Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3230203d3e203238333630.roa
File:                     3137372e382e302e302f32302d3230203d3e203238333630.roa (raw, json)
Hash identifier:          PSdzVEupdKu/tm0Fk06vfAZTcgnYa4Th3ckXL0+d9+M=
Subject key identifier:   1B:6C:68:93:B5:1D:68:A0:D6:C7:D3:61:BF:A0:AF:60:79:B2:D4:AD
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       12E2C6A5DBBAED6269FB598870839823351244E9
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3230203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:34 +0000
ROA not before:           Thu 17 Nov 2022 17:58:34 +0000
ROA not after:            Thu 16 Nov 2023 18:03:34 +0000
asID:                     28360
IP address blocks:        177.8.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e2:c6:a5:db:ba:ed:62:69:fb:59:88:70:83:98:23:35:12:44:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:34 2022 GMT
            Not After : Nov 16 18:03:34 2023 GMT
        Subject: CN=1B6C6893B51D68A0D6C7D361BFA0AF6079B2D4AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:97:c8:0a:67:6a:8e:08:b4:fb:71:67:2c:
                    f3:0e:9a:af:61:ef:f1:59:04:0b:8e:85:1d:7d:99:
                    53:c7:60:8c:a7:52:34:a0:4a:99:97:42:d7:4b:f8:
                    2b:77:91:31:3e:37:9f:6a:9e:c3:2c:b7:f8:d2:1c:
                    a5:0a:37:78:7b:22:fa:6b:2c:aa:ee:91:a3:d2:f2:
                    97:1b:bf:da:62:f7:72:db:6b:08:16:72:0f:12:0e:
                    ae:aa:6f:45:29:5f:93:34:ac:1b:6d:70:71:09:9b:
                    6d:c8:5a:d3:6f:52:81:07:c8:3b:fc:6d:ad:0b:25:
                    44:fe:82:66:3b:ec:1a:62:00:7f:13:65:61:69:38:
                    2c:1e:a3:39:3a:32:fd:18:bb:9a:96:04:95:82:3c:
                    0c:d2:1e:35:4e:e7:e1:a4:83:cb:93:b7:31:34:8d:
                    19:79:80:96:42:29:db:b0:33:73:4e:eb:2b:1c:50:
                    6b:ab:c7:cf:85:e8:6d:ce:51:9e:3e:5c:28:8f:c0:
                    f2:58:35:17:db:29:1b:d3:e1:a2:39:e2:ab:f6:81:
                    f8:d0:fa:88:81:02:74:c1:39:57:72:91:37:8f:1d:
                    26:e6:81:33:8a:7a:ca:15:63:5d:d0:8c:4e:0a:2f:
                    55:47:11:db:cc:a2:48:1b:0e:d4:22:36:ea:46:87:
                    ae:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6C:68:93:B5:1D:68:A0:D6:C7:D3:61:BF:A0:AF:60:79:B2:D4:AD
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3230203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:10:fa:d5:5f:55:32:0f:f6:df:6b:9c:da:e5:46:8a:1d:1a:
         0e:b6:7a:5f:eb:3d:16:a5:c6:0f:35:97:eb:17:8d:5b:52:cc:
         ac:8e:bf:51:0e:65:6c:bf:74:05:f3:99:ec:4f:fc:54:b0:11:
         77:37:a2:f3:4d:73:79:a4:9e:d1:08:a2:2c:c8:6e:78:c0:3f:
         ca:e2:03:c5:e9:6c:0b:6c:ac:39:62:ed:16:7f:0f:d5:46:80:
         9d:94:1a:00:b4:35:cd:79:32:d3:44:1e:04:32:e1:14:ec:d7:
         1b:36:61:19:c9:8f:42:4f:14:40:2a:39:f6:11:28:a9:2c:4e:
         b0:b6:e4:0b:c8:2d:74:f4:68:a3:90:02:dc:cf:24:ce:c0:1f:
         12:a6:dd:ce:de:07:15:92:92:ff:bc:7f:ae:66:31:64:ad:a3:
         12:d1:16:9b:5c:d2:b3:f5:27:e3:61:c1:33:1b:08:dc:c1:3c:
         bb:8d:a8:bc:fa:f2:3e:36:ee:4c:0c:9a:4d:82:41:05:29:72:
         fe:e0:be:52:f8:6b:94:e0:42:cf:27:26:ac:b3:ee:96:26:e8:
         38:28:40:9f:0f:31:f8:6e:a1:b8:1a:35:07:6f:29:b2:0b:70:
         92:61:67:60:e4:50:b8:25:62:2b:17:dd:4c:7e:99:23:b7:a1:
         dd:21:26:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org