Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32312d3231203d3e203238333630.roa
File:                     3137372e382e302e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier:          mV57DlEoVogt2VaB3zIMUmNoVZCI6CMrKkh0ewOBhqU=
Subject key identifier:   AC:1D:C9:A2:6C:22:5E:77:7F:A8:E9:E1:E4:0B:55:13:52:BA:2E:DE
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       5DC6A45AF9222150E437CDB3A63A8A72C377F99D
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32312d3231203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:37 +0000
ROA not before:           Thu 17 Nov 2022 17:58:37 +0000
ROA not after:            Thu 16 Nov 2023 18:03:37 +0000
asID:                     28360
IP address blocks:        177.8.0.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c6:a4:5a:f9:22:21:50:e4:37:cd:b3:a6:3a:8a:72:c3:77:f9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:37 2022 GMT
            Not After : Nov 16 18:03:37 2023 GMT
        Subject: CN=AC1DC9A26C225E777FA8E9E1E40B551352BA2EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:50:a7:cd:18:67:13:9e:74:cb:3a:54:54:
                    8d:11:27:32:26:28:bf:af:34:a5:16:56:08:a4:44:
                    74:1a:3d:45:e4:cb:d0:4f:2e:cd:3c:b7:4d:1b:e5:
                    42:dc:48:8c:ba:82:19:1b:72:bf:87:c8:c9:dc:25:
                    f5:3d:69:71:cf:48:fd:a7:a3:ac:08:46:73:a3:78:
                    3d:e3:d8:86:66:6a:f1:a5:d1:20:d3:93:f8:a9:57:
                    51:bc:76:82:09:4e:3f:6c:2b:16:ba:c1:a1:40:c7:
                    35:2f:a6:fa:ac:b4:e0:89:f1:48:1d:09:7b:8c:eb:
                    48:19:1e:b8:0a:bb:44:c8:dc:86:17:1e:73:06:6c:
                    f7:16:8a:f5:e0:83:a7:37:2c:60:29:90:2c:98:ef:
                    a9:42:2e:7e:ff:3d:9a:15:66:10:11:79:bb:d6:4d:
                    90:9d:28:48:be:60:ac:6e:9c:e4:83:94:c1:07:75:
                    75:91:14:e8:52:b0:91:6f:23:79:26:e6:e2:4d:18:
                    99:c5:c7:99:b1:a7:d9:04:40:05:ee:fc:24:3b:0f:
                    8e:00:87:9a:54:78:8f:17:0c:71:d8:ee:3b:67:85:
                    b3:98:3b:a8:dd:4c:f5:3f:e7:14:2a:77:db:0a:09:
                    d5:e7:bb:46:f5:51:db:64:70:de:13:54:11:fd:f6:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1D:C9:A2:6C:22:5E:77:7F:A8:E9:E1:E4:0B:55:13:52:BA:2E:DE
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32312d3231203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:01:61:6a:16:cb:09:3a:d0:55:5f:38:3e:6f:86:88:51:
         ed:09:be:45:9a:04:b1:9d:92:14:f8:24:ff:72:a9:74:68:09:
         6e:a6:9a:a6:80:8f:db:cf:c9:b4:71:f0:85:fd:a5:a5:bf:ea:
         ff:e0:5d:ef:be:bb:7e:14:5e:09:a3:d4:dc:3f:3a:49:d1:30:
         bd:cf:b6:ea:4a:00:d0:59:65:33:64:1c:fa:63:d3:ce:e9:ae:
         e5:52:38:29:f3:0f:6a:d2:d9:df:74:84:3b:3b:a6:d3:7c:af:
         33:6f:ad:3d:01:20:04:80:f3:f6:95:ce:11:77:ee:65:76:1d:
         c5:99:ba:d6:b0:07:63:f5:33:02:57:10:4f:46:27:ab:c1:96:
         85:7a:d9:f3:3e:20:5b:e0:82:e4:1e:45:5c:18:36:42:32:89:
         88:f5:e9:3b:70:dd:39:60:bb:20:dd:fb:af:85:d4:93:38:47:
         27:67:0f:74:d0:78:ff:ed:26:0b:5f:0d:f3:6a:24:0b:1c:da:
         3a:e6:23:2b:59:e1:a8:87:70:39:fd:76:ef:79:89:fd:31:71:
         54:2c:81:99:45:52:8d:8e:15:13:07:aa:66:f2:54:93:1a:29:
         7d:a8:13:79:51:6f:33:04:f3:50:53:ef:d9:e8:3c:3b:3e:43:
         f5:db:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org