b6:1c:3a:28:8c:58:8e:73:f5:51:26:
         0d:b6:31:d3:d7:f1:f9:e1:f2:f5:bc:47:c4:3b:f7:cf:45:15:
         41:cc:20:9f:5c:2b:c7:dd:c2:40:17:dd:90:0e:b3:8e:e8:e9:
         2f:33:e5:33:24:11:da:c6:f0:4d:5d:bd:bd:6b:b4:9e:de:6d:
         f5:27:ff:4a:c4:fc:0c:47:98:0a:46:06:04:94:7c:36:31:e1:
         92:c5:83:23:e5:97:55:ae:33:74:6d:f3:bb:16:c9:0d:02:ec:
         2c:c6:70:1f:ee:98:6a:df:fb:f5:09:12:fe:d9:68:fe:66:5d:
         6e:41:aa:25:84:5f:ee:e8:08:86:57:86:89:28:65:69:c9:48:
         9e:e6:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org