Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e3131382e32382e302f32322d3234203d3e203238333433.roa
File:                     3133382e3131382e32382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          y2lMemi6strMuoqTqq529YjA907jCmUcfFBcWpoLmcw=
Subject key identifier:   05:3A:C7:E2:A7:19:89:9F:28:7B:10:95:02:23:9A:2B:26:88:3C:4D
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       2B91A5FD6BD695045C30B8F6F1C8BD1192C98853
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e3131382e32382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:12 +0000
ROA not before:           Thu 30 Dec 2021 18:17:12 +0000
ROA not after:            Thu 29 Dec 2022 18:22:12 +0000
asID:                     28343
IP address blocks:        138.118.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:91:a5:fd:6b:d6:95:04:5c:30:b8:f6:f1:c8:bd:11:92:c9:88:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:12 2021 GMT
            Not After : Dec 29 18:22:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:e0:b4:41:db:0a:54:f8:41:05:3e:7c:44:
                    ed:aa:e0:eb:24:3b:a0:2b:86:9b:60:8a:68:b3:d5:
                    0a:5e:7a:15:b4:64:cb:e0:52:7f:c1:99:bf:c1:e9:
                    46:87:3c:7e:f4:55:b1:88:8b:ee:91:a8:5a:ac:83:
                    a6:86:4f:85:77:40:0e:1e:0e:b8:dd:9d:42:3a:ad:
                    c6:96:cc:9b:8d:8f:d6:b3:fb:64:bf:e4:34:ef:4f:
                    9c:45:2b:4e:e8:0e:e3:99:e7:8c:ae:85:d7:28:75:
                    5c:28:48:bc:41:a6:3e:1c:fe:ac:08:57:66:9e:ed:
                    a4:79:48:06:f4:6b:4b:d1:bb:a2:c3:b7:7d:93:f8:
                    1b:95:a1:a2:0e:77:fe:af:3b:f6:bf:87:64:33:ce:
                    68:f7:3b:a5:49:59:bb:dd:25:1a:42:94:43:7e:07:
                    ee:16:1d:ce:79:3b:ff:c0:49:d5:fc:80:76:e2:a6:
                    c4:3d:90:2f:dc:95:74:dc:bc:2a:ac:13:a9:58:1f:
                    f8:6e:99:83:00:9e:02:42:aa:22:81:7c:e6:9d:e0:
                    30:eb:e2:fc:dc:d2:8e:c2:32:2e:ee:7a:78:23:8d:
                    94:49:ee:7f:3a:84:f9:4b:33:97:85:d0:bc:2d:d6:
                    37:e1:88:55:fb:09:12:c4:f6:5d:b8:c3:91:50:c4:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3A:C7:E2:A7:19:89:9F:28:7B:10:95:02:23:9A:2B:26:88:3C:4D
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e3131382e32382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:fc:b7:b3:f5:3c:36:34:e9:29:c3:1e:f8:72:40:ec:9a:38:
         7a:a7:1b:1f:2e:7e:66:c6:48:61:c5:b6:c5:3d:c5:3b:0a:5c:
         b1:bf:e7:3d:a5:e5:1a:f6:6f:87:2a:04:4d:7d:6f:b0:51:37:
         da:aa:9a:1c:f4:02:9a:24:0c:9e:cb:6b:d7:d6:ce:d5:e8:14:
         25:3a:1d:20:0f:6f:28:bc:4a:ee:6e:57:00:51:c5:18:1b:c6:
         ed:60:93:e4:33:59:05:70:c1:c7:c9:da:e4:61:df:8d:3a:62:
         1d:be:4c:63:93:5b:88:0b:75:8a:0f:fa:41:7b:c9:e9:0e:7a:
         b0:68:a9:bc:cc:e5:00:33:3f:fe:44:f3:d3:02:61:f5:e2:10:
         90:29:c7:b5:ce:02:1b:8f:a4:cd:ea:44:bb:25:89:17:95:d8:
         42:ec:88:dc:5e:67:1d:13:c7:92:7d:d0:cd:3d:a6:6f:0d:f8:
         b0:91:47:04:14:bc:93:df:5e:65:23:f0:28:84:df:2c:3a:21:
         e5:55:1a:c3:97:87:ff:9e:57:9c:2a:0f:2a:11:dc:d7:54:27:
         5d:84:b7:45:37:e6:5e:df:2f:06:b5:72:d4:d8:11:83:4f:fd:
         bd:10:be:a7:30:b4:e1:e4:78:01:c2:28:c8:7b:7c:64:77:5f:
         0e:5e:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org