Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e39372e3133362e302f32322d3234203d3e203238333433.roa
File:                     3133382e39372e3133362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          AzS5fsdAjSZ+PGEsFn0Y1e7L0Shzno7MctDMNmnx3BM=
Subject key identifier:   DF:88:30:FB:7A:FE:29:AE:B7:4B:6D:49:8E:2D:72:92:75:85:CF:B7
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       5E8D3116867171190134E19AF27D9FB3A423CA24
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e39372e3133362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:16 +0000
ROA not before:           Thu 30 Dec 2021 18:17:16 +0000
ROA not after:            Thu 29 Dec 2022 18:22:16 +0000
asID:                     28343
IP address blocks:        138.97.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8d:31:16:86:71:71:19:01:34:e1:9a:f2:7d:9f:b3:a4:23:ca:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:16 2021 GMT
            Not After : Dec 29 18:22:16 2022 GMT
        Subject: CN=3082010A0282010100BB7AE9C0DE86839DD003D51EDF4AC9B1B40A17A9113EC149B174439FA923F2086C18A5706E2D9E0A980B590C4496582C29EBB4B60890D79404857CF13C6CEAF16741E4A9814FCB85764330CC06F01238F3099E72CEAE5B9A253BC9F77266BC37D033F8488CC21D1B4B4C7F10BF8752918A77A5DA7A0780D03365E74C5C66C604A50C3A5731D9E10BF41ECD03008F13DFDF95A044E9D1C2AD68AB4501A4C5903D824A5BA70AE994DB06545CE76140F0B9F923C7D1A789EBBAEFBFD236678A8A0C454F55A4F34C74021DD8A09077E25118E88F04311E6E065F0D669A86DD7323A9685CD6C7EAC646E460FC1550000E28B7A29A230E3629E49A5F691E3F087485690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:e9:c0:de:86:83:9d:d0:03:d5:1e:df:4a:
                    c9:b1:b4:0a:17:a9:11:3e:c1:49:b1:74:43:9f:a9:
                    23:f2:08:6c:18:a5:70:6e:2d:9e:0a:98:0b:59:0c:
                    44:96:58:2c:29:eb:b4:b6:08:90:d7:94:04:85:7c:
                    f1:3c:6c:ea:f1:67:41:e4:a9:81:4f:cb:85:76:43:
                    30:cc:06:f0:12:38:f3:09:9e:72:ce:ae:5b:9a:25:
                    3b:c9:f7:72:66:bc:37:d0:33:f8:48:8c:c2:1d:1b:
                    4b:4c:7f:10:bf:87:52:91:8a:77:a5:da:7a:07:80:
                    d0:33:65:e7:4c:5c:66:c6:04:a5:0c:3a:57:31:d9:
                    e1:0b:f4:1e:cd:03:00:8f:13:df:df:95:a0:44:e9:
                    d1:c2:ad:68:ab:45:01:a4:c5:90:3d:82:4a:5b:a7:
                    0a:e9:94:db:06:54:5c:e7:61:40:f0:b9:f9:23:c7:
                    d1:a7:89:eb:ba:ef:bf:d2:36:67:8a:8a:0c:45:4f:
                    55:a4:f3:4c:74:02:1d:d8:a0:90:77:e2:51:18:e8:
                    8f:04:31:1e:6e:06:5f:0d:66:9a:86:dd:73:23:a9:
                    68:5c:d6:c7:ea:c6:46:e4:60:fc:15:50:00:0e:28:
                    b7:a2:9a:23:0e:36:29:e4:9a:5f:69:1e:3f:08:74:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:88:30:FB:7A:FE:29:AE:B7:4B:6D:49:8E:2D:72:92:75:85:CF:B7
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3133382e39372e3133362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:2d:c7:52:64:e6:f2:04:33:91:6c:66:9a:7b:bd:79:3e:
         bc:78:b9:fc:f3:84:b0:eb:41:04:a2:cd:b6:56:c9:ab:a0:c6:
         91:27:e9:b6:26:2f:8c:9d:df:3d:ff:cc:cf:52:06:60:5b:c4:
         33:82:59:7d:06:c6:e0:d9:6e:79:65:f9:5d:fa:af:d7:5e:05:
         10:58:24:a7:55:a0:1f:a4:15:cd:f1:88:29:5c:46:23:0d:57:
         cb:24:99:20:86:7b:85:a5:01:a4:0c:59:18:2a:77:e1:dd:52:
         ac:06:16:ac:48:74:b3:66:50:e3:2c:2c:57:74:a8:90:38:be:
         a1:5c:2d:d3:2f:f6:4d:a4:87:d0:f2:39:81:95:6d:28:b0:86:
         0a:1f:13:a4:41:a0:bd:3d:1c:d5:37:a8:1c:b9:98:3d:37:03:
         29:30:ca:db:36:9e:f2:4a:8d:9e:d5:ad:05:f8:bc:8a:88:1a:
         f3:a7:4e:fe:22:3c:4b:fd:c2:de:c4:b9:14:f7:f6:80:b8:5e:
         e4:80:2f:ed:34:c8:bf:68:45:c1:f7:3c:63:1f:94:df:6a:02:
         36:48:97:1e:cc:de:7b:e2:56:14:76:ad:95:64:33:1f:c2:de:
         c6:14:ab:21:9d:5a:f7:9a:e3:0e:0b:3d:c6:5c:07:10:77:3f:
         5f:95:c8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org