Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135322e302f32342d3234203d3e203238353938.roa
File:                     3137372e33362e3135322e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          THeLqL0KthDimZOmcMYymOTmw6hjWa8RFa672cZPC20=
Subject key identifier:   3E:66:64:7F:C3:54:88:FD:D7:42:F2:CD:B4:D9:1D:E0:BF:BD:E6:79
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       02784C4573EEBF12EC937DC634C3A928322DD306
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135322e302f32342d3234203d3e203238353938.roa
Signing time:             Fri 17 Mar 2023 03:51:14 +0000
ROA not before:           Fri 17 Mar 2023 03:46:14 +0000
ROA not after:            Fri 15 Mar 2024 03:51:14 +0000
asID:                     28598
IP address blocks:        177.36.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:78:4c:45:73:ee:bf:12:ec:93:7d:c6:34:c3:a9:28:32:2d:d3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Mar 17 03:46:14 2023 GMT
            Not After : Mar 15 03:51:14 2024 GMT
        Subject: CN=3E66647FC35488FDD742F2CDB4D91DE0BFBDE679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:bc:cf:d6:d4:66:81:75:98:0c:70:b4:ad:
                    85:b9:75:0a:f0:38:d2:b7:17:c2:96:a9:48:33:c0:
                    69:2c:b0:83:41:10:f8:4e:78:90:eb:ad:6b:5a:49:
                    53:79:bb:8b:55:8b:03:fd:a1:52:76:41:48:e1:8c:
                    6d:f5:ee:88:16:ff:f5:13:b4:82:a6:37:56:da:8e:
                    16:dd:81:87:d9:4e:2d:36:fa:07:6c:b2:5e:cd:e1:
                    b0:34:61:75:c1:d2:cd:e7:fe:e3:69:59:ec:fc:0e:
                    f6:12:c5:38:06:18:4e:15:c8:3d:a8:02:9e:91:25:
                    a8:ba:ac:87:d6:91:0d:72:ee:b9:d5:26:42:ef:c7:
                    5e:46:6a:81:7e:a0:df:1a:1c:4f:1b:8a:23:7f:f8:
                    50:8a:95:65:b9:37:85:c6:b4:a1:71:70:b3:51:7e:
                    0b:92:07:d9:de:d8:7f:b2:7e:73:66:cf:df:11:99:
                    9b:6a:3f:99:6d:3f:95:ff:a0:b4:6a:dd:83:c8:47:
                    72:0f:ab:68:81:25:78:24:a2:7c:4f:ac:aa:b0:94:
                    5c:9c:d9:4a:79:a6:53:18:c5:f4:8c:2f:82:77:68:
                    cf:06:63:fe:3e:bc:7c:29:f8:0a:a6:da:c8:63:d4:
                    9b:79:87:ad:4f:d2:29:a3:65:17:ff:d3:63:15:57:
                    fa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:66:64:7F:C3:54:88:FD:D7:42:F2:CD:B4:D9:1D:E0:BF:BD:E6:79
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135322e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:13:d6:90:f5:94:e8:87:dc:2b:0b:df:0b:e0:79:ae:84:78:
         6b:d9:11:92:32:7a:08:c9:92:96:59:31:d7:61:76:dc:86:58:
         d1:d6:6c:92:6c:52:16:24:e6:c1:9f:f3:53:7e:c7:88:92:4b:
         3c:0a:39:54:95:a9:16:be:c4:1a:ab:1d:f5:ed:a2:42:06:37:
         09:5e:2a:12:e5:bb:b4:e7:5f:11:93:3b:9b:89:91:a4:76:8b:
         8c:3f:1e:9a:8f:80:38:41:da:6b:0e:b0:96:5a:6b:7b:71:3f:
         8e:6e:12:4b:e5:f0:2d:71:2b:24:dd:7f:5c:75:91:f8:1a:ab:
         93:c6:f4:f9:2f:f2:cd:c5:6b:2b:18:ad:ec:9e:e1:52:94:12:
         d9:bb:3c:60:ac:97:2f:34:e7:db:26:f8:87:ea:ce:01:30:8d:
         93:9d:a1:e4:5b:be:15:5b:74:ae:dd:9c:28:22:fb:ad:27:93:
         f0:5d:db:af:0d:43:6f:02:09:36:0f:fc:d9:1d:d1:4c:f6:f9:
         ec:0b:ef:46:b2:35:9a:ea:bf:f6:38:44:6a:c2:62:0b:9c:ca:
         9c:26:55:a7:3a:62:81:a9:e8:45:8f:06:15:b0:cd:c8:52:c6:
         48:9d:4a:9e:57:66:bc:36:5f:6b:63:26:3d:3b:ed:2f:86:3b:
         6a:30:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org