Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e302e3231322e302f32322d3234203d3e203238333433.roa
File:                     3134332e302e3231322e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          /bXZZgys+tUBSDUXkBVk2VolQRRH2uPzGxBa/eRatMs=
Subject key identifier:   25:F5:12:AC:48:BD:14:10:BD:78:29:6C:ED:44:8B:F5:A3:01:55:E5
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       4E6CC69AA5FF9DC2B346C67C31CA18F1255761D9
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e302e3231322e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:16 +0000
ROA not before:           Thu 30 Dec 2021 18:17:16 +0000
ROA not after:            Thu 29 Dec 2022 18:22:16 +0000
asID:                     28343
IP address blocks:        143.0.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6c:c6:9a:a5:ff:9d:c2:b3:46:c6:7c:31:ca:18:f1:25:57:61:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:16 2021 GMT
            Not After : Dec 29 18:22:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:5b:55:24:3a:85:e7:ad:4d:b3:33:78:b3:
                    68:6c:70:7c:da:cd:77:01:a1:c0:84:91:7b:d6:4d:
                    bf:64:89:1b:49:0e:57:5b:1b:28:48:4b:a2:c7:4a:
                    63:0e:e1:62:1b:23:e0:dc:be:97:b9:2b:42:6b:6f:
                    1a:fc:12:ae:b3:10:99:24:3f:ee:10:96:dd:89:59:
                    c9:41:68:b0:a6:6f:97:e0:c1:07:b3:13:c9:be:67:
                    38:e9:7a:13:0f:d6:45:5c:3d:88:39:16:fe:7a:b7:
                    f6:12:33:00:13:ad:df:f4:dc:bf:35:60:85:d0:f8:
                    08:09:cb:d7:f6:8c:20:de:7c:fc:26:88:5f:e6:e1:
                    a2:7d:bc:cc:0f:22:b2:53:30:d3:d9:05:fd:d2:97:
                    30:42:01:8b:3e:e0:29:2a:36:b7:84:fb:cf:25:c9:
                    1d:7d:29:62:1e:2c:d7:1f:3d:08:68:b8:b9:8f:ec:
                    a3:47:07:f4:dc:bb:4b:0a:65:77:bc:c1:c7:27:5f:
                    da:05:a7:db:a6:94:c6:cb:f3:75:90:ba:97:af:4e:
                    de:ca:3b:2d:0f:89:e7:4a:37:35:69:58:61:ab:8a:
                    80:9f:db:65:22:ce:7e:ec:c8:1d:10:a4:1c:79:24:
                    c5:25:9d:9a:b9:90:0d:73:46:b6:66:96:b8:a2:f1:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F5:12:AC:48:BD:14:10:BD:78:29:6C:ED:44:8B:F5:A3:01:55:E5
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e302e3231322e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:d4:13:0c:f1:be:a3:22:21:df:ea:cb:4c:3b:88:7a:2a:3b:
         c5:88:e5:78:9a:1c:32:9b:b0:87:6e:22:97:e7:a3:b2:be:c5:
         17:ac:f1:c1:81:fd:a9:af:21:66:a0:f0:19:92:36:ac:fa:cd:
         d7:a7:fd:72:e6:31:a4:e5:ee:a2:fe:da:7f:93:da:80:67:9b:
         1d:d9:65:44:03:f6:a9:7f:0a:b7:10:b7:36:3b:73:0c:7c:50:
         c7:2a:6e:3e:c8:b6:dd:c2:1d:d2:60:63:a0:57:4f:62:7d:c2:
         c0:fc:31:be:09:bf:ee:b6:27:66:3c:e7:2f:f7:4a:ce:a7:52:
         99:fd:32:b0:b6:f5:42:21:52:cc:44:f2:20:8f:8f:24:87:5d:
         20:9b:00:a6:5b:a2:2b:d8:b6:88:2d:d6:f0:2d:03:61:ab:83:
         5f:fb:7b:9e:11:92:e9:71:cd:db:bc:c1:49:2f:15:9c:67:7f:
         4e:9d:28:5f:12:f2:17:9f:1f:fc:b0:0d:eb:e2:0e:91:c0:96:
         17:10:3b:be:05:5c:9a:71:8b:45:0f:aa:86:2e:62:ba:57:c0:
         6c:76:43:cf:d4:0c:32:b1:7a:f2:2b:97:cb:5f:80:cc:ac:73:
         61:b3:35:bf:c3:0b:5c:1d:d3:77:87:77:2c:5b:81:7e:34:f6:
         aa:09:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org