Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135382e302f32332d3233203d3e20323632343031.roa
File:                     3137372e33362e3135382e302f32332d3233203d3e20323632343031.roa (raw, json)
Hash identifier:          4avtEi1hBj6FYYnX461AwMqge10KVJYBpC76pUBcXto=
Subject key identifier:   BE:A8:6E:D0:13:C3:B9:7D:44:1F:65:F1:2E:41:E4:73:B5:00:20:8C
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       4C2FBF4622C28A50E448199DDBEE6636A4CB509F
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135382e302f32332d3233203d3e20323632343031.roa
Signing time:             Tue 07 Mar 2023 10:39:19 +0000
ROA not before:           Tue 07 Mar 2023 10:34:19 +0000
ROA not after:            Tue 05 Mar 2024 10:39:19 +0000
asID:                     262401
IP address blocks:        177.36.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2f:bf:46:22:c2:8a:50:e4:48:19:9d:db:ee:66:36:a4:cb:50:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Mar  7 10:34:19 2023 GMT
            Not After : Mar  5 10:39:19 2024 GMT
        Subject: CN=BEA86ED013C3B97D441F65F12E41E473B500208C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:17:ea:c3:8f:73:05:af:ee:14:76:c1:78:
                    4b:47:76:71:3e:66:7a:9c:ea:96:d4:bc:b8:2b:e7:
                    18:b8:08:02:1f:48:04:ec:4a:62:b2:9e:8b:28:28:
                    8d:67:14:6d:2a:5a:d7:9d:50:d4:30:80:a0:e1:91:
                    2b:1a:ac:e4:c9:de:12:49:d2:d1:f0:5d:36:25:25:
                    6c:e8:f1:f6:d5:9d:f2:a7:1a:30:18:ab:2e:1a:f7:
                    76:4a:cd:68:42:6f:13:7f:67:67:18:b1:39:2b:26:
                    46:ce:a4:9a:ed:30:56:1e:99:b1:f8:63:1d:11:89:
                    39:52:37:8d:a8:47:7f:3c:2d:34:36:e9:96:24:97:
                    86:d7:a7:66:fd:01:6c:82:51:86:2d:b8:4c:ce:85:
                    b3:6f:07:e0:2a:da:a1:02:fe:29:c1:cc:c2:44:42:
                    89:57:5e:04:c0:52:13:39:27:7c:b9:56:85:ae:77:
                    3b:83:92:38:48:ae:fa:62:78:2a:e6:5d:7b:5f:0c:
                    59:c1:f4:02:1c:8b:bf:d9:ab:5e:5e:0a:c5:3b:8e:
                    52:be:2d:29:b3:a5:d3:ca:9c:1b:54:9e:93:4a:9e:
                    ff:ee:a6:e6:97:66:5f:4e:30:f4:d9:0a:f2:d5:3d:
                    ac:2b:2d:53:e9:a8:01:fd:89:13:e1:83:1c:d9:43:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A8:6E:D0:13:C3:B9:7D:44:1F:65:F1:2E:41:E4:73:B5:00:20:8C
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135382e302f32332d3233203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:30:bc:b5:d9:c9:d2:3f:79:d0:1d:77:7b:86:00:54:4a:87:
         ae:89:1c:3c:22:28:2a:5e:c1:9e:73:e5:cb:00:0a:4f:78:da:
         3c:28:2a:64:2c:7f:4f:06:96:52:ca:f5:2a:f0:ef:d3:8a:05:
         d5:a5:a3:7b:a3:5c:d7:38:9a:de:ad:2e:b2:64:bf:2b:cf:3b:
         4c:0f:14:8d:ba:4e:ed:76:4e:e6:ad:f1:94:ec:a4:85:7a:3c:
         54:b5:6e:06:2d:df:ea:61:42:56:a8:f3:34:81:a8:0c:e8:d8:
         d6:fb:fd:89:67:23:a7:68:7b:af:c6:f1:bc:28:81:3f:32:5c:
         4c:85:20:32:14:4d:52:53:58:3f:1c:09:53:ed:08:bc:ea:01:
         e3:96:5c:e4:a5:84:e0:05:c5:d3:62:90:24:ca:b4:e4:83:d6:
         86:66:57:60:f7:54:70:e0:42:18:dc:3d:dd:58:a8:e4:c1:32:
         98:c4:f6:ae:4b:3c:8d:f4:bc:4d:4c:8a:fb:82:09:bf:c3:be:
         86:a4:66:76:2f:1f:21:51:9f:89:50:a7:f0:92:f9:5f:43:11:
         c2:8e:4b:83:f4:c4:5c:35:5b:67:25:e7:87:8d:ec:87:37:ab:
         08:39:ef:7b:17:8f:04:01:b4:81:d4:ff:d0:0e:d3:6f:2d:02:
         b0:d0:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org