Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135342e302f32332d3233203d3e20323632343031.roa
File:                     3137372e33362e3135342e302f32332d3233203d3e20323632343031.roa (raw, json)
Hash identifier:          lBtNujZPcclh9lliP7ZWcbA/lcHJ0oVqGjzMfLPx9vg=
Subject key identifier:   CD:24:E2:A0:1D:51:7A:70:69:99:02:77:B9:4B:22:9C:A0:84:36:7B
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       2CF8B43DFEE55FF7B7F6AF0EEFD85C6E52AAF603
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135342e302f32332d3233203d3e20323632343031.roa
Signing time:             Tue 07 Mar 2023 10:39:12 +0000
ROA not before:           Tue 07 Mar 2023 10:34:12 +0000
ROA not after:            Tue 05 Mar 2024 10:39:12 +0000
asID:                     262401
IP address blocks:        177.36.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f8:b4:3d:fe:e5:5f:f7:b7:f6:af:0e:ef:d8:5c:6e:52:aa:f6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Mar  7 10:34:12 2023 GMT
            Not After : Mar  5 10:39:12 2024 GMT
        Subject: CN=CD24E2A01D517A7069990277B94B229CA084367B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:44:72:28:16:58:80:72:73:47:de:c0:36:
                    e1:30:b3:67:e0:98:7b:b0:d9:44:92:94:2f:bf:fd:
                    0c:0f:95:7e:ee:96:ba:49:b8:9d:a6:8a:79:b7:50:
                    52:c3:5c:58:bb:e8:36:13:72:2c:3d:f1:ee:ea:b4:
                    28:09:81:8f:66:0c:b7:ac:8b:04:d5:44:9a:e2:07:
                    c4:c1:96:a0:6a:16:e3:89:eb:e3:ef:9c:a2:6e:d6:
                    8e:e6:1b:69:90:0c:41:18:c0:69:ad:bc:1b:dd:60:
                    e1:f9:c1:98:4e:b1:30:2c:f1:3b:84:02:0b:d3:2b:
                    56:d0:43:43:fc:04:ff:e7:af:cf:01:2d:2c:2d:40:
                    1a:12:26:08:32:e1:7e:43:1d:ce:5e:f1:51:95:fb:
                    f8:15:03:d1:9d:85:7c:25:84:1b:fa:dc:73:df:4d:
                    69:25:8a:32:f9:3e:8a:3a:54:52:6c:b8:f1:ca:f2:
                    65:ee:12:2a:3d:e3:71:86:33:ec:6b:46:06:60:2f:
                    00:d8:98:4d:89:b5:28:dd:5f:e7:c6:30:9e:e8:40:
                    a3:63:ce:71:8d:97:56:9d:3b:c4:32:40:19:87:a6:
                    6f:38:86:52:62:91:d4:74:52:a1:0e:64:c8:8f:89:
                    c3:c9:2e:b3:d8:28:84:b6:e3:cb:7f:ae:8d:05:b1:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:24:E2:A0:1D:51:7A:70:69:99:02:77:B9:4B:22:9C:A0:84:36:7B
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135342e302f32332d3233203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:5c:d8:8f:d9:fb:e8:6d:1a:cd:f0:7a:b8:08:c9:d8:69:
         fe:3b:bc:99:cc:a7:71:ed:c4:2b:38:f6:8b:96:4b:84:ec:5f:
         b2:76:8b:de:b1:68:bf:25:ad:ce:ef:c1:a7:ae:3d:33:d5:e8:
         af:43:66:bf:0b:c8:52:1c:17:34:8e:38:63:fe:c8:95:6b:ba:
         4a:4f:3f:4a:f8:09:c7:45:56:21:91:24:56:da:5f:e7:6c:fa:
         fa:9f:6d:52:92:99:8a:15:e3:65:a5:3a:36:7c:9a:08:43:86:
         c6:08:0a:7b:a4:45:d5:7c:83:71:ac:d5:ca:86:78:9d:37:9b:
         23:a6:ed:0c:17:63:0d:4b:c1:63:92:8d:fc:8b:55:cb:f2:12:
         8b:95:49:a1:86:1c:60:25:d5:51:9d:cd:04:1b:ff:a3:0a:3c:
         cd:e5:fe:01:eb:7d:87:ae:37:d2:8f:2a:5b:85:09:ec:83:57:
         dc:e5:fa:d4:a7:bd:ee:61:0d:e4:11:6d:63:fb:94:7e:fc:f1:
         e0:7a:41:6a:9b:18:a0:d1:c1:ac:53:05:a0:4a:cf:f3:25:b0:
         e7:da:4e:76:36:7e:48:f1:e3:41:d2:3d:ed:52:19:8c:72:d3:
         01:b9:64:68:fb:ce:84:e7:13:af:bb:ed:c3:63:47:d9:e0:c3:
         51:d7:9f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org