Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e3230382e39362e302f32322d3234203d3e203238333433.roa
File:                     3134332e3230382e39362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          rRI7iLk/FoJZRlcLXZ9znEynjX6TrGzMTLJrjvdnleU=
Subject key identifier:   AA:34:0C:8A:7D:4C:4A:61:05:38:FE:F2:53:27:34:3A:E7:F1:6D:DE
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       0846414BB8E131A92CE9E3C1FF7E0AA809128DBB
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e3230382e39362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:10 +0000
ROA not before:           Thu 30 Dec 2021 18:17:10 +0000
ROA not after:            Thu 29 Dec 2022 18:22:10 +0000
asID:                     28343
IP address blocks:        143.208.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:46:41:4b:b8:e1:31:a9:2c:e9:e3:c1:ff:7e:0a:a8:09:12:8d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:10 2021 GMT
            Not After : Dec 29 18:22:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e9:f2:31:06:d6:78:d6:b8:a0:5d:78:d7:30:
                    2f:d4:7d:73:1f:7d:15:14:f6:a1:e3:df:09:a6:e2:
                    3e:a0:62:81:20:59:54:fc:7e:2c:6d:3f:2e:78:22:
                    55:99:74:d3:dd:01:1b:4b:93:93:b4:6a:fe:28:a3:
                    d6:e7:8d:e6:c6:20:0b:e7:92:46:1c:ad:7e:33:ea:
                    c5:03:f8:13:19:71:b0:e7:07:a2:d5:5c:5e:b8:14:
                    ea:85:9b:5f:5d:31:0c:3c:7f:7c:bd:bb:c7:22:fc:
                    05:23:07:f6:6a:e8:a9:0f:c8:70:a1:1d:59:89:72:
                    32:34:e8:03:1a:4b:61:e0:96:02:b5:25:bc:c8:54:
                    b3:8e:9a:d7:f9:70:98:8b:05:5b:46:9f:da:69:75:
                    4d:67:ee:92:95:6f:20:7d:73:52:d1:00:ea:d3:a2:
                    cd:31:9f:65:99:b1:b9:26:1b:62:d4:0e:fc:7f:68:
                    0e:90:e3:69:f9:77:68:18:c1:52:24:56:40:bc:57:
                    ba:58:06:58:6b:14:2d:6e:9f:4a:24:03:8b:bf:66:
                    08:47:31:d4:b5:c7:f7:48:c4:f8:8b:8c:e0:0d:b6:
                    3e:c9:97:b2:58:62:a3:38:b7:c6:f8:61:99:d9:de:
                    4c:05:c0:ef:d2:27:75:7f:d6:b6:ab:79:36:fd:10:
                    c4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:34:0C:8A:7D:4C:4A:61:05:38:FE:F2:53:27:34:3A:E7:F1:6D:DE
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e3230382e39362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:38:90:78:a1:bc:1f:c2:d6:44:7b:93:b3:ea:47:0f:0c:41:
         08:f2:b5:91:0b:08:89:20:b1:c8:f9:0e:fc:f6:90:29:dc:72:
         da:5b:2b:36:97:08:97:c9:f4:10:be:ba:60:ee:88:3a:82:12:
         4a:a8:e3:36:91:d6:7c:70:92:36:8d:47:7a:83:b0:bd:b1:4d:
         a2:bf:f8:45:08:99:04:c3:2d:87:b3:f3:57:9e:17:9b:7a:3f:
         63:08:6a:b9:38:d8:3d:d7:ae:b1:ed:65:77:84:8e:4f:06:d1:
         85:be:65:0b:c1:2d:ac:70:e5:ee:c2:c4:41:ea:35:10:9f:35:
         14:5b:2c:af:07:a2:07:1d:00:c7:17:4b:26:47:83:85:cb:d7:
         85:4f:d8:6b:8d:89:b9:ce:82:ef:05:f4:dc:f8:5e:e0:2a:de:
         5b:9c:f4:55:9d:68:32:f6:3e:bd:ee:a1:69:2c:94:e8:2b:44:
         c5:68:7f:1a:44:f5:73:f1:95:59:0f:d6:19:b4:d2:89:18:5f:
         97:95:79:56:c8:7e:01:b3:fc:0b:ae:60:f4:07:4a:cb:72:97:
         79:fd:cb:da:88:4b:b2:3c:ed:3d:28:a0:64:88:1f:e3:06:e2:
         a8:5c:d3:b0:45:0a:92:c9:95:dd:40:88:ad:c9:30:ab:21:ab:
         d6:9f:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org