Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133322e3235352e31322e302f32322d3234203d3e203238333433.roa
File:                     3133322e3235352e31322e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          Mp3V2FvDb6XUTmob59+fK6Vy0gMMt4PwfIvhfCWpM2Q=
Subject key identifier:   11:8D:41:C3:EB:8D:A0:2A:DB:48:44:36:C5:15:C3:C8:F4:E9:EA:49
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       72B1E0BE006A9A609EBEB54C4CF1112F1DA1FFFA
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133322e3235352e31322e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:13 +0000
ROA not before:           Thu 30 Dec 2021 18:17:13 +0000
ROA not after:            Thu 29 Dec 2022 18:22:13 +0000
asID:                     28343
IP address blocks:        132.255.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b1:e0:be:00:6a:9a:60:9e:be:b5:4c:4c:f1:11:2f:1d:a1:ff:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:13 2021 GMT
            Not After : Dec 29 18:22:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:2a:2d:5b:c2:bf:10:0e:47:f7:37:3b:6f:
                    f3:8c:5c:51:45:2e:ad:37:32:6d:68:3e:0c:70:3e:
                    a2:a3:ea:3d:48:73:c2:08:c0:c6:6d:ae:41:f9:23:
                    f6:05:37:f7:f6:d4:cf:a2:f5:ab:fb:c7:d2:ae:83:
                    a8:94:60:64:92:fa:b3:f9:ca:cf:48:48:8c:0d:13:
                    1e:8e:52:2f:07:76:3d:1f:42:11:a4:e7:81:45:0e:
                    ce:3c:68:79:c6:2b:d0:b3:1f:cb:5f:9a:af:e4:5e:
                    41:24:0d:61:ec:91:42:d8:53:6a:51:28:22:93:32:
                    d8:07:7f:69:6a:b9:a9:c6:15:dd:98:8e:3a:eb:3f:
                    e1:b7:8f:b8:22:9a:15:bf:24:33:59:1b:90:dd:77:
                    3c:3a:59:0f:8f:3a:b4:d8:d4:21:2b:a1:d8:5c:ce:
                    2a:ae:31:50:e2:d2:50:14:ad:88:ac:d8:ed:89:d9:
                    62:4a:19:4e:88:2b:74:e6:f7:c8:05:60:87:f9:58:
                    99:17:9d:7e:11:56:4d:20:0a:bd:80:90:99:d2:52:
                    30:9e:ab:8a:6f:eb:f5:25:53:53:34:42:00:19:ff:
                    8e:b4:a5:98:d4:0b:32:51:70:50:43:6c:e8:3a:0b:
                    b8:73:d4:24:bc:7c:90:03:79:4f:24:09:66:41:5d:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8D:41:C3:EB:8D:A0:2A:DB:48:44:36:C5:15:C3:C8:F4:E9:EA:49
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133322e3235352e31322e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:75:ca:36:50:79:10:39:ba:a6:92:9b:4b:dd:24:9a:0e:3c:
         ae:f1:16:1c:fc:f8:1a:1e:d3:c0:c6:54:f3:d8:c4:f0:7f:9c:
         64:5f:c4:c6:11:ea:f1:a1:84:21:c5:94:f7:c2:f4:b3:b2:39:
         ad:63:74:68:70:07:f6:3a:2c:b0:d3:68:24:71:8a:ba:a6:25:
         f7:4e:10:68:d8:77:4d:27:41:70:52:44:37:5c:5d:9e:8b:bf:
         1d:85:cc:af:47:60:7b:e2:14:58:e0:2d:29:af:a9:90:cd:62:
         88:06:06:c5:f1:e4:45:cd:5a:14:5f:4d:ea:3f:a8:b4:25:28:
         3b:c9:cf:b8:06:47:6d:2b:c7:6b:da:82:de:bf:33:d0:fd:b5:
         1a:6f:fe:3d:3e:c6:8c:07:fd:9e:74:b6:b6:3b:f8:ac:46:4c:
         d6:fc:23:49:25:1d:57:ea:bc:db:e8:71:9f:ec:76:f1:88:d4:
         45:71:ec:0d:a7:9b:30:a8:d1:7d:1d:70:60:4e:41:97:ac:b1:
         ae:e0:12:79:62:ba:f8:27:3b:fb:a2:68:e5:be:93:e7:ab:bb:
         4d:6b:b0:b4:c7:5f:b8:84:6c:be:a9:50:4b:80:e6:f9:12:c3:
         91:93:b7:99:5f:b2:cf:34:6f:43:99:0e:0c:ed:3c:fa:a0:2b:
         e8:af:c9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org