Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135302e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135302e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          T877YEB0hyF+zyOjT4uuHoVww5YKVEkEjyKtxqWf3fI=
Subject key identifier:   39:A3:69:DF:A0:F3:D6:CE:40:5E:8D:DE:C6:E9:D0:16:4D:9A:07:5F
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       109FE686A40AD16CC53A2F2740B9D6A254C2726E
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135302e302f32342d3234203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:17 +0000
ROA not before:           Sat 04 Nov 2023 12:27:17 +0000
ROA not after:            Sat 02 Nov 2024 12:32:17 +0000
asID:                     262401
IP address blocks:        177.36.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9f:e6:86:a4:0a:d1:6c:c5:3a:2f:27:40:b9:d6:a2:54:c2:72:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:17 2023 GMT
            Not After : Nov  2 12:32:17 2024 GMT
        Subject: CN=39A369DFA0F3D6CE405E8DDEC6E9D0164D9A075F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:74:09:38:41:e3:73:01:84:17:21:26:7b:
                    a6:e0:25:aa:be:93:e9:91:20:11:15:d4:c9:03:16:
                    f6:64:e8:17:03:97:c6:0c:b5:7b:3d:18:ec:85:e2:
                    1a:ce:c1:9c:2d:6c:eb:86:53:a7:0a:f4:af:63:af:
                    94:9c:36:d1:45:64:73:f1:21:38:51:5b:3b:22:40:
                    99:96:bb:b7:e1:8c:e5:91:b0:39:34:ad:a2:c6:59:
                    f9:a4:49:66:96:79:ee:eb:29:22:48:ca:38:f3:d9:
                    94:64:84:84:87:77:aa:2f:ee:17:21:43:ca:7f:53:
                    3e:d5:3e:44:d3:43:90:e1:09:6e:5a:d0:44:19:eb:
                    a9:31:0b:20:55:6f:18:97:37:0e:09:31:8d:49:7d:
                    34:ed:c7:64:35:d7:86:96:9d:3d:05:52:24:05:7d:
                    57:b3:d2:45:60:04:63:18:70:50:92:f1:48:83:bc:
                    df:b2:68:fd:eb:c2:d7:ff:d2:af:51:6f:5c:75:32:
                    2d:41:74:5d:8a:0e:18:c6:b6:f2:9d:89:64:61:a0:
                    f0:46:f2:a3:28:be:bf:f9:8f:3f:e4:8d:5f:c3:12:
                    1d:a7:41:8b:a2:39:3e:40:64:ca:52:d2:c6:16:75:
                    64:ce:1e:47:0e:71:dd:6e:ca:65:27:e5:f0:cc:39:
                    0f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A3:69:DF:A0:F3:D6:CE:40:5E:8D:DE:C6:E9:D0:16:4D:9A:07:5F
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135302e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:04:09:9f:91:1b:fd:04:f9:e7:e8:ee:6e:88:ee:25:ad:b2:
         de:1b:f3:f1:12:07:38:78:4b:32:4a:42:08:a1:98:d1:da:22:
         20:1b:b9:d2:d4:43:72:f8:58:06:f1:c6:41:90:90:c0:e3:62:
         a8:71:da:5a:1c:18:92:66:ba:8c:6a:5e:6e:e4:a8:26:af:87:
         78:35:07:e3:4c:95:0a:6a:f3:81:c0:22:44:da:2e:39:de:50:
         45:4f:c1:31:80:bb:65:1c:ce:4c:70:af:d2:37:ee:9b:ee:aa:
         48:fe:12:83:25:69:7b:46:76:1d:ec:62:1e:07:5a:7a:b1:a9:
         74:e0:83:07:66:71:fb:30:0a:ad:38:61:ef:f6:20:d1:bc:74:
         e6:d7:ae:e8:24:3b:c0:1e:fc:38:78:df:fd:ec:7d:f9:c3:eb:
         1e:d8:48:2d:fa:71:41:d4:3c:04:65:10:f6:5c:86:3f:46:7a:
         17:39:14:c9:63:5a:36:e5:21:b8:e1:27:34:c0:b3:f0:d2:3a:
         b4:fc:d7:32:03:08:40:ad:76:f9:1d:02:b4:8c:7a:dc:67:35:
         3f:f0:a5:8d:f8:d3:ed:3c:22:af:32:a9:cc:5b:f7:c6:29:c5:
         32:d2:dc:18:3d:b2:83:65:2c:38:75:d7:5e:67:1c:36:81:7b:
         5e:10:91:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEJ/mhqQK0WzFOi8nQLnWolTCcm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlGRjM5NUFCQTU3RjYxNjRGNTU5REI1REU2Mjk3MTY2
Q0QwNjAwMzAeFw0yMzExMDQxMjI3MTdaFw0yNDExMDIxMjMyMTdaMDMxMTAvBgNV
BAMTKDM5QTM2OURGQTBGM0Q2Q0U0MDVFOERERUM2RTlEMDE2NEQ5QTA3NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcHQJOEHjcwGEFyEme6bgJaq+
k+mRIBEV1MkDFvZk6BcDl8YMtXs9GOyF4hrOwZwtbOuGU6cK9K9jr5ScNtFFZHPx
IThRWzsiQJmWu7fhjOWRsDk0raLGWfmkSWaWee7rKSJIyjjz2ZRkhISHd6ov7hch
Q8p/Uz7VPkTTQ5DhCW5a0EQZ66kxCyBVbxiXNw4JMY1JfTTtx2Q114aWnT0FUiQF
fVez0kVgBGMYcFCS8UiDvN+yaP3rwtf/0q9Rb1x1Mi1BdF2KDhjGtvKdiWRhoPBG
8qMovr/5jz/kjV/DEh2nQYuiOT5AZMpS0sYWdWTOHkcOcd1uymUn5fDMOQ/tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOaNp36Dz1s5AXo3exunQFk2aB18wHwYDVR0j
BBgwFoAUef85WrpX9hZPVZ213mKXFmzQYAMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NCa2Y0ckhMWDFyV3FYY2d0NXNIajU3TnRON05Zem9jNkNqWTMyWWFq
WHYvMC83OUZGMzk1QUJBNTdGNjE2NEY1NTlEQjVERTYyOTcxNjZDRDA2MDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc5RkYzOTVBQkE1N0Y2MTY0
RjU1OURCNURFNjI5NzE2NkNEMDYwMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDQmtmNHJITFgxcldxWGNndDVzSGo1N050TjdOWXpvYzZDalkzMllhalh2LzAv
MzEzNzM3MmUzMzM2MmUzMTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJJYwDQYJKoZIhvcNAQELBQADggEBAIwECZ+R
G/0E+efo7m6I7iWtst4b8/ESBzh4SzJKQgihmNHaIiAbudLUQ3L4WAbxxkGQkMDj
Yqhx2locGJJmuoxqXm7kqCavh3g1B+NMlQpq84HAIkTaLjneUEVPwTGAu2Uczkxw
r9I37pvuqkj+EoMlaXtGdh3sYh4HWnqxqXTggwdmcfswCq04Ye/2ING8dObXrugk
O8Ae/Dh43/3sffnD6x7YSC36cUHUPARlEPZchj9Gehc5FMljWjblIbjhJzTAs/DS
OrT81zIDCECtdvkdArSMetxnNT/wpY340+08Iq8yqcxb98YpxTLS3Bg9soNlLDh1
115nHDaBe14QkQY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org