Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135322e302f32312d3231203d3e20323632343031.roa
File:                     3137372e33362e3135322e302f32312d3231203d3e20323632343031.roa (raw, json)
Hash identifier:          f252WLQmeC/Y0Hoy7s0FzkEkgjjT3YmSYb4B0s7yFhU=
Subject key identifier:   54:18:BC:00:17:0A:65:4A:CF:6D:C6:24:B0:34:57:6D:49:B2:A0:D1
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       7A578018F8D7B13A77E240BB128206CAE7134150
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135322e302f32312d3231203d3e20323632343031.roa
Signing time:             Tue 18 Apr 2023 15:22:33 +0000
ROA not before:           Tue 18 Apr 2023 15:17:33 +0000
ROA not after:            Tue 16 Apr 2024 15:22:33 +0000
asID:                     262401
IP address blocks:        177.36.152.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:57:80:18:f8:d7:b1:3a:77:e2:40:bb:12:82:06:ca:e7:13:41:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Apr 18 15:17:33 2023 GMT
            Not After : Apr 16 15:22:33 2024 GMT
        Subject: CN=5418BC00170A654ACF6DC624B034576D49B2A0D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:31:b9:6e:8d:61:50:60:8a:16:8b:10:8d:
                    98:24:e3:d4:05:68:1a:16:06:13:0a:2b:3a:d1:2c:
                    b9:0a:bd:ab:c9:ee:df:1d:73:ae:86:a8:b5:a0:7f:
                    ba:14:51:db:56:20:3b:a5:32:2e:41:1e:2d:b3:76:
                    94:2a:c1:52:b0:e0:f3:b4:a0:5a:1f:38:a0:c9:78:
                    47:78:a2:10:82:34:1f:7b:91:f8:21:c5:3a:be:8f:
                    ab:a2:f9:cf:22:04:0f:8a:e0:5a:85:0a:ef:37:de:
                    c2:c4:b0:2a:fb:30:cb:af:41:ea:9a:ff:3a:23:e2:
                    ee:66:57:e2:3b:9d:93:9a:8c:d4:89:46:c7:53:62:
                    b1:f1:e2:55:dc:f4:39:de:4a:0b:64:f7:70:1d:82:
                    63:2f:b4:66:ac:02:90:7a:50:b1:2a:cd:5e:30:af:
                    b5:b5:15:f1:d0:b4:91:61:57:e2:ae:b3:23:80:4c:
                    1c:78:38:ed:13:28:db:66:eb:6d:3a:48:f0:1e:b4:
                    1e:93:e8:d8:d6:23:04:af:67:b0:0b:0a:06:75:81:
                    b7:8f:0e:5e:78:fa:8f:5b:0d:08:bd:8e:c1:b3:63:
                    a0:f0:bc:ce:cc:91:a0:81:d5:8b:c9:c7:78:e5:a7:
                    52:25:2b:18:c6:1a:0c:00:03:b4:98:a0:04:4c:c7:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:BC:00:17:0A:65:4A:CF:6D:C6:24:B0:34:57:6D:49:B2:A0:D1
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135322e302f32312d3231203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b8:db:44:50:69:e3:d3:56:25:ff:2a:9a:c7:32:ac:23:22:99:
         40:ad:b7:b5:69:5f:bd:d4:e9:21:d1:53:4d:c9:cf:58:e8:46:
         cd:a8:f7:5a:7c:83:3e:a2:63:3d:c8:3e:cc:ba:85:77:1a:b9:
         7f:04:95:ef:88:af:31:30:5a:ad:d7:98:c7:fd:f3:2e:de:e4:
         79:97:51:44:9f:d7:05:5b:51:a2:1f:d9:e7:bd:18:09:bf:84:
         ea:fd:a1:8a:c6:2e:5b:f6:cb:2c:d6:c8:fe:9f:52:c9:18:48:
         f6:97:a1:aa:6e:c8:fe:a1:e4:0f:ec:43:6b:c3:13:b3:ff:c2:
         50:60:3c:31:d2:46:d5:f7:9c:bd:78:a3:6b:ae:46:44:0b:e9:
         7b:4a:26:c9:0a:bb:db:9f:83:b5:d0:8b:34:df:3d:a1:21:7f:
         99:04:8b:b0:63:0b:03:b8:6c:0c:da:4e:4a:d5:b0:de:85:15:
         47:e7:7d:03:72:e1:35:80:c9:1a:3b:b8:8c:92:e2:39:9b:2e:
         8c:31:e5:17:33:c3:e3:85:b0:65:60:33:dd:b4:61:3a:84:64:
         9c:bc:24:14:97:55:12:db:0c:84:2d:00:d8:21:a0:be:f8:fc:
         ca:5a:a7:ad:14:7f:8c:5f:f7:7b:7e:44:f3:82:83:b1:be:4a:
         02:f3:9f:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeleAGPjXsTp34kC7EoIGyucTQVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM1MDE1NUIwODExREVBNkJGOEY5NTkwRTYzRjYyMTQ3
M0VEMkQyMjAeFw0yMzA0MTgxNTE3MzNaFw0yNDA0MTYxNTIyMzNaMDMxMTAvBgNV
BAMTKDU0MThCQzAwMTcwQTY1NEFDRjZEQzYyNEIwMzQ1NzZENDlCMkEwRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZDG5bo1hUGCKFosQjZgk49QF
aBoWBhMKKzrRLLkKvavJ7t8dc66GqLWgf7oUUdtWIDulMi5BHi2zdpQqwVKw4PO0
oFofOKDJeEd4ohCCNB97kfghxTq+j6ui+c8iBA+K4FqFCu833sLEsCr7MMuvQeqa
/zoj4u5mV+I7nZOajNSJRsdTYrHx4lXc9DneSgtk93AdgmMvtGasApB6ULEqzV4w
r7W1FfHQtJFhV+KusyOATBx4OO0TKNtm6206SPAetB6T6NjWIwSvZ7ALCgZ1gbeP
Dl54+o9bDQi9jsGzY6DwvM7MkaCB1YvJx3jlp1IlKxjGGgwAA7SYoARMxwEtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVBi8ABcKZUrPbcYksDRXbUmyoNEwHwYDVR0j
BBgwFoAUE1AVWwgR3qa/j5WQ5j9iFHPtLSIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NCa2Y0ckhMWDFyV3FYY2d0NXNIajU3TnRON05Zem9jNkNqWTMyWWFq
WHYvMC8xMzUwMTU1QjA4MTFERUE2QkY4Rjk1OTBFNjNGNjIxNDczRUQyRDIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzNTAxNTVCMDgxMURFQTZC
RjhGOTU5MEU2M0Y2MjE0NzNFRDJEMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDQmtmNHJITFgxcldxWGNndDVzSGo1N050TjdOWXpvYzZDalkzMllhalh2LzAv
MzEzNzM3MmUzMzM2MmUzMTM1MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxJJgwDQYJKoZIhvcNAQELBQADggEBALjbRFBp
49NWJf8qmscyrCMimUCtt7VpX73U6SHRU03Jz1joRs2o91p8gz6iYz3IPsy6hXca
uX8Ele+IrzEwWq3XmMf98y7e5HmXUUSf1wVbUaIf2ee9GAm/hOr9oYrGLlv2yyzW
yP6fUskYSPaXoapuyP6h5A/sQ2vDE7P/wlBgPDHSRtX3nL14o2uuRkQL6XtKJskK
u9ufg7XQizTfPaEhf5kEi7BjCwO4bAzaTkrVsN6FFUfnfQNy4TWAyRo7uIyS4jmb
Lowx5Rczw+OFsGVgM920YTqEZJy8JBSXVRLbDIQtANghoL74/Mpap60Uf4xf93t+
RPOCg7G+SgLznxM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org