Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e3131382e3134382e302f32322d3234203d3e203238333433.roa
File:                     3133382e3131382e3134382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          tFYlLFNwpnHEZANWgbRNpX9fa/7yK+P/bfzOw9WFM5E=
Subject key identifier:   44:5E:2E:F2:43:F6:F5:E1:D3:38:D5:3F:A9:2F:33:36:8C:A1:BF:23
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       1861116E144217010F5F7E6031A92C72E3ABD764
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e3131382e3134382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:12 +0000
ROA not before:           Thu 30 Dec 2021 18:17:12 +0000
ROA not after:            Thu 29 Dec 2022 18:22:12 +0000
asID:                     28343
IP address blocks:        138.118.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:61:11:6e:14:42:17:01:0f:5f:7e:60:31:a9:2c:72:e3:ab:d7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:12 2021 GMT
            Not After : Dec 29 18:22:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:cc:7c:41:1c:94:cb:42:62:1d:47:71:1c:
                    4f:47:06:07:aa:3c:d5:c2:da:61:5f:3f:f1:88:69:
                    ce:8e:0c:21:a1:d6:9e:5e:9c:73:f5:95:fb:f0:72:
                    0e:cf:1e:1c:a6:9d:73:a2:9d:81:39:d8:92:c0:ca:
                    cd:84:96:ed:60:78:e2:f1:ea:c4:a9:44:f6:cf:8b:
                    3d:88:f7:97:26:53:da:42:12:23:3b:0f:df:73:57:
                    a1:9c:27:f5:d0:4f:f3:a3:7f:ce:88:11:66:b2:bc:
                    8e:57:1c:96:0a:79:41:41:05:e1:fc:f7:08:b4:27:
                    10:cd:6b:be:3f:cf:87:cc:e9:63:98:06:a2:80:b0:
                    05:b0:fa:2c:a1:4d:d1:58:f4:fc:69:80:cd:d3:2f:
                    62:11:6b:26:63:d4:aa:3f:bf:c1:2c:10:b5:e6:6e:
                    5b:08:b5:14:75:47:58:67:58:e2:2b:09:2d:df:dc:
                    4d:bc:5c:db:f4:b0:1e:49:6d:2d:8a:88:3f:ff:e7:
                    b7:30:cd:f7:aa:e3:30:3e:67:04:cb:9d:cf:05:04:
                    dc:ce:b7:43:fa:0d:6a:bb:91:29:34:51:f7:e5:cf:
                    e7:ac:98:4a:56:f8:c8:b0:67:ba:94:31:e2:7d:ca:
                    38:29:ca:09:b8:c9:78:c5:53:c5:92:b9:72:3e:a5:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5E:2E:F2:43:F6:F5:E1:D3:38:D5:3F:A9:2F:33:36:8C:A1:BF:23
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e3131382e3134382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:9d:97:59:84:42:08:85:2f:04:70:af:2f:c6:9f:78:0d:df:
         d1:b5:69:a0:fd:bf:7c:65:3a:1a:12:17:07:bd:fa:6b:2a:ee:
         86:fd:89:30:4a:b3:37:50:e4:2d:2a:31:8c:31:68:a9:06:81:
         ca:e7:0e:ed:7e:42:89:58:29:f5:97:0c:0f:e2:fb:6b:67:43:
         a4:49:93:e9:7b:2c:55:eb:96:3e:fb:7e:9c:fa:2f:d9:c2:00:
         89:06:dc:87:89:5f:6c:e0:55:9f:33:de:ee:21:f4:d7:78:83:
         a7:64:33:f8:a1:e4:41:d7:0b:8b:0d:47:31:c7:32:1d:c4:b0:
         35:bb:79:fe:a4:95:0a:be:61:79:71:a3:97:dd:e9:c0:35:67:
         ba:2a:5b:91:31:74:6d:d8:e7:a8:ea:e1:95:b4:fa:c2:d7:9e:
         ea:af:fe:6c:d9:df:35:eb:94:a5:07:29:2a:c2:5f:f3:8c:a0:
         d3:03:13:99:d8:39:5b:d3:1e:12:64:55:b1:0b:d3:be:2d:d5:
         ef:9a:41:6f:39:33:cf:eb:c4:95:0d:66:27:1f:89:50:09:ea:
         28:fd:47:a8:6a:eb:4c:21:0d:bc:30:4e:95:79:25:bc:9e:e5:
         42:df:80:35:40:6b:bd:7f:85:2e:5a:bf:ee:3f:b1:be:8b:7e:
         b8:b8:e4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org