Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135392e302f32342d3234203d3e203238353938.roa
File:                     3137372e33362e3135392e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          uU671p1JX/1CQzcPfrRbuqsSGrsj4GZIdH/vTh74Q00=
Subject key identifier:   B6:53:75:71:B7:E1:83:6F:71:51:DF:45:D8:C6:5A:77:70:95:87:F9
Certificate issuer:       /CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
Certificate serial:       09A1A2B601D30CB8D40DF4228BB384594E3FC321
Authority key identifier: 13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135392e302f32342d3234203d3e203238353938.roa
Signing time:             Fri 17 Mar 2023 03:51:17 +0000
ROA not before:           Fri 17 Mar 2023 03:46:17 +0000
ROA not after:            Fri 15 Mar 2024 03:51:17 +0000
asID:                     28598
IP address blocks:        177.36.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a1:a2:b6:01:d3:0c:b8:d4:0d:f4:22:8b:b3:84:59:4e:3f:c3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1350155B0811DEA6BF8F9590E63F621473ED2D22
        Validity
            Not Before: Mar 17 03:46:17 2023 GMT
            Not After : Mar 15 03:51:17 2024 GMT
        Subject: CN=B6537571B7E1836F7151DF45D8C65A77709587F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:13:99:48:aa:5e:6a:53:ed:71:32:4b:3d:
                    f7:95:d7:08:dd:56:be:96:17:57:c7:eb:53:39:c5:
                    3d:ca:45:5d:71:12:d8:6c:00:83:3b:0e:da:11:98:
                    5d:45:8e:28:a8:62:a1:92:69:f1:44:00:78:04:36:
                    a2:3d:36:e7:63:38:f8:06:a1:08:14:5f:e3:e8:ef:
                    23:70:4c:80:5a:c7:80:62:78:4a:53:d5:b0:cf:82:
                    11:5a:7b:e2:3b:42:44:e5:3a:c3:67:6d:b8:72:8e:
                    07:d7:d1:f0:41:46:01:41:25:84:27:07:77:93:42:
                    8c:31:61:c0:b8:3b:c0:ea:11:f3:92:65:d2:25:4b:
                    36:73:5f:08:a7:f6:ba:22:8f:26:a5:59:8e:da:93:
                    15:2b:8e:b4:f9:49:e4:35:b1:df:bc:61:91:9b:42:
                    a5:2b:f7:2d:43:88:94:11:dd:80:dc:08:d3:f1:ac:
                    16:8e:67:5d:3c:7d:e8:b7:97:00:cc:97:52:11:7c:
                    a2:b6:3d:8c:e6:9a:22:99:79:fc:e7:97:0b:82:0d:
                    56:12:d6:a0:7a:3a:6e:94:b6:10:d4:aa:c1:b2:05:
                    9f:4e:3a:81:c8:02:c8:3a:6a:d9:83:41:d6:87:9e:
                    f4:37:70:f7:00:c4:4b:f9:34:c5:06:12:ad:03:57:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:53:75:71:B7:E1:83:6F:71:51:DF:45:D8:C6:5A:77:70:95:87:F9
            X509v3 Authority Key Identifier:
                keyid:13:50:15:5B:08:11:DE:A6:BF:8F:95:90:E6:3F:62:14:73:ED:2D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1350155B0811DEA6BF8F9590E63F621473ED2D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/0/3137372e33362e3135392e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:df:eb:8b:fb:ab:c4:76:fe:88:72:19:47:4c:9a:a0:c5:52:
         13:64:b6:cb:9c:fa:dd:74:4f:1f:39:2b:8d:a6:94:a2:8c:e3:
         32:97:b9:19:73:1e:89:3b:eb:1d:2a:75:31:ee:3b:f2:ef:9f:
         2b:0a:be:c3:b0:dc:e6:65:fd:32:e7:d7:f5:15:be:92:e4:bc:
         ee:f9:b5:75:c2:3a:52:97:64:e1:7f:d2:fe:5e:fa:2e:1c:51:
         95:ca:7c:bc:98:8f:04:e7:21:9d:57:0b:d9:68:60:e6:d6:7d:
         2b:42:06:47:eb:a5:64:55:66:15:cf:1f:78:fe:b3:68:68:6b:
         0a:28:c8:b6:c6:95:ca:3d:6a:2b:1b:f6:c9:7a:0d:44:6d:2b:
         2b:2e:9f:2f:dc:ba:2d:37:87:d4:b2:9a:aa:05:09:43:6b:33:
         47:cc:a5:60:76:63:84:98:f3:de:88:ce:15:3e:bf:47:b3:61:
         25:5a:64:d5:34:cf:5f:0e:b5:da:21:91:47:67:a1:36:5f:75:
         b7:7a:60:59:77:51:9c:a7:6c:94:d8:a3:d6:87:15:f0:30:2a:
         8d:05:16:89:a4:e6:5f:9e:b7:a2:ae:57:b5:95:35:95:c2:68:
         f7:5c:15:d1:ac:bb:6c:54:40:01:f8:9f:16:93:02:d6:6b:62:
         92:92:4d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org