Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32312d3231203d3e203238333630.roa
File:                     3137372e382e31362e302f32312d3231203d3e203238333630.roa (raw, json)
Hash identifier:          PdjV73Y3bdMZ9cn4U4OD1TDlkGueEef3VgmWmYkwvfs=
Subject key identifier:   B5:80:45:4C:CE:12:29:16:5A:57:96:0B:34:E1:43:9D:03:0F:97:19
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       3EF55447BFCEBF02B80F00568380EB7795EC6BEF
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32312d3231203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:32 +0000
ROA not before:           Thu 17 Nov 2022 17:58:32 +0000
ROA not after:            Thu 16 Nov 2023 18:03:32 +0000
asID:                     28360
IP address blocks:        177.8.16.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f5:54:47:bf:ce:bf:02:b8:0f:00:56:83:80:eb:77:95:ec:6b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:32 2022 GMT
            Not After : Nov 16 18:03:32 2023 GMT
        Subject: CN=B580454CCE1229165A57960B34E1439D030F9719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:98:29:81:ca:7a:fb:80:a6:47:52:31:e1:
                    5e:9a:48:88:92:6b:c3:ac:c7:78:63:fb:5e:a1:95:
                    82:a4:2b:b2:46:f1:93:55:2e:7a:9d:e2:0e:d2:9a:
                    28:91:ab:e9:87:31:2e:4e:dc:72:03:43:e3:02:bd:
                    5d:81:17:d2:29:d1:6f:7f:6c:01:e8:a3:03:3d:0d:
                    f8:bb:97:5f:b6:26:85:77:30:46:be:f7:c7:c8:8f:
                    52:0b:f2:c0:37:72:61:1e:f9:3d:f3:c4:8b:ce:b6:
                    b6:1f:8e:8d:54:86:84:ac:33:c5:fc:ca:d7:36:d8:
                    75:6a:b4:f1:76:17:2e:4a:5c:99:d7:03:60:7e:7b:
                    a8:73:a6:58:fa:b9:71:d8:55:d1:67:a6:be:8c:24:
                    ec:95:c1:c4:0f:d0:a8:1a:7b:56:9b:65:28:1b:37:
                    2e:73:96:43:36:2b:ef:39:b3:93:9e:6c:62:08:47:
                    b4:67:59:00:8a:a1:43:5a:d5:58:52:6f:76:1d:01:
                    66:a0:db:a4:2c:88:aa:1c:9b:aa:fc:72:3f:4d:eb:
                    2b:71:ad:be:0d:64:5c:74:1d:08:48:51:04:99:bb:
                    e5:53:9b:30:7b:0f:ea:65:c8:0e:85:f4:9b:e5:6e:
                    42:47:d1:35:a2:1e:93:ce:10:7b:db:29:f2:37:10:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:80:45:4C:CE:12:29:16:5A:57:96:0B:34:E1:43:9D:03:0F:97:19
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32312d3231203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:60:58:4e:74:d2:65:22:8c:aa:f0:23:86:a8:1e:f6:81:
         a3:70:d2:d6:06:d7:00:a8:62:c1:d9:46:b6:ed:02:fe:f6:98:
         a2:db:7f:0b:32:c2:17:f0:71:19:72:24:84:da:12:fc:75:4d:
         00:41:ad:43:17:82:73:f7:4d:f9:5e:fc:9b:a9:e5:4f:d1:8a:
         0e:b2:78:38:09:58:ff:ae:6d:7c:67:ee:63:36:61:75:95:11:
         b2:81:34:06:37:6a:c8:38:9e:ec:6f:b6:b2:7b:aa:a6:34:8d:
         70:d6:8a:f6:13:c2:0b:96:f5:7c:e1:77:ee:3e:6d:fa:18:2c:
         f3:4b:1b:bb:a1:0e:f1:0f:3f:3b:94:ba:6d:6a:34:1d:a2:b7:
         f4:b0:1e:9b:47:b5:4f:05:61:e9:ef:c4:0c:22:16:ed:49:5d:
         cf:f3:ce:b4:38:b4:5b:c4:54:7b:a2:da:02:5c:57:75:3a:bd:
         ac:45:8c:10:8e:f6:77:8f:1b:a8:02:97:49:2e:fd:48:96:08:
         b8:c4:24:9e:31:d1:73:9a:77:20:42:01:68:4f:1e:f0:7f:19:
         bc:41:70:a2:f2:66:5a:db:f3:35:50:94:a7:7f:0a:d1:93:4b:
         ec:02:f4:bd:43:df:04:ee:db:ce:d6:fa:04:eb:04:87:24:8b:
         0c:8e:fe:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org