Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32372e302f32342d3234203d3e203238333630.roa
File:                     3137372e382e32372e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          OHGpNKd+BjO4PYTTNJ5ytRLA08Z5buvrVGm+2yhBlAg=
Subject key identifier:   E4:1E:98:84:AE:28:D1:29:1E:17:95:52:AD:2E:DB:1D:05:37:1C:E4
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       1CED774F06216E5E53BB2D760F3A81AF8926E23E
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32372e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:33 +0000
ROA not before:           Thu 17 Nov 2022 17:58:33 +0000
ROA not after:            Thu 16 Nov 2023 18:03:33 +0000
asID:                     28360
IP address blocks:        177.8.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ed:77:4f:06:21:6e:5e:53:bb:2d:76:0f:3a:81:af:89:26:e2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:33 2022 GMT
            Not After : Nov 16 18:03:33 2023 GMT
        Subject: CN=E41E9884AE28D1291E179552AD2EDB1D05371CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:37:e4:55:c4:82:91:9a:b6:18:f7:ad:92:
                    5f:3c:2d:79:fe:e9:b9:1c:75:89:3a:bd:ba:82:89:
                    44:1a:d1:55:1d:93:03:4d:c1:87:0f:6b:58:9f:d4:
                    6f:cf:5f:32:87:9c:10:f9:03:5a:18:af:7f:88:9c:
                    69:d6:0b:c5:8e:df:8d:8e:21:c6:af:c5:5d:6b:70:
                    11:cf:11:d8:b1:cb:80:05:3c:f2:fd:c4:eb:b5:5d:
                    50:20:43:b1:ed:08:06:54:f6:71:4d:c8:a7:4b:cc:
                    8e:7f:d2:30:29:46:7b:90:d5:59:ca:2d:f4:69:cf:
                    d5:c0:4d:fa:91:86:cf:cc:13:31:74:d4:6b:b1:29:
                    9d:31:fe:d4:86:7b:41:67:f6:53:2d:59:65:f8:5d:
                    12:c7:74:ad:0e:87:bd:3d:d1:85:58:d2:fb:b0:89:
                    0b:ed:81:f7:d6:e5:09:1c:b9:6d:af:07:a2:9e:9f:
                    06:1c:0e:11:38:96:4c:d2:e7:db:cd:1c:44:1d:c9:
                    88:13:12:ee:08:9b:cb:83:54:7a:b9:bc:cb:f0:48:
                    2c:39:ee:41:f6:47:9b:ec:af:1d:34:ae:cb:14:80:
                    07:ce:65:f6:13:ad:a1:b4:32:9a:41:f6:42:c7:c5:
                    e0:6e:86:a5:9e:b0:a8:41:45:c8:ec:9c:a6:24:05:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1E:98:84:AE:28:D1:29:1E:17:95:52:AD:2E:DB:1D:05:37:1C:E4
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e32372e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a9:32:0e:4e:d2:e0:35:e2:00:19:0a:11:53:26:4b:df:ad:
         7b:ee:be:fb:5e:96:f1:32:d9:b0:d7:4d:54:f0:e2:67:27:30:
         81:3e:fc:67:f1:be:cd:87:6d:6b:94:3b:ab:e6:52:0b:e9:1e:
         ce:dc:35:94:35:4d:3d:02:df:84:6a:b3:c4:f9:17:13:7f:9c:
         e6:84:0c:35:40:57:ef:de:a2:7c:fa:9e:3b:c7:29:0e:4a:c1:
         d9:5b:87:d5:36:7a:70:1a:3c:77:9f:4b:48:ac:0a:fc:aa:f1:
         14:f7:f8:c8:96:b2:1e:4c:2e:6a:6b:f5:4c:0b:30:a2:73:9a:
         8e:ad:1e:31:d6:04:0c:4d:6d:60:15:20:d5:a6:95:8b:54:12:
         88:41:41:98:87:3e:8e:c3:68:74:53:39:60:4a:9f:eb:05:89:
         33:c5:0a:2f:49:5e:e1:c7:15:e1:81:4e:ae:f6:80:a7:ea:7e:
         75:d8:bd:64:cd:65:8a:70:f7:75:49:56:c6:6b:26:da:51:87:
         a9:22:1a:32:7b:f8:87:44:5d:7d:14:e6:97:cc:d4:25:cd:da:
         b9:31:fa:69:d6:2c:d7:5c:85:e9:a4:30:f5:46:06:ea:0b:07:
         22:89:2a:4f:92:b4:36:11:e3:2c:8f:a6:f0:59:7e:26:01:f1:
         91:87:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org