Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e302e3230302e302f32322d3234203d3e203238333433.roa
File:                     3133382e302e3230302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          3uUyzw4FrbY6wL9gIAZqrkub5nEwdFuJmk0xWQ81dkA=
Subject key identifier:   15:74:B3:1C:83:41:F0:A6:03:F9:2E:22:6C:E0:B2:0B:24:7C:86:A2
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       69816326BC438390EBFA580B4B95A71208EF4027
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e302e3230302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:10 +0000
ROA not before:           Thu 30 Dec 2021 18:17:10 +0000
ROA not after:            Thu 29 Dec 2022 18:22:10 +0000
asID:                     28343
IP address blocks:        138.0.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:81:63:26:bc:43:83:90:eb:fa:58:0b:4b:95:a7:12:08:ef:40:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:10 2021 GMT
            Not After : Dec 29 18:22:10 2022 GMT
        Subject: CN=3082010A0282010100E11D223392098165F0AAE968649C168ABFCB22D7CFBD4FD17A2F49D36AC6CD9E9FC486FF6468D4A736A353A15A17CB6DB0824BCC8BC58084B27598C3ADD69219CBF9ABB0F810857EA118D4EEC0FADCEC1A28EE9F822FD2EB9C4A7BF6BCD4B45E70D2E995094E185FFF2BC32EE1CA491563E4548495E0B2B2E1EC218D98F9EBDB35235F4F8F147635FB58F630CF1B833ADE58CC21E705531F474127279D6216D9031BECF288DE17FA30A41655041447CE6EF9F3F42D6C766630F40DAFF21BA49E57A415680A01FE461793C7A8E90A43CB1FC8C6BE2E113CF446BE7D5305427F9A38FF88B8239415ADA5E74BA6F93D9E9C9C1350F30374C7F7358F9942C1A95A8F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1d:22:33:92:09:81:65:f0:aa:e9:68:64:9c:
                    16:8a:bf:cb:22:d7:cf:bd:4f:d1:7a:2f:49:d3:6a:
                    c6:cd:9e:9f:c4:86:ff:64:68:d4:a7:36:a3:53:a1:
                    5a:17:cb:6d:b0:82:4b:cc:8b:c5:80:84:b2:75:98:
                    c3:ad:d6:92:19:cb:f9:ab:b0:f8:10:85:7e:a1:18:
                    d4:ee:c0:fa:dc:ec:1a:28:ee:9f:82:2f:d2:eb:9c:
                    4a:7b:f6:bc:d4:b4:5e:70:d2:e9:95:09:4e:18:5f:
                    ff:2b:c3:2e:e1:ca:49:15:63:e4:54:84:95:e0:b2:
                    b2:e1:ec:21:8d:98:f9:eb:db:35:23:5f:4f:8f:14:
                    76:35:fb:58:f6:30:cf:1b:83:3a:de:58:cc:21:e7:
                    05:53:1f:47:41:27:27:9d:62:16:d9:03:1b:ec:f2:
                    88:de:17:fa:30:a4:16:55:04:14:47:ce:6e:f9:f3:
                    f4:2d:6c:76:66:30:f4:0d:af:f2:1b:a4:9e:57:a4:
                    15:68:0a:01:fe:46:17:93:c7:a8:e9:0a:43:cb:1f:
                    c8:c6:be:2e:11:3c:f4:46:be:7d:53:05:42:7f:9a:
                    38:ff:88:b8:23:94:15:ad:a5:e7:4b:a6:f9:3d:9e:
                    9c:9c:13:50:f3:03:74:c7:f7:35:8f:99:42:c1:a9:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:74:B3:1C:83:41:F0:A6:03:F9:2E:22:6C:E0:B2:0B:24:7C:86:A2
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e302e3230302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:a4:62:f3:ef:fc:57:57:90:f1:79:53:fc:f0:0a:57:dc:ef:
         ef:a5:d0:01:f5:6f:92:79:0e:41:cf:dc:00:1c:72:15:52:a7:
         36:df:34:3a:b2:be:35:b4:ad:21:a6:71:87:29:7d:7a:29:67:
         15:90:5a:1b:52:8f:06:52:8a:f2:ff:64:22:29:f6:08:b5:8e:
         3c:22:00:cd:e3:f7:8f:67:58:5c:c9:ba:e7:42:3c:fc:60:63:
         07:e0:89:9f:c5:e1:a5:72:45:25:c4:b8:2b:d3:43:4f:68:cc:
         33:60:72:86:0f:e8:99:59:aa:ce:62:f9:e9:eb:9b:a6:b2:69:
         2d:6c:f5:4e:8e:1a:3e:9e:3f:83:2b:d7:fb:92:82:a8:27:92:
         54:54:a5:43:9f:5d:0b:10:f1:0c:d0:a3:5e:30:34:34:68:a7:
         f9:80:4f:1f:d8:0a:f5:6d:de:0e:09:d8:63:f5:11:c3:32:1c:
         8a:0c:e2:e3:5e:2e:20:bc:72:ab:2d:03:68:41:3c:db:d8:90:
         d2:cc:71:66:39:91:7a:b5:ca:17:4a:4b:50:84:60:3e:7b:8c:
         9a:51:d6:a9:a5:cf:43:96:e0:db:1c:7c:f0:1e:e8:d3:be:6e:
         b3:46:bc:05:26:1b:64:7b:29:60:fb:65:11:5b:19:c6:94:f2:
         f2:d2:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org