Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/3137372e33362e31362e302f32322d3234203d3e20323731303432.roa
File:                     3137372e33362e31362e302f32322d3234203d3e20323731303432.roa (raw, json)
Hash identifier:          61iQdpBf41jsqzMjU74hhvsnlN9O0prlpiYBCL2DU3c=
Subject key identifier:   F9:16:9A:85:3D:E2:43:7C:81:EB:4D:DE:4C:85:85:7B:17:9F:94:69
Certificate issuer:       /CN=3FA6187385876E0C99E6A9477B130ED98460E752
Certificate serial:       0DBD1DD51282D6EC402F589B3E004A86CF18C81D
Authority key identifier: 3F:A6:18:73:85:87:6E:0C:99:E6:A9:47:7B:13:0E:D9:84:60:E7:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6187385876E0C99E6A9477B130ED98460E752.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/3137372e33362e31362e302f32322d3234203d3e20323731303432.roa
Signing time:             Thu 04 Apr 2024 15:31:52 +0000
ROA not before:           Thu 04 Apr 2024 15:26:52 +0000
ROA not after:            Thu 03 Apr 2025 15:31:52 +0000
asID:                     271042
IP address blocks:        177.36.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bd:1d:d5:12:82:d6:ec:40:2f:58:9b:3e:00:4a:86:cf:18:c8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6187385876E0C99E6A9477B130ED98460E752
        Validity
            Not Before: Apr  4 15:26:52 2024 GMT
            Not After : Apr  3 15:31:52 2025 GMT
        Subject: CN=F9169A853DE2437C81EB4DDE4C85857B179F9469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:4a:6b:68:5c:e7:a1:77:b3:9d:8a:ff:d7:
                    8a:3d:dd:c4:9b:16:08:1c:94:9f:8f:1a:0c:84:7a:
                    63:bf:44:97:95:c1:a6:93:27:a1:a6:96:a0:cf:40:
                    31:22:02:f7:a3:99:9a:eb:bd:ab:29:78:ea:e5:9e:
                    78:72:04:c0:99:e1:55:4a:7d:76:37:f3:56:b1:c4:
                    08:17:0c:60:bf:f2:49:a3:2c:11:f4:2a:c4:0f:6f:
                    52:cd:9e:00:a8:e5:f5:71:c8:93:ba:84:82:84:9a:
                    f8:d4:ad:ee:cf:6e:94:c1:a7:56:c5:f5:33:0b:ed:
                    85:cf:b3:14:20:e1:59:a7:db:6d:ec:3f:e5:32:bd:
                    28:e4:60:3c:8b:0d:53:2e:41:69:85:44:a1:cf:bc:
                    de:81:c0:a2:e5:ba:4a:10:29:05:93:32:64:b9:f5:
                    40:52:a5:12:d1:05:cb:20:33:03:f3:59:c7:d4:dc:
                    94:33:49:1b:a5:ff:89:07:01:3e:39:36:19:4b:ea:
                    37:64:92:77:2e:4e:ea:ca:c2:5e:03:1e:36:91:64:
                    c2:1b:b9:01:d8:a5:00:4c:79:3b:c4:0d:61:8e:90:
                    0a:66:4f:db:b0:63:78:45:58:ef:b3:f5:93:10:ef:
                    5e:7a:fa:79:14:88:fd:54:7d:df:bc:d6:a3:73:11:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:16:9A:85:3D:E2:43:7C:81:EB:4D:DE:4C:85:85:7B:17:9F:94:69
            X509v3 Authority Key Identifier:
                keyid:3F:A6:18:73:85:87:6E:0C:99:E6:A9:47:7B:13:0E:D9:84:60:E7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/3FA6187385876E0C99E6A9477B130ED98460E752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6187385876E0C99E6A9477B130ED98460E752.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/1/3137372e33362e31362e302f32322d3234203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:57:12:95:cd:03:59:47:11:f0:97:68:08:59:35:9d:6f:db:
         d3:d7:7b:89:3e:c2:21:d3:51:4a:fc:6e:f5:0f:35:95:8d:31:
         66:2c:77:c0:1f:19:21:10:b4:64:76:9a:83:ed:8b:93:eb:d8:
         09:22:ec:e1:a8:c3:9a:fd:36:01:4e:b6:cf:ef:36:cc:05:55:
         bc:62:95:a7:8e:96:f8:48:65:3f:80:70:84:3e:72:39:a1:40:
         23:5e:c9:4d:38:e7:b0:da:1a:43:5f:0e:50:ad:28:33:45:9b:
         76:04:58:f9:41:b4:4c:d0:71:e0:1b:11:16:86:2b:9e:ec:65:
         d0:51:75:be:71:ff:f7:4b:fd:fa:94:ff:2c:02:03:00:32:6f:
         49:e9:3a:2d:4c:36:ac:7e:75:13:f4:0c:27:5f:36:7b:78:48:
         f3:fd:3a:19:01:06:d7:ab:f0:5c:a3:49:ec:7a:cf:7e:42:9c:
         62:3e:99:2d:3c:37:9f:ac:56:32:f6:7d:d5:36:e9:f6:6e:f7:
         93:a8:33:ef:a9:6e:d3:8b:48:87:20:43:2c:e1:8b:61:55:ac:
         70:16:72:a8:c7:52:0d:54:ca:46:1a:ff:c5:48:a0:75:53:eb:
         0d:bc:cc:d4:5b:8d:86:ee:b9:42:24:cb:c2:fe:6f:b3:a3:bf:
         e9:ec:51:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org