Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134382e302f32322d3232203d3e20323632343031.roa
File:                     3137372e33362e3134382e302f32322d3232203d3e20323632343031.roa (raw, json)
Hash identifier:          ffQUhDr3HEcGyZcff1/erChH+OEMfRO3r6i5zz3NbUA=
Subject key identifier:   0B:CD:10:53:4D:79:52:A8:B0:E1:DF:72:A0:91:74:BA:E3:79:F2:33
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       65092031FD2616DD6735404E1770971E5080B384
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134382e302f32322d3232203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:05 +0000
ROA not before:           Sat 04 Nov 2023 12:27:05 +0000
ROA not after:            Sat 02 Nov 2024 12:32:05 +0000
asID:                     262401
IP address blocks:        177.36.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:09:20:31:fd:26:16:dd:67:35:40:4e:17:70:97:1e:50:80:b3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:05 2023 GMT
            Not After : Nov  2 12:32:05 2024 GMT
        Subject: CN=0BCD10534D7952A8B0E1DF72A09174BAE379F233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:f7:16:96:0d:30:0a:c3:c6:41:74:d6:3d:
                    a9:88:62:a8:11:1a:c0:5f:30:e0:49:37:9a:8a:1b:
                    21:dc:09:b9:5a:25:69:fa:7a:a1:21:0d:f5:20:93:
                    d3:5a:43:ce:dc:e0:41:73:87:f8:ba:b7:86:e0:4d:
                    99:9f:36:f9:97:69:88:c6:d6:a0:7a:8d:d7:7c:55:
                    a4:06:1f:53:96:33:cf:44:82:d3:40:0b:89:9c:d4:
                    53:b4:45:9f:11:08:fb:ee:34:fc:49:8d:db:ad:ac:
                    38:31:c9:d7:a2:11:54:3d:86:01:c0:f1:bf:ac:8c:
                    d8:05:b6:e9:8c:10:4a:fd:f6:63:0b:40:d0:c6:3f:
                    be:dd:af:3d:92:34:9d:74:a3:6b:0b:41:68:ec:8e:
                    ea:f4:1f:0b:b3:32:fc:a4:7f:66:fa:8b:36:ee:ab:
                    f3:62:d5:20:89:4e:17:a3:73:15:08:95:4a:d4:7a:
                    60:8b:4e:55:99:77:b3:85:83:cc:f0:bf:f0:ad:3b:
                    e9:f0:3c:5f:76:a1:c8:05:df:08:58:53:10:e1:22:
                    4d:8b:a2:22:9c:f3:fc:ee:a9:58:21:8e:a8:9c:94:
                    b5:a5:71:31:bc:61:29:4f:75:b5:76:20:d0:64:3a:
                    9f:19:5b:dc:0f:66:8a:2c:61:c9:3d:cf:3a:54:7e:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CD:10:53:4D:79:52:A8:B0:E1:DF:72:A0:91:74:BA:E3:79:F2:33
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3134382e302f32322d3232203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:0d:89:9d:06:d5:bc:7d:77:b8:f5:e4:f4:d0:d7:63:33:46:
         21:4a:f2:e3:18:24:23:32:33:ee:13:22:b5:7d:4e:d9:51:72:
         94:14:28:45:69:e7:83:0f:54:ce:bf:30:5e:cb:99:62:8a:71:
         0b:08:fa:e8:49:ac:c1:6d:9c:de:f3:e6:ba:5f:9d:64:a4:0f:
         93:a0:49:83:7c:bb:2e:e6:cd:e8:e5:2b:d9:59:e5:bc:4f:80:
         97:9d:ce:e6:30:32:e0:1b:80:07:54:5f:5f:ce:b8:13:c9:f5:
         e7:f1:3c:26:94:c1:75:68:27:12:56:46:52:9f:f2:cf:a1:03:
         4e:22:bb:3b:1a:67:91:47:71:77:6f:96:e1:c5:0d:2f:34:ed:
         b0:e1:91:2d:8b:f0:bb:75:30:1c:f0:06:dc:38:ab:e8:5e:5e:
         bb:2b:88:3f:f5:7e:3c:a1:71:2d:59:2d:27:c1:0c:89:b9:63:
         08:73:9c:c7:c9:b8:0c:13:a8:6c:26:cc:c4:f3:d9:a0:bd:24:
         9f:1b:60:a5:46:38:90:4f:1a:0b:fb:35:2d:f7:e6:c8:6a:11:
         90:d7:e7:ff:27:f7:bb:73:28:14:52:f7:4c:2b:10:49:bd:57:
         ad:99:93:79:c3:62:fc:92:3d:89:52:36:5a:57:77:66:84:ae:
         f9:6e:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org