Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e3230342e36302e302f32322d3234203d3e203238333433.roa
File:                     3133382e3230342e36302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          3ksjdc/mG4hf4tssC6b4ZGlMEu3w84MuiUxFmSuFsas=
Subject key identifier:   F7:66:7F:F3:CB:C6:33:AB:6B:DC:BD:D1:CC:21:07:EA:80:3C:EF:EF
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       31783E644CF96BB1895CA98145588B7BB25BCB46
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e3230342e36302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:15 +0000
ROA not before:           Thu 30 Dec 2021 18:17:15 +0000
ROA not after:            Thu 29 Dec 2022 18:22:15 +0000
asID:                     28343
IP address blocks:        138.204.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:78:3e:64:4c:f9:6b:b1:89:5c:a9:81:45:58:8b:7b:b2:5b:cb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:15 2021 GMT
            Not After : Dec 29 18:22:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:4c:c7:51:03:23:fd:76:3e:da:d1:cc:85:
                    90:6f:e0:83:74:e0:11:f5:e0:b7:cd:9e:58:62:d9:
                    6c:44:f3:9a:2f:1b:17:d7:ad:0c:a1:2d:4a:1e:e5:
                    c7:51:1d:59:b6:e8:08:32:dc:6e:f1:d5:fe:cc:0d:
                    b9:fb:79:d6:20:5f:4b:72:f3:5b:a9:d3:e1:3f:d0:
                    1a:98:10:33:29:4e:61:8d:59:a3:a8:1b:70:2b:ab:
                    d4:fa:29:a8:7c:d7:2b:04:d3:e2:48:c1:31:e6:99:
                    a2:db:59:cd:86:39:6d:c1:7b:3c:42:d2:e6:20:a1:
                    c4:4c:b6:bb:1a:1d:d9:8e:f3:6c:20:a9:a6:2b:c7:
                    f5:24:10:5b:35:9b:f9:41:fa:5e:53:85:76:29:96:
                    9a:69:58:61:5d:5d:1d:60:78:8d:f7:77:5c:9b:5c:
                    c9:51:9a:6c:94:0e:51:c5:b6:00:b3:8b:8e:64:2b:
                    c9:2d:f9:93:36:ec:f7:cf:4a:23:0e:e0:2f:c1:8b:
                    78:ba:6b:99:0c:b9:88:bf:13:b9:8b:d5:1f:84:8a:
                    e5:fb:0f:e8:3f:14:37:17:0d:ae:3d:39:b9:8b:50:
                    c2:ce:f1:b4:74:81:5f:b3:d9:0e:19:4b:ac:9d:ca:
                    23:f3:5a:64:20:3a:65:26:0d:81:10:60:0f:da:76:
                    b4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:66:7F:F3:CB:C6:33:AB:6B:DC:BD:D1:CC:21:07:EA:80:3C:EF:EF
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e3230342e36302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:59:e4:1d:68:27:72:12:c6:29:c8:29:fd:90:28:65:b7:37:
         bc:68:a9:6f:e4:36:06:7d:d7:cc:22:68:5b:81:16:08:1d:92:
         af:94:67:8e:b3:15:63:ca:63:6b:9c:91:86:91:94:07:4a:a2:
         d4:90:2e:52:e3:9f:e7:c4:db:64:24:e4:5f:dd:43:d9:6d:86:
         e0:70:8b:82:96:bf:72:38:42:36:b0:c3:2d:d7:f7:b9:49:17:
         0c:44:54:44:d9:21:19:4e:9b:af:4e:f4:91:da:75:d3:cf:88:
         c0:86:52:67:a2:28:7f:46:c9:0d:7f:1e:b1:ce:f1:4e:c0:2b:
         27:b2:51:54:ad:8d:82:f3:05:fc:77:51:27:0b:f5:8b:e2:8b:
         d1:cf:79:32:e1:e4:aa:cc:78:f6:52:c7:64:95:91:61:2e:13:
         b3:e6:ea:7d:39:d3:63:a7:17:66:ae:a6:42:f5:c9:47:1d:a9:
         a7:70:84:e1:03:c9:5b:59:ac:82:ca:15:15:11:a2:0f:8b:10:
         d9:bd:5d:44:f7:8a:26:e7:f4:31:1c:a1:1f:bc:95:96:af:3f:
         d4:3e:75:f6:94:d3:07:9e:aa:a5:63:d7:b8:87:8c:34:b3:a9:
         42:ab:aa:89:bb:60:03:e7:af:95:90:31:7e:c1:1a:ef:df:b6:
         36:b3:2f:6b
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUMXg+ZEz5a7GJXKmBRViLe7Jby0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTVaFw0yMjEyMjkxODIyMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI1NjRDQzc1MTAzMjNGRDc2
M0VEQUQxQ0M4NTkwNkZFMDgzNzRFMDExRjVFMEI3Q0Q5RTU4NjJEOTZDNDRGMzlB
MkYxQjE3RDdBRDBDQTEyRDRBMUVFNUM3NTExRDU5QjZFODA4MzJEQzZFRjFENUZF
Q0MwREI5RkI3OUQ2MjA1RjRCNzJGMzVCQTlEM0UxM0ZEMDFBOTgxMDMzMjk0RTYx
OEQ1OUEzQTgxQjcwMkJBQkQ0RkEyOUE4N0NENzJCMDREM0UyNDhDMTMxRTY5OUEy
REI1OUNEODYzOTZEQzE3QjNDNDJEMkU2MjBBMUM0NENCNkJCMUExREQ5OEVGMzZD
MjBBOUE2MkJDN0Y1MjQxMDVCMzU5QkY5NDFGQTVFNTM4NTc2Mjk5NjlBNjk1ODYx
NUQ1RDFENjA3ODhERjc3NzVDOUI1Q0M5NTE5QTZDOTQwRTUxQzVCNjAwQjM4QjhF
NjQyQkM5MkRGOTkzMzZFQ0Y3Q0Y0QTIzMEVFMDJGQzE4Qjc4QkE2Qjk5MENCOTg4
QkYxM0I5OEJENTFGODQ4QUU1RkIwRkU4M0YxNDM3MTcwREFFM0QzOUI5OEI1MEMy
Q0VGMUI0NzQ4MTVGQjNEOTBFMTk0QkFDOURDQTIzRjM1QTY0MjAzQTY1MjYwRDgx
MTA2MDBGREE3NkI0RDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu1ZMx1EDI/12PtrRzIWQb+CDdOAR9eC3zZ5YYtlsRPOaLxsX160M
oS1KHuXHUR1ZtugIMtxu8dX+zA25+3nWIF9LcvNbqdPhP9AamBAzKU5hjVmjqBtw
K6vU+imofNcrBNPiSMEx5pmi21nNhjltwXs8QtLmIKHETLa7Gh3ZjvNsIKmmK8f1
JBBbNZv5QfpeU4V2KZaaaVhhXV0dYHiN93dcm1zJUZpslA5RxbYAs4uOZCvJLfmT
Nuz3z0ojDuAvwYt4umuZDLmIvxO5i9UfhIrl+w/oPxQ3Fw2uPTm5i1DCzvG0dIFf
s9kOGUusncoj81pkIDplJg2BEGAP2na02QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FPdmf/PLxjOra9y90cwhB+qAPO/vMB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMxMzMzODJlMzIzMDM0MmUzNjMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAorM
PDANBgkqhkiG9w0BAQsFAAOCAQEAA1nkHWgnchLGKcgp/ZAoZbc3vGipb+Q2Bn3X
zCJoW4EWCB2Sr5RnjrMVY8pja5yRhpGUB0qi1JAuUuOf58TbZCTkX91D2W2G4HCL
gpa/cjhCNrDDLdf3uUkXDERURNkhGU6br070kdp108+IwIZSZ6Iof0bJDX8esc7x
TsArJ7JRVK2NgvMF/HdRJwv1i+KL0c95MuHkqsx49lLHZJWRYS4Ts+bqfTnTY6cX
Zq6mQvXJRx2pp3CE4QPJW1msgsoVFRGiD4sQ2b1dRPeKJuf0MRyhH7yVlq8/1D51
9pTTB56qpWPXuIeMNLOpQquqibtgA+evlZAxfsEa79+2NrMvaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org