Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e3230382e3139362e302f32322d3234203d3e203238333433.roa
File:                     3134332e3230382e3139362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          3xUD104NlphEKJlYhA5CatjGpalmD+h0e4iyFAWHMy0=
Subject key identifier:   50:FC:83:9E:7F:1F:61:F1:B7:1C:90:04:C5:22:5A:8A:BE:F1:B0:88
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       4DF5502F555547E82ED00E46F39485D2F90F436F
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e3230382e3139362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:16 +0000
ROA not before:           Thu 30 Dec 2021 18:17:16 +0000
ROA not after:            Thu 29 Dec 2022 18:22:16 +0000
asID:                     28343
IP address blocks:        143.208.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f5:50:2f:55:55:47:e8:2e:d0:0e:46:f3:94:85:d2:f9:0f:43:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:16 2021 GMT
            Not After : Dec 29 18:22:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:89:1a:2f:fd:22:b1:78:c6:33:75:0d:68:
                    a7:22:08:a2:3e:0b:9d:7d:37:86:71:b1:0d:70:92:
                    75:bf:b4:8b:40:fc:71:0a:cc:2b:ac:8d:7f:af:bb:
                    f6:98:23:b6:87:73:34:38:6e:ac:9e:3d:4b:3a:02:
                    f3:3e:03:55:5d:2f:af:6f:79:a3:c6:55:4d:de:87:
                    57:89:dd:7c:18:5f:48:90:0e:9b:7b:ca:b8:4d:cb:
                    fd:f4:7b:30:8b:32:f8:e7:77:40:81:4f:3e:65:60:
                    35:02:e7:d3:04:eb:d5:69:e1:46:ac:16:12:4f:f3:
                    2f:b9:7c:5a:73:37:5c:73:65:06:ed:84:4e:f6:dc:
                    36:d5:90:f3:da:6c:66:e8:4f:ee:e3:64:84:68:54:
                    36:68:dd:cf:88:87:6d:f1:7b:24:c4:a3:3f:9d:d0:
                    05:60:de:b4:62:ca:04:be:c3:f9:0a:bc:16:7c:d9:
                    b4:08:e6:92:2f:01:cb:36:67:1f:f6:0c:44:6c:bb:
                    70:71:c6:85:df:12:b0:65:0c:6a:3e:44:fb:d2:d2:
                    58:9d:7c:a6:34:90:b0:8b:2e:2a:97:c8:2c:8e:43:
                    94:af:67:5b:47:19:a8:79:e2:ee:94:e0:0a:2d:a1:
                    b4:07:4b:7a:e1:23:fa:b0:20:c4:6e:a6:0a:6a:b3:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FC:83:9E:7F:1F:61:F1:B7:1C:90:04:C5:22:5A:8A:BE:F1:B0:88
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e3230382e3139362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:94:82:ea:ff:3f:a3:98:5a:63:88:67:27:17:11:f5:ab:8f:
         d6:53:00:6d:56:54:cc:8c:e0:8a:37:f5:7b:88:0f:31:3e:24:
         87:c4:21:4c:9c:f9:ca:c9:ff:c8:5d:12:71:87:14:00:11:70:
         0a:57:74:3e:e7:ca:c2:d5:5e:19:be:fe:75:5a:5b:bd:97:32:
         f5:ed:b3:de:cb:69:a3:44:f3:6d:46:cd:dd:48:fe:bb:d6:83:
         eb:c3:12:a4:11:1b:48:65:98:b4:12:83:b0:d3:38:89:85:bc:
         4d:d4:fc:19:af:62:53:fc:1d:bf:7d:ba:43:35:7c:29:bc:b5:
         80:b4:3e:fc:a3:d6:38:3b:4c:33:89:56:a9:dc:3e:7d:e2:a9:
         50:7a:cb:10:bb:44:15:0c:dd:9a:a4:9e:82:72:83:ce:00:cd:
         66:01:f5:15:0d:0b:17:05:99:dd:70:27:31:8c:e6:16:1c:89:
         04:5f:63:b2:01:ce:46:18:e5:51:4d:a6:69:af:41:34:aa:e4:
         52:fc:75:f7:31:b3:77:a9:ce:a2:e1:fe:30:ec:2e:03:cb:d7:
         48:1f:fd:26:3c:23:c3:a6:fa:55:db:b2:2e:50:7f:ea:19:a9:
         f8:3c:12:ec:1b:b3:0c:65:ff:45:14:13:f9:6e:82:39:59:db:
         04:85:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org