Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f31392d3234203d3e203238333630.roa
File:                     3137372e382e302e302f31392d3234203d3e203238333630.roa (raw, json)
Hash identifier:          gGU8WpEVdG264Y9Yf/qL4f2GYnOqAWTx1+RGgkKY9lw=
Subject key identifier:   9C:B6:69:C4:53:65:F5:86:57:C9:E1:4E:89:04:93:A8:F6:E7:2D:FF
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       3FA0BD9E297D815505CD6E5F46DFC5D8AED809AE
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f31392d3234203d3e203238333630.roa
Signing time:             Fri 07 Oct 2022 19:22:46 +0000
ROA not before:           Fri 07 Oct 2022 19:17:46 +0000
ROA not after:            Fri 06 Oct 2023 19:22:46 +0000
asID:                     28360
IP address blocks:        177.8.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a0:bd:9e:29:7d:81:55:05:cd:6e:5f:46:df:c5:d8:ae:d8:09:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Oct  7 19:17:46 2022 GMT
            Not After : Oct  6 19:22:46 2023 GMT
        Subject: CN=9CB669C45365F58657C9E14E890493A8F6E72DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:77:60:90:3c:da:b0:b6:85:e2:dd:33:54:a3:
                    01:a8:2e:09:02:37:26:fc:f9:6a:16:70:fb:84:1d:
                    2f:ff:c5:05:a4:92:a8:e2:40:31:f1:48:67:b8:70:
                    48:0f:af:83:1d:fa:e0:a5:73:e8:a6:e2:b9:d3:ce:
                    ba:a8:f6:b3:cf:90:a7:7b:9c:40:b6:5c:b6:85:dc:
                    60:48:00:5c:b4:ae:b9:c8:d0:91:9e:0a:3b:77:59:
                    1c:87:36:d5:85:2f:78:c6:aa:21:41:de:20:05:3f:
                    d1:ca:55:6f:29:36:b7:04:71:88:ce:7f:de:98:30:
                    28:72:7c:d6:50:3b:f7:52:38:7f:d7:6c:9b:d4:f8:
                    c4:78:a0:ef:7a:77:dc:3c:c3:89:5e:94:09:52:9d:
                    30:6a:46:e5:cd:48:0a:07:d1:28:89:0f:08:46:66:
                    26:be:7f:4d:42:2b:e3:73:23:69:0d:b1:5f:c3:56:
                    94:77:18:9d:49:2e:c2:a1:9a:91:9e:df:dd:2f:d2:
                    76:15:02:85:98:8d:5f:8b:16:d7:b2:77:93:54:7f:
                    fb:aa:41:ca:23:da:88:3f:df:a6:5e:52:de:89:c5:
                    99:68:18:fa:2a:0a:03:32:db:2b:63:7d:11:64:ab:
                    c5:99:39:f1:1d:a9:86:23:8a:59:ff:6b:b7:08:8f:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B6:69:C4:53:65:F5:86:57:C9:E1:4E:89:04:93:A8:F6:E7:2D:FF
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f31392d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:27:ee:50:8b:44:1b:3c:c8:b7:43:3a:b4:75:97:6e:00:
         d8:cd:a1:7f:d1:b6:fe:a8:95:29:10:cc:34:5c:a3:e3:57:dd:
         9a:e8:15:61:45:bc:06:4b:d3:60:6f:ca:3d:bd:9c:ad:a1:5b:
         ac:11:7b:32:5c:cb:4f:33:de:90:04:2a:74:d2:f6:30:d3:ef:
         a8:6e:89:71:52:28:fb:26:ea:71:af:0f:be:fb:1c:a9:f4:ef:
         2f:ff:fb:dc:e0:61:de:a5:cc:ae:32:ed:ed:90:13:20:33:c6:
         28:38:e9:f7:29:40:2b:d2:74:b8:b2:a2:d0:e7:2e:77:05:77:
         97:51:15:e0:13:7e:28:86:8f:39:86:19:80:1c:2a:0b:5c:ef:
         0d:c2:68:f9:7a:81:e4:83:32:11:aa:c9:8d:d2:39:c6:dc:e7:
         b1:7f:cd:09:c9:7c:1a:88:5d:c5:c0:41:70:ad:84:6b:55:90:
         2b:28:e7:c8:33:dc:d5:6a:1c:4a:2e:3d:9a:74:58:15:59:e4:
         c5:0d:ce:70:9b:f7:db:e7:32:37:dd:12:70:d7:c1:18:a1:28:
         5b:e3:39:a7:68:d7:9e:f8:3d:2e:60:40:e3:e2:9c:67:ac:f3:
         03:08:bc:a6:7f:35:c0:20:89:71:bf:a7:c9:b6:3f:a8:59:3d:
         9a:92:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org