Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          js08xtCB16nC4j0zu2AcRxeUP5ySO/Aqm6y6KXi1w4U=
Subject key identifier:   B9:91:7E:71:DF:8E:9E:C1:61:D0:BD:F8:94:8F:2E:25:88:41:D7:6B
Certificate issuer:       /CN=79FF395ABA57F6164F559DB5DE6297166CD06003
Certificate serial:       7B9615F1AE91A645FBD28F5372B185FBBE0E5D6B
Authority key identifier: 79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa
Signing time:             Sat 04 Nov 2023 12:32:11 +0000
ROA not before:           Sat 04 Nov 2023 12:27:11 +0000
ROA not after:            Sat 02 Nov 2024 12:32:11 +0000
asID:                     262401
IP address blocks:        177.36.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:96:15:f1:ae:91:a6:45:fb:d2:8f:53:72:b1:85:fb:be:0e:5d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FF395ABA57F6164F559DB5DE6297166CD06003
        Validity
            Not Before: Nov  4 12:27:11 2023 GMT
            Not After : Nov  2 12:32:11 2024 GMT
        Subject: CN=B9917E71DF8E9EC161D0BDF8948F2E258841D76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:2d:68:92:26:c3:0f:75:15:98:fa:f3:ca:
                    16:68:10:28:a9:25:f3:79:ca:26:47:02:a4:ac:f5:
                    18:5e:fa:8c:69:38:77:5e:40:a2:24:f9:09:a5:45:
                    f2:a5:d1:fd:45:6b:58:11:54:89:a2:51:f1:4b:f0:
                    ca:c4:90:f3:85:b8:fd:43:9c:47:71:8d:70:df:fe:
                    fb:49:7a:0e:63:4c:00:c1:ba:96:b9:e3:56:3c:5e:
                    5d:09:5f:bb:e6:bb:8f:d3:f1:cf:a6:ed:09:f9:5e:
                    2b:2b:dd:9d:7e:39:96:68:5f:27:73:f0:48:44:c8:
                    3c:91:e5:d8:9c:56:8c:5a:17:93:63:18:1f:bc:01:
                    39:a4:1a:86:e9:80:53:2e:72:b7:17:b1:39:dd:db:
                    35:f1:c6:07:6d:dc:a6:8d:5c:4d:ff:3f:9a:8d:17:
                    d7:6c:6f:c7:e9:18:97:8f:4f:85:f9:c5:16:25:a9:
                    dd:31:b8:fa:9e:38:55:ab:0a:b1:de:04:b1:f4:72:
                    96:6f:d9:51:d0:a4:dc:2a:93:92:ea:85:45:1e:af:
                    d0:e8:10:47:88:b7:91:8b:0e:7f:ff:e0:df:be:db:
                    83:63:fd:24:0b:9a:10:cf:7a:fd:c6:4f:4c:36:bc:
                    00:5d:c9:a3:8b:f0:4b:6c:2a:43:db:34:aa:43:4e:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:91:7E:71:DF:8E:9E:C1:61:D0:BD:F8:94:8F:2E:25:88:41:D7:6B
            X509v3 Authority Key Identifier:
                keyid:79:FF:39:5A:BA:57:F6:16:4F:55:9D:B5:DE:62:97:16:6C:D0:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/79FF395ABA57F6164F559DB5DE6297166CD06003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79FF395ABA57F6164F559DB5DE6297166CD06003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:84:27:e3:0b:98:f2:e8:b0:93:a9:b2:94:9a:60:42:e9:80:
         e6:ed:3e:6a:0b:64:ab:b5:72:0b:9d:b1:82:f0:0f:67:ec:f0:
         51:ef:51:90:ba:02:a1:eb:80:59:59:ce:98:60:fc:ee:18:8c:
         16:74:05:d5:26:83:1d:62:5c:14:fa:67:2f:fd:3a:05:92:01:
         5e:07:43:8e:f5:26:70:ca:e8:34:30:b2:61:c1:2c:c4:8a:21:
         0f:f3:bc:0a:62:77:e5:21:43:61:44:62:70:ae:4f:bc:f4:8d:
         8e:bc:db:21:db:96:38:ff:f8:c2:a7:93:61:89:c5:1f:ca:a4:
         d6:6e:52:68:d2:fb:ae:2d:61:a9:e7:4d:24:6a:2f:91:c3:b2:
         2d:5e:d8:af:fa:07:9f:bc:c2:08:f5:96:6f:74:6d:62:7c:69:
         2e:58:2e:f5:1d:54:bf:5e:94:9f:e8:02:f1:84:f8:8f:59:d5:
         e7:eb:f6:96:66:5e:de:17:4a:8b:ae:3a:e7:ec:a8:cb:aa:0a:
         90:b1:95:9b:4e:22:c7:60:8f:02:15:79:62:14:fd:a3:59:b0:
         e3:85:04:5a:51:47:66:29:21:73:de:a4:cc:89:a7:13:d4:05:
         74:b2:e5:b6:99:76:a9:ab:0e:8b:fd:31:aa:d6:e4:ca:54:30:
         14:84:a3:5b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe5YV8a6RpkX70o9TcrGF+74OXWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlGRjM5NUFCQTU3RjYxNjRGNTU5REI1REU2Mjk3MTY2
Q0QwNjAwMzAeFw0yMzExMDQxMjI3MTFaFw0yNDExMDIxMjMyMTFaMDMxMTAvBgNV
BAMTKEI5OTE3RTcxREY4RTlFQzE2MUQwQkRGODk0OEYyRTI1ODg0MUQ3NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9y1okibDD3UVmPrzyhZoECip
JfN5yiZHAqSs9Rhe+oxpOHdeQKIk+QmlRfKl0f1Fa1gRVImiUfFL8MrEkPOFuP1D
nEdxjXDf/vtJeg5jTADBupa541Y8Xl0JX7vmu4/T8c+m7Qn5Xisr3Z1+OZZoXydz
8EhEyDyR5dicVoxaF5NjGB+8ATmkGobpgFMucrcXsTnd2zXxxgdt3KaNXE3/P5qN
F9dsb8fpGJePT4X5xRYlqd0xuPqeOFWrCrHeBLH0cpZv2VHQpNwqk5LqhUUer9Do
EEeIt5GLDn//4N++24Nj/SQLmhDPev3GT0w2vABdyaOL8EtsKkPbNKpDTtYvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuZF+cd+OnsFh0L34lI8uJYhB12swHwYDVR0j
BBgwFoAUef85WrpX9hZPVZ213mKXFmzQYAMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NCa2Y0ckhMWDFyV3FYY2d0NXNIajU3TnRON05Zem9jNkNqWTMyWWFq
WHYvMC83OUZGMzk1QUJBNTdGNjE2NEY1NTlEQjVERTYyOTcxNjZDRDA2MDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc5RkYzOTVBQkE1N0Y2MTY0
RjU1OURCNURFNjI5NzE2NkNEMDYwMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDQmtmNHJITFgxcldxWGNndDVzSGo1N050TjdOWXpvYzZDalkzMllhalh2LzAv
MzEzNzM3MmUzMzM2MmUzMTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJJ4wDQYJKoZIhvcNAQELBQADggEBANiEJ+ML
mPLosJOpspSaYELpgObtPmoLZKu1cgudsYLwD2fs8FHvUZC6AqHrgFlZzphg/O4Y
jBZ0BdUmgx1iXBT6Zy/9OgWSAV4HQ471JnDK6DQwsmHBLMSKIQ/zvApid+UhQ2FE
YnCuT7z0jY682yHbljj/+MKnk2GJxR/KpNZuUmjS+64tYannTSRqL5HDsi1e2K/6
B5+8wgj1lm90bWJ8aS5YLvUdVL9elJ/oAvGE+I9Z1efr9pZmXt4XSouuOufsqMuq
CpCxlZtOIsdgjwIVeWIU/aNZsOOFBFpRR2YpIXPepMyJpxPUBXSy5baZdqmrDov9
MarW5MpUMBSEo1s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org