Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e37322e3134382e302f32322d3234203d3e203238333433.roa
File:                     3133312e37322e3134382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          mE6O3prkhmpZGivedfBGhWLzy1LQ1S0hRjI3Ert80Bw=
Subject key identifier:   F2:4B:A0:FC:B7:0A:ED:66:7E:01:E3:25:6E:50:62:85:AB:CB:93:B9
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       5A020DA96645F9A2CCA3D940D93280668C92FEF0
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e37322e3134382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:16 +0000
ROA not before:           Thu 30 Dec 2021 18:17:16 +0000
ROA not after:            Thu 29 Dec 2022 18:22:16 +0000
asID:                     28343
IP address blocks:        131.72.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:02:0d:a9:66:45:f9:a2:cc:a3:d9:40:d9:32:80:66:8c:92:fe:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:16 2021 GMT
            Not After : Dec 29 18:22:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:e9:f0:fb:ce:69:63:18:c4:20:08:87:6f:
                    53:8a:e8:5c:74:de:5c:92:e3:87:57:1a:8d:19:57:
                    ff:b0:38:ff:62:22:f5:d1:1b:b0:8f:e6:69:09:75:
                    1a:09:16:5c:5f:eb:fb:15:1e:9d:8c:80:82:c5:33:
                    16:c4:9f:70:b7:e9:fa:d1:86:a4:e8:22:bc:8c:81:
                    bb:7b:ae:cd:70:3c:1a:a6:d0:ef:d8:d4:4b:fe:7a:
                    a5:7a:40:b6:1b:cf:af:63:2c:2b:ec:1d:0c:75:0f:
                    91:7e:20:54:eb:6e:38:12:4a:f5:85:09:80:14:1b:
                    6c:74:b9:e6:ad:e9:a4:67:cf:6d:ae:38:3d:61:83:
                    8c:d4:a2:d4:e3:f2:f1:c2:de:2e:90:32:aa:1e:a4:
                    d6:e3:1d:21:d5:cf:00:62:0d:f3:8b:87:0a:8d:a3:
                    e0:6e:a7:bc:19:b1:c8:40:8e:9f:3e:87:84:96:ca:
                    96:9b:a0:6e:80:37:90:22:d8:fa:06:d1:b9:04:0d:
                    65:eb:b5:c0:d5:3b:41:b9:24:22:e9:3c:c8:68:6d:
                    f2:62:6e:89:3a:9a:1c:9c:14:98:c5:8f:e8:6f:7b:
                    84:b9:98:cf:fe:95:76:7c:54:df:4e:ed:ae:82:3f:
                    1d:85:1b:6c:de:f5:ab:31:6e:98:83:93:77:64:ee:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4B:A0:FC:B7:0A:ED:66:7E:01:E3:25:6E:50:62:85:AB:CB:93:B9
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133312e37322e3134382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:a2:90:92:2c:3a:50:ce:13:32:30:96:d9:54:39:2c:21:94:
         68:fd:91:dd:ac:2b:1f:26:ba:1d:ab:12:a5:bc:11:a7:56:0e:
         77:fc:5b:b1:50:03:b2:a2:c8:ac:c7:6f:b3:ea:ae:8e:59:c5:
         ac:be:e0:11:9a:03:99:d9:5e:e7:f0:a7:89:0f:c2:6a:e0:a1:
         e8:45:9b:b3:fc:8b:b4:eb:e7:ee:24:ba:8a:a2:46:08:a7:24:
         46:de:c4:df:48:f1:11:5e:99:c1:25:ec:59:52:20:76:57:4c:
         6e:2f:e7:db:06:67:5e:2d:9e:0b:d1:ba:11:e0:66:0d:f5:36:
         39:6c:20:53:e7:d1:ae:0c:63:f1:2d:c4:d8:f9:0a:28:6e:4b:
         a7:3d:ae:1d:cc:14:ca:fb:0d:29:85:5b:db:ae:c4:89:fe:f0:
         b5:31:77:45:9a:7a:1c:88:71:39:2b:00:b6:38:65:2a:2f:1a:
         46:e8:e0:59:0f:1d:ac:d6:fa:57:44:55:85:8a:81:78:84:ea:
         85:e3:53:7c:2c:71:c7:ac:90:e0:1e:4e:db:19:24:94:84:ae:
         46:98:f7:53:3d:89:e3:74:9f:b6:0c:79:01:90:95:06:6b:8a:
         22:52:1c:1b:8d:d2:95:30:b1:b3:cf:fe:27:78:25:b9:9c:5a:
         6a:b9:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org