Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e39342e3138382e302f32322d3234203d3e203238333433.roa
File:                     3133382e39342e3138382e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          HOVSl9ZDLoubXHqeSibjehzNOYJR+aokgq76n55NcGQ=
Subject key identifier:   71:C8:CE:33:B5:27:37:3A:47:76:A7:BF:72:54:01:5E:13:A1:B7:69
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       662268A0E6D2A52950E2A30563F6551C1FA3BAFC
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e39342e3138382e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:14 +0000
ROA not before:           Thu 30 Dec 2021 18:17:14 +0000
ROA not after:            Thu 29 Dec 2022 18:22:14 +0000
asID:                     28343
IP address blocks:        138.94.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:22:68:a0:e6:d2:a5:29:50:e2:a3:05:63:f6:55:1c:1f:a3:ba:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:14 2021 GMT
            Not After : Dec 29 18:22:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:08:42:fc:16:d6:86:5a:f9:a9:af:68:34:
                    a5:7c:a3:79:6f:f1:c3:d4:c1:af:a4:b2:6f:26:83:
                    ff:38:01:f9:a9:6f:47:0b:10:6f:7a:d0:1f:d6:11:
                    5a:4a:5f:5b:e6:49:5f:f2:db:4a:07:62:39:45:e9:
                    d0:01:1e:f2:91:c3:eb:ee:10:7c:65:0a:56:93:bf:
                    81:36:e5:8c:95:8b:e5:aa:cc:ac:a5:82:a9:17:be:
                    3c:09:ae:70:fa:71:4a:5a:87:97:36:3f:b7:00:5b:
                    c5:a3:5b:d5:95:98:c4:2b:02:fb:44:50:e3:df:28:
                    2f:29:57:18:76:ca:88:23:6c:0f:fe:20:a1:b0:45:
                    f2:e4:63:09:5e:1f:83:53:24:6f:c4:5c:5f:fd:dd:
                    73:98:f6:f5:dd:c1:12:6b:01:83:39:03:71:59:8e:
                    ba:f3:98:0d:bd:68:32:24:92:d6:a0:5a:3b:5d:bd:
                    1b:f6:52:25:81:07:4a:81:d8:a5:f9:50:8e:ae:58:
                    8e:55:91:be:98:9f:74:ac:40:49:f4:19:eb:e7:33:
                    d8:11:b3:15:95:af:19:70:d2:e0:14:f4:1a:44:08:
                    02:cb:45:a2:7f:7f:4e:0d:db:bc:a3:98:3f:2c:8d:
                    95:cf:16:7d:2d:6d:90:ec:d3:c4:4f:3f:bd:55:02:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C8:CE:33:B5:27:37:3A:47:76:A7:BF:72:54:01:5E:13:A1:B7:69
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e39342e3138382e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:89:20:a1:78:06:b7:e1:b9:37:16:a6:03:4e:c5:6f:d9:fd:
         49:e6:08:ec:fe:e6:26:a5:52:cc:32:b2:e3:c9:78:1d:ab:b3:
         b7:15:0d:c1:16:02:9e:c2:67:a3:80:f0:f7:86:f1:47:f1:7e:
         13:b5:62:f1:1f:55:56:c8:94:dc:96:78:76:e1:0d:53:41:fb:
         ec:de:cf:00:c2:3b:3d:cc:83:47:d5:80:b1:ab:46:76:2d:3d:
         4d:0a:b3:24:df:05:da:fd:0f:ca:87:c4:2b:a5:89:5d:e1:ad:
         ee:e2:28:f2:5b:45:31:2e:e9:9a:19:21:d9:a7:b9:3a:8e:ce:
         78:ea:16:17:eb:7b:9b:d2:ce:41:e7:10:56:4e:fb:58:39:e8:
         5a:54:af:90:4d:d8:6d:d1:f1:f0:f2:a4:cc:8b:97:d2:c3:66:
         9f:ec:af:88:bb:af:2a:3c:32:b4:63:37:80:a1:d0:bd:eb:77:
         e1:74:0c:f9:80:33:d0:cf:3e:af:1b:7c:0c:02:fe:10:b9:76:
         71:cf:f5:a3:31:c5:05:21:8e:84:70:56:55:d9:b3:6d:9a:38:
         32:e9:97:b4:9a:50:d2:00:2a:36:62:ca:dd:72:02:00:48:a2:
         bc:c9:42:40:37:8a:91:bc:e1:5a:b1:be:f8:22:3c:7e:1d:99:
         1d:8f:35:bf
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUZiJooObSpSlQ4qMFY/ZVHB+juvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTRaFw0yMjEyMjkxODIyMTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUM2QzA4NDJGQzE2RDY4NjVB
RjlBOUFGNjgzNEE1N0NBMzc5NkZGMUMzRDRDMUFGQTRCMjZGMjY4M0ZGMzgwMUY5
QTk2RjQ3MEIxMDZGN0FEMDFGRDYxMTVBNEE1RjVCRTY0OTVGRjJEQjRBMDc2MjM5
NDVFOUQwMDExRUYyOTFDM0VCRUUxMDdDNjUwQTU2OTNCRjgxMzZFNThDOTU4QkU1
QUFDQ0FDQTU4MkE5MTdCRTNDMDlBRTcwRkE3MTRBNUE4Nzk3MzYzRkI3MDA1QkM1
QTM1QkQ1OTU5OEM0MkIwMkZCNDQ1MEUzREYyODJGMjk1NzE4NzZDQTg4MjM2QzBG
RkUyMEExQjA0NUYyRTQ2MzA5NUUxRjgzNTMyNDZGQzQ1QzVGRkRERDczOThGNkY1
RERDMTEyNkIwMTgzMzkwMzcxNTk4RUJBRjM5ODBEQkQ2ODMyMjQ5MkQ2QTA1QTNC
NURCRDFCRjY1MjI1ODEwNzRBODFEOEE1Rjk1MDhFQUU1ODhFNTU5MUJFOTg5Rjc0
QUM0MDQ5RjQxOUVCRTczM0Q4MTFCMzE1OTVBRjE5NzBEMkUwMTRGNDFBNDQwODAy
Q0I0NUEyN0Y3RjRFMEREQkJDQTM5ODNGMkM4RDk1Q0YxNjdEMkQ2RDkwRUNEM0M0
NEYzRkJENTUwMkRFNDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArGwIQvwW1oZa+amvaDSlfKN5b/HD1MGvpLJvJoP/OAH5qW9HCxBv
etAf1hFaSl9b5klf8ttKB2I5RenQAR7ykcPr7hB8ZQpWk7+BNuWMlYvlqsyspYKp
F748Ca5w+nFKWoeXNj+3AFvFo1vVlZjEKwL7RFDj3ygvKVcYdsqII2wP/iChsEXy
5GMJXh+DUyRvxFxf/d1zmPb13cESawGDOQNxWY6685gNvWgyJJLWoFo7Xb0b9lIl
gQdKgdil+VCOrliOVZG+mJ90rEBJ9Bnr5zPYEbMVla8ZcNLgFPQaRAgCy0Wif39O
Ddu8o5g/LI2VzxZ9LW2Q7NPETz+9VQLeRwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FHHIzjO1Jzc6R3anv3JUAV4TobdpMB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMxMzMzODJlMzkzNDJlMzEzODM4
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAope
vDANBgkqhkiG9w0BAQsFAAOCAQEAMYkgoXgGt+G5NxamA07Fb9n9SeYI7P7mJqVS
zDKy48l4HauztxUNwRYCnsJno4Dw94bxR/F+E7Vi8R9VVsiU3JZ4duENU0H77N7P
AMI7PcyDR9WAsatGdi09TQqzJN8F2v0PyofEK6WJXeGt7uIo8ltFMS7pmhkh2ae5
Oo7OeOoWF+t7m9LOQecQVk77WDnoWlSvkE3YbdHx8PKkzIuX0sNmn+yviLuvKjwy
tGM3gKHQvet34XQM+YAz0M8+rxt8DAL+ELl2cc/1ozHFBSGOhHBWVdmzbZo4MumX
tJpQ0gAqNmLK3XICAEiivMlCQDeKkbzhWrG++CI8fh2ZHY81vw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org