Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135322e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135322e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          haanZv+tybkcjkRPAwGnMD/X7gB8OxLujN6LFbMhTNo=
Subject key identifier:   5E:8C:80:E2:9C:4F:9B:CB:A7:D8:B4:B0:C7:49:2C:3C:9E:5E:50:5D
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       1B3EA7CA046B1796D03C1C52FC8D438525800AB1
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135322e302f32342d3234203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:15 +0000
ROA not before:           Sat 04 Nov 2023 12:27:15 +0000
ROA not after:            Sat 02 Nov 2024 12:32:15 +0000
asID:                     262401
IP address blocks:        177.36.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3e:a7:ca:04:6b:17:96:d0:3c:1c:52:fc:8d:43:85:25:80:0a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:15 2023 GMT
            Not After : Nov  2 12:32:15 2024 GMT
        Subject: CN=5E8C80E29C4F9BCBA7D8B4B0C7492C3C9E5E505D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:b3:07:58:c8:fd:3e:31:5a:87:46:48:a7:
                    bd:c7:6b:e8:38:85:18:70:1d:95:ee:e9:27:e2:b8:
                    57:49:6e:17:e5:da:50:64:e6:08:8f:7a:22:78:c1:
                    47:b6:cd:d0:1c:36:18:5c:11:3d:46:6d:68:03:15:
                    90:59:d0:29:a1:fb:0a:af:be:8e:82:76:7a:09:ed:
                    c2:7c:1f:2c:31:c1:b4:e0:ed:09:54:04:fb:e5:37:
                    87:52:b1:b8:00:2a:fb:55:cf:68:01:68:95:1e:1c:
                    3f:09:9d:f4:d1:81:d8:18:1f:96:ec:01:8f:fe:6f:
                    c0:73:9f:11:c4:40:1e:c7:c6:ec:81:72:99:fa:c8:
                    7a:35:9f:0d:87:3d:67:63:1f:77:cb:ad:b7:dc:7d:
                    01:f5:a2:1f:2d:5c:0a:9c:80:20:b7:2d:e9:e4:e2:
                    1d:bc:c9:e6:a4:b1:25:e1:d2:c3:b1:95:d2:61:74:
                    68:91:d6:13:75:a8:17:26:28:c1:91:8c:29:9b:11:
                    f9:e7:1e:cf:f9:2b:1d:59:93:bf:f7:bf:43:39:9c:
                    3e:88:14:8a:f5:b5:51:b8:5c:4d:50:d9:06:55:1f:
                    0b:f5:40:da:db:ea:c2:90:6c:db:7e:77:8c:66:f0:
                    94:1e:59:4a:87:9d:4b:b3:7a:39:62:7f:30:3d:88:
                    7b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8C:80:E2:9C:4F:9B:CB:A7:D8:B4:B0:C7:49:2C:3C:9E:5E:50:5D
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135322e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:18:e9:76:9d:77:9e:f0:6c:62:1c:0f:df:f0:b4:98:69:
         7d:e6:23:b5:b1:f1:6b:d5:2b:80:fd:80:0a:15:80:4c:51:8d:
         68:ec:1b:9f:83:d5:ea:9c:91:a9:7d:be:fb:d4:7a:c6:8e:94:
         c3:d2:e5:36:a6:d7:41:0b:a1:75:aa:13:2a:36:18:60:92:a9:
         00:c3:64:f5:8d:fc:cd:fc:bc:99:5b:5f:7a:16:72:54:cd:87:
         c9:96:f2:6f:96:00:bd:eb:83:21:9e:fe:9f:42:57:74:40:2c:
         11:af:2d:bf:6a:f7:9e:d9:8d:07:63:b9:b3:ce:eb:d2:50:5c:
         39:c7:40:12:f4:2c:0e:bd:c0:68:22:b2:ad:c2:a5:4f:da:68:
         01:12:d7:89:a9:b2:d9:4a:fd:68:b8:6d:ac:e6:ff:5e:0d:11:
         6f:47:51:48:a9:21:53:d4:76:bb:8c:33:84:77:98:34:e4:73:
         20:64:00:35:b5:29:cf:ef:83:ce:72:21:ba:e9:6a:6b:37:2c:
         ee:e2:17:21:08:d2:7a:04:6b:52:9a:2f:8d:8d:54:53:10:d1:
         b8:c8:0a:9a:b4:9c:b0:9a:6b:7a:a7:ae:24:a9:18:af:df:8e:
         93:bc:4b:0c:79:e6:31:68:53:eb:03:b8:d6:3e:33:81:4a:ce:
         0a:5b:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org