Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e37322e3130382e302f32322d3234203d3e203238333433.roa
File:                     3133312e37322e3130382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          1QgUVm9Hmk9UJXMOlcZyF1wNCQMi0r1t08WTEvssbW4=
Subject key identifier:   DC:C3:FB:2B:EE:22:3B:2D:BE:F7:C0:56:EB:CD:C6:7B:FD:FE:17:C2
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       02B72E3D734C2363243E14165661A74F6704926A
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e37322e3130382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:11 +0000
ROA not before:           Thu 30 Dec 2021 18:17:11 +0000
ROA not after:            Thu 29 Dec 2022 18:22:11 +0000
asID:                     28343
IP address blocks:        131.72.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b7:2e:3d:73:4c:23:63:24:3e:14:16:56:61:a7:4f:67:04:92:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:11 2021 GMT
            Not After : Dec 29 18:22:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f2:cc:9b:95:3e:16:fb:4a:60:73:7e:23:b6:
                    5a:d0:4f:7e:ad:6c:dc:ea:61:68:6a:92:86:2d:d4:
                    28:5f:5f:ae:13:87:8a:c3:67:94:c2:19:9c:26:1c:
                    ce:95:42:62:e5:3e:7b:e2:3b:30:c8:80:dd:89:a4:
                    dd:df:8c:31:38:94:8f:e8:a1:f7:5e:5a:89:3d:49:
                    6b:f7:fe:6c:d0:5a:2a:de:7f:df:4b:ff:7e:fc:6c:
                    73:73:1a:db:f7:47:f9:fd:33:b5:73:80:69:58:6a:
                    13:4d:dd:87:af:61:b8:34:4d:bc:f4:47:ac:ac:7a:
                    42:9c:0e:b7:b1:e6:ba:14:c1:00:72:b1:b6:63:26:
                    4b:dc:63:f6:d9:e8:3e:2b:28:ca:c4:16:bb:ad:af:
                    3f:e3:91:6b:e4:06:1c:e7:83:39:b0:f3:d5:3f:48:
                    42:38:22:7b:6e:58:15:f1:75:b6:78:e2:ad:2b:84:
                    75:a4:f5:0f:38:3d:b7:f3:c0:d3:b6:71:ef:81:db:
                    89:44:07:45:16:90:90:eb:d6:00:f6:0e:46:81:58:
                    c2:5c:60:37:e0:51:cd:40:e7:36:e8:26:80:66:71:
                    84:25:69:3a:9b:77:08:e0:a5:79:47:0a:b0:17:45:
                    72:2b:60:15:c1:b2:87:50:db:80:c0:ad:63:44:a4:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C3:FB:2B:EE:22:3B:2D:BE:F7:C0:56:EB:CD:C6:7B:FD:FE:17:C2
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e37322e3130382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:80:76:71:f9:e8:38:e9:00:c9:bb:79:43:54:34:55:a5:46:
         17:f4:2e:2b:af:fc:91:70:76:d6:08:9a:a9:7a:1a:5f:d2:3a:
         46:82:e8:61:ca:f9:0b:0f:ae:72:4d:09:e1:5b:ca:37:6f:47:
         d3:08:63:a5:d1:da:f5:f5:be:f6:34:7a:f4:9d:39:8b:c3:90:
         e5:fc:23:3f:05:7e:c8:50:a2:c1:c3:87:66:2c:cf:e7:02:ec:
         17:73:60:0d:20:99:65:de:52:18:ed:98:3e:3f:cc:60:7b:df:
         62:fe:57:f5:72:92:52:26:2f:46:0f:b1:c1:1b:eb:98:e3:2b:
         31:50:a0:07:ff:25:da:31:e2:b3:48:32:df:62:06:7d:10:d4:
         90:24:12:7f:e8:bf:1e:9c:7f:fc:8c:f5:ed:1e:15:41:ad:f4:
         f0:a8:9b:ee:b9:97:26:49:8b:d3:6d:1d:2e:bb:f4:9c:6c:43:
         50:38:ae:68:e9:cc:f5:c0:d5:99:45:03:d2:76:8e:6b:76:78:
         4a:81:50:d5:da:c2:eb:6a:17:22:68:d7:2e:ec:eb:26:62:88:
         04:e2:93:53:da:7b:da:d4:28:8b:5c:8c:30:1a:ae:81:30:87:
         05:2c:02:4f:3e:75:89:46:36:53:c1:81:d9:43:22:74:cc:b7:
         9b:5b:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org