Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e3136312e31362e302f32322d3234203d3e203238333433.roa
File:                     3133312e3136312e31362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          FpWs3OEG95uUrwEd7H6nU7AOYijE3rwp0pFmz5rlg6o=
Subject key identifier:   71:AC:D9:D6:38:F8:D3:75:60:12:FE:BD:28:10:18:A0:91:CF:3F:A4
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       0A3430630C31BA1101E2019A694DF24C04F60F42
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e3136312e31362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:07 +0000
ROA not before:           Thu 30 Dec 2021 18:17:07 +0000
ROA not after:            Thu 29 Dec 2022 18:22:07 +0000
asID:                     28343
IP address blocks:        131.161.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:34:30:63:0c:31:ba:11:01:e2:01:9a:69:4d:f2:4c:04:f6:0f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:07 2021 GMT
            Not After : Dec 29 18:22:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ee:85:31:29:ee:48:8b:e0:3f:e0:ad:d2:9b:
                    4b:21:1a:56:47:74:e6:37:92:17:85:0c:76:6a:74:
                    63:c1:1e:21:ee:d9:c4:6e:7f:64:f3:06:22:ea:6f:
                    68:a8:d6:36:78:41:d3:02:50:02:b2:c3:20:6b:f6:
                    02:e7:58:6f:5f:c0:bf:ef:aa:3d:53:55:b3:e3:73:
                    6b:1c:96:b1:8d:45:6c:82:56:09:57:07:d0:55:a7:
                    f8:cf:78:d2:36:f4:28:4b:27:06:3f:1d:87:b1:69:
                    43:c8:00:ed:9b:24:9a:42:92:99:63:bf:1a:64:f3:
                    07:a7:41:05:52:3d:b5:19:da:cb:c6:a1:da:37:07:
                    df:5e:0e:f2:8c:45:3d:17:09:ff:13:c2:18:f9:64:
                    5f:d2:b1:3d:4a:db:e6:2a:64:a2:e5:f3:52:56:a9:
                    93:a8:c4:84:23:47:bd:1a:08:82:a8:00:f2:14:10:
                    4f:c5:7f:ca:01:67:44:58:e6:fe:48:b5:c2:6b:4f:
                    36:4d:37:c2:95:d6:cc:d9:7a:d0:4a:2c:6e:27:fe:
                    49:d4:db:70:a1:3d:26:0e:bf:b8:ba:6a:5e:cd:e2:
                    c0:55:ff:5a:54:cc:f7:7d:c4:8e:56:1c:0b:1a:7a:
                    61:c4:19:44:a7:2a:c7:01:de:5f:b1:b5:61:35:9f:
                    5c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AC:D9:D6:38:F8:D3:75:60:12:FE:BD:28:10:18:A0:91:CF:3F:A4
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e3136312e31362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:a0:f3:50:83:75:dd:cb:9c:9b:7a:4e:c7:11:e7:05:48:1b:
         39:92:74:d6:d6:4f:52:a5:55:45:f0:d1:96:11:b6:56:98:20:
         16:c4:7c:55:44:51:26:af:77:04:d1:22:59:3e:a1:e9:01:0f:
         cb:c3:d8:0a:36:38:b5:55:9e:34:09:80:4f:4c:6a:e9:54:19:
         92:ea:02:0d:5d:0f:0a:60:b1:27:96:c1:51:74:d8:0c:20:d4:
         96:a2:5e:35:29:5e:eb:87:8f:3b:2a:ee:73:57:b7:bf:95:55:
         db:49:27:88:30:18:38:c9:c7:34:af:4a:8c:42:b8:3a:86:ce:
         0f:bc:41:7b:0e:5a:b0:e4:ae:43:1a:ab:43:3a:2c:c5:13:9e:
         d6:0c:e8:5f:35:44:9b:b8:0d:7c:08:b6:59:98:27:aa:0c:e7:
         c2:49:82:fa:6b:21:5d:20:29:bd:4f:a3:a1:71:1c:78:35:f2:
         c0:57:dd:db:5c:28:96:0e:7c:28:3e:ac:7c:e6:e4:da:09:76:
         88:42:aa:5d:c8:0c:62:d3:9e:ce:60:ee:e7:58:98:d5:45:7b:
         cd:e3:bb:f1:c1:e7:46:8a:e3:34:b4:d9:30:3a:ee:60:cc:18:
         f3:d9:6d:40:f1:b9:e5:d5:f1:eb:77:77:c2:d7:6c:e6:76:1b:
         39:37:a3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org