Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e3136312e3134342e302f32322d3234203d3e203238333433.roa
File:                     3133312e3136312e3134342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          uMXJiWRX19CUZXn136MZmc3ZWxQxI1sAoTmAlD6wMq4=
Subject key identifier:   3B:1D:5F:D1:BE:AF:DF:2E:B4:6E:2B:84:5C:EF:A2:A7:DA:B1:73:FD
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       78B181154A9754039DE76451C02CDBEC6EB09E05
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e3136312e3134342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:10 +0000
ROA not before:           Thu 30 Dec 2021 18:17:10 +0000
ROA not after:            Thu 29 Dec 2022 18:22:10 +0000
asID:                     28343
IP address blocks:        131.161.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b1:81:15:4a:97:54:03:9d:e7:64:51:c0:2c:db:ec:6e:b0:9e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:10 2021 GMT
            Not After : Dec 29 18:22:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:04:c2:4a:3a:6d:b6:b6:3f:5e:86:8f:72:
                    79:8c:ce:00:85:8e:66:41:e2:dc:a1:be:1a:37:c2:
                    42:46:fb:f1:36:30:6e:6f:6a:12:d5:19:41:07:17:
                    28:7d:e6:65:cb:62:b4:b0:e4:09:b7:b4:66:43:a8:
                    46:f3:8d:00:7c:b7:5b:15:93:fd:30:46:bc:ea:f8:
                    98:40:fd:48:6d:cc:d7:0b:e1:6d:be:e8:69:e8:5d:
                    c9:51:f2:3a:49:bb:e4:2d:0d:4c:d9:c2:00:b9:5b:
                    7e:f9:d0:c9:8d:a6:f5:f4:01:8e:0b:bc:7e:cc:85:
                    83:80:19:62:35:54:e0:d7:00:f4:a6:67:90:5d:1b:
                    52:d9:dd:35:76:ee:1f:8a:a2:72:fd:32:20:35:6c:
                    63:cf:36:bb:2d:b8:da:1a:06:05:c3:cb:e1:ac:c8:
                    72:d3:bc:b4:fa:83:ac:80:a9:00:b2:a7:c9:0f:c4:
                    f3:1d:86:20:d5:f4:2b:db:cf:a5:26:3b:94:5b:33:
                    b9:5f:11:fc:13:ed:98:04:2d:0a:57:97:fb:b4:fe:
                    7b:dd:df:a0:6a:99:a0:d1:e2:68:b6:81:a3:c2:1e:
                    d4:33:29:15:f0:60:5e:db:78:56:e1:6c:ae:d8:6b:
                    12:61:16:b2:b5:08:6d:79:22:71:53:aa:da:d6:f0:
                    5b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1D:5F:D1:BE:AF:DF:2E:B4:6E:2B:84:5C:EF:A2:A7:DA:B1:73:FD
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e3136312e3134342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:48:55:5e:97:52:40:f9:e2:7a:fa:9f:9c:8d:c3:5c:5c:d1:
         1b:03:2a:7e:d5:be:6a:7d:30:91:12:67:5b:2c:06:4f:65:a3:
         c9:0b:f5:3a:19:02:2d:fd:b5:22:72:a9:45:92:1f:78:2b:8f:
         dc:8b:97:e8:d2:46:71:65:99:32:2e:79:a3:bd:0a:5c:f0:7d:
         d6:1b:bb:af:54:ec:a5:cf:37:b6:b9:f0:bc:82:37:71:a7:6d:
         0f:bb:87:02:2f:cf:a1:3f:fe:61:7c:46:aa:25:83:29:fd:45:
         8e:db:5e:ed:76:63:e0:1d:0a:00:76:41:ec:26:54:8b:a9:9e:
         70:a5:ed:2d:55:62:4a:22:d0:76:a4:8b:0b:d3:35:70:60:83:
         d2:74:88:37:c1:41:49:4c:74:a4:a1:a9:9d:d1:d9:91:f9:13:
         02:98:74:f7:59:ea:92:a1:3b:3c:80:f7:bc:05:8f:80:99:70:
         27:a0:04:30:3e:49:14:b4:1b:f6:64:cb:6d:88:2b:ea:ec:04:
         15:80:ca:c5:71:54:54:e9:47:5e:ff:f8:24:7c:a5:ad:3c:de:
         23:d8:d5:28:0c:95:da:c4:8e:07:91:a6:fc:b0:ea:24:12:e0:
         ac:a0:1d:ef:88:e5:b7:34:70:a1:3c:6c:51:aa:9b:52:c5:6a:
         a8:7c:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org