Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e33362e3230342e302f32322d3234203d3e203238333433.roa
File:                     3133382e33362e3230342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          24tpPe9XTWNlCAuLePhndjxc638/3BxvLmGN6jfkiRk=
Subject key identifier:   1B:FD:AD:6C:8E:30:67:69:30:7F:9B:F4:99:F9:42:61:7E:EF:F7:9F
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       7FDCAB534DB7B1A6FA49C04D15E1034E3FC6C9E1
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e33362e3230342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:11 +0000
ROA not before:           Thu 30 Dec 2021 18:17:11 +0000
ROA not after:            Thu 29 Dec 2022 18:22:11 +0000
asID:                     28343
IP address blocks:        138.36.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:dc:ab:53:4d:b7:b1:a6:fa:49:c0:4d:15:e1:03:4e:3f:c6:c9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:11 2021 GMT
            Not After : Dec 29 18:22:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:00:3a:e9:00:a5:2b:83:7b:ca:44:9d:46:
                    ea:f8:03:82:16:9c:a9:ff:bc:d0:78:2d:1b:5d:eb:
                    25:de:30:94:b7:85:37:00:12:2a:cb:39:c8:91:5d:
                    6e:b8:d4:e6:ba:32:d6:5c:8a:15:ca:2f:10:a4:59:
                    11:dc:73:a7:4f:89:10:61:b3:14:7b:5f:33:4b:57:
                    6e:8e:a4:74:d9:e9:47:df:13:68:8e:f4:a5:3a:d3:
                    02:0a:c7:dc:0c:61:0d:44:50:c9:67:17:7d:9c:27:
                    df:f2:32:ad:a2:88:b1:ce:aa:ed:6c:6c:1c:69:3b:
                    88:10:99:ee:bc:cb:a4:db:72:46:b1:c4:19:5d:5c:
                    e5:6e:ff:7c:f4:ac:70:79:75:fa:69:ad:e8:0b:47:
                    d3:6f:db:ea:c8:93:21:e6:06:d9:32:6f:7e:01:d6:
                    f9:14:c1:7f:0b:f5:a5:2b:b3:fd:f9:15:d1:97:4e:
                    70:1a:57:67:5c:09:61:29:46:28:41:85:46:86:48:
                    4d:e5:e5:2d:4a:be:82:11:15:e6:66:11:a3:31:89:
                    91:60:7c:6a:a6:50:68:94:6b:92:76:bb:c2:ba:15:
                    24:a3:a2:42:9d:52:8b:ca:a5:3d:08:19:44:51:54:
                    48:d4:0e:0a:5e:0e:0c:bd:6c:ed:e3:b1:fe:c8:4f:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FD:AD:6C:8E:30:67:69:30:7F:9B:F4:99:F9:42:61:7E:EF:F7:9F
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e33362e3230342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:06:33:bc:ed:17:62:4b:5c:34:ad:be:28:5f:fe:8e:8c:f7:
         44:4f:80:46:6a:ac:30:23:e7:c2:dd:8a:97:98:37:09:34:90:
         e4:53:20:ae:da:2b:81:be:1f:ba:66:ba:5b:cc:27:50:6f:67:
         a4:ff:4d:db:4d:9c:6e:06:4c:ff:fd:00:54:8c:cb:9c:51:51:
         16:66:5f:84:78:8b:08:a6:66:77:a4:f5:a1:1e:1b:a9:bb:c2:
         b6:b8:b0:b4:74:af:dd:16:40:94:84:42:d7:76:b4:9d:5c:b8:
         74:8d:1f:89:44:3f:df:b7:f9:06:0b:f3:f1:44:48:91:f9:74:
         71:47:27:0b:19:38:a7:ab:ba:96:d2:f2:ed:dd:11:88:1d:26:
         fd:53:93:ec:5c:aa:16:78:f4:9f:a7:fc:78:ba:a1:df:05:94:
         29:58:b8:8e:17:02:33:af:33:cb:d4:51:c4:94:f6:9b:45:c5:
         3c:47:ca:dd:f0:66:1d:84:90:61:d8:b7:71:ec:bd:dc:99:90:
         87:2b:ce:20:d6:a7:39:14:ee:c8:1f:78:2a:af:0b:65:93:ad:
         8e:c1:64:eb:83:e7:ae:af:35:cb:b9:4e:e1:9e:f6:9a:d6:af:
         7a:cd:6b:ef:3b:2d:cd:71:04:56:04:f8:eb:5b:5c:42:6c:1c:
         33:cb:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org