Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          Zcu5QPF2KhYmLb7q2QJfcGRiK2Cl5izU1WLHaBJlT2k=
Subject key identifier:   C8:55:34:EA:9B:83:66:8E:AF:61:1D:D5:F9:07:99:D5:6E:69:F6:F6
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       37ABE42DF865D49E4B09034CD288FB3C6D4030F6
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:16 +0000
ROA not before:           Sat 04 Nov 2023 12:27:16 +0000
ROA not after:            Sat 02 Nov 2024 12:32:16 +0000
asID:                     262401
IP address blocks:        177.36.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ab:e4:2d:f8:65:d4:9e:4b:09:03:4c:d2:88:fb:3c:6d:40:30:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:16 2023 GMT
            Not After : Nov  2 12:32:16 2024 GMT
        Subject: CN=C85534EA9B83668EAF611DD5F90799D56E69F6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9d:24:1a:4b:c6:2d:d8:3a:52:be:75:b0:14:
                    05:a5:eb:c6:10:0c:9a:4d:5a:00:5c:5b:a6:d9:52:
                    b8:e6:fe:7f:c5:50:e1:2d:8d:e7:9b:4d:1c:b5:ad:
                    2c:85:f2:61:f7:97:6b:10:50:12:1b:22:f3:0b:86:
                    91:45:92:60:05:a9:12:6f:d1:62:98:1f:fe:57:fb:
                    e4:b8:be:8a:43:68:dc:74:57:fd:cb:c6:ee:a8:d3:
                    44:c6:87:89:09:42:c7:ff:70:95:80:1e:fa:dc:bc:
                    bd:b6:3d:b4:c5:d1:56:1c:f6:67:d4:63:98:12:a2:
                    ec:41:9e:6d:f7:c5:3b:35:1d:bd:b0:4c:f2:d7:db:
                    03:00:ea:11:8a:70:15:04:3d:41:fe:5f:87:07:50:
                    42:cf:c9:28:0b:67:c1:75:29:90:b1:f1:15:f7:85:
                    3a:bf:20:ff:be:9f:80:4f:e7:b9:a1:40:c1:8c:6c:
                    41:cd:e4:d3:43:c8:f4:c9:39:ce:26:c3:39:14:4c:
                    1b:2f:81:d9:f7:58:f6:50:5f:21:c4:55:83:24:6f:
                    72:f9:74:7f:fc:29:e1:16:96:a3:ce:39:60:47:50:
                    86:37:72:5e:e5:19:8b:1a:21:73:c9:78:ac:e4:64:
                    78:b3:00:9a:fc:cc:1b:9f:39:41:d8:38:9d:d0:ca:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:55:34:EA:9B:83:66:8E:AF:61:1D:D5:F9:07:99:D5:6E:69:F6:F6
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:db:4b:83:01:69:d9:9b:c7:06:a7:f9:9b:db:ce:af:8a:14:
         54:ae:86:53:32:6c:80:3b:9c:85:5b:be:5c:b7:71:dd:c1:8a:
         7b:de:e4:58:0b:32:fa:79:8d:8f:5e:af:64:99:42:57:76:fb:
         ca:b5:2d:cb:7f:6c:62:0c:09:f5:8b:eb:aa:42:e0:63:c9:16:
         03:9a:0b:cf:2f:18:a7:d2:f0:e9:70:fd:36:5a:6e:d3:a3:e5:
         d3:aa:31:02:2b:2e:90:9a:e5:f2:d2:d9:7d:fc:f8:c9:f1:67:
         64:3b:22:c1:ce:2d:c9:99:16:4d:41:93:3a:c8:82:9e:eb:51:
         67:b2:6f:aa:ff:11:02:44:88:bb:9b:dd:ea:7d:f7:bb:98:93:
         4a:d8:02:fe:2e:99:81:b0:3c:11:fa:41:80:8d:69:d1:45:4e:
         48:75:22:21:45:11:54:f7:12:bb:40:79:66:d7:08:0c:f0:82:
         7a:45:4f:e8:57:84:b7:7a:b1:3f:82:cb:2c:91:ce:e3:0b:cf:
         29:d1:cf:85:d5:5d:f6:5b:4f:21:d7:ab:97:61:92:6b:2a:0e:
         de:3e:9d:c5:45:bf:a0:6a:15:61:bc:9b:f4:3b:d4:f2:d9:ae:
         c7:15:d2:ae:85:b6:ee:51:cf:4a:89:91:1e:2d:d9:d9:57:a9:
         7d:f7:c0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org