Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e3235352e3232302e302f32322d3234203d3e203238333433.roa
File:                     3134332e3235352e3232302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          QDkDTJ3/mKcMP56ESlfDm7V2yMhvAuuGPIlce913hYk=
Subject key identifier:   C0:CA:4B:BC:18:62:18:82:6E:A0:6A:EC:C7:2F:27:A9:3C:E9:0C:63
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       71585FE3685E491FA9C356AC268D3FEB8A22814F
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e3235352e3232302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:07 +0000
ROA not before:           Thu 30 Dec 2021 18:17:07 +0000
ROA not after:            Thu 29 Dec 2022 18:22:07 +0000
asID:                     28343
IP address blocks:        143.255.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:58:5f:e3:68:5e:49:1f:a9:c3:56:ac:26:8d:3f:eb:8a:22:81:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:07 2021 GMT
            Not After : Dec 29 18:22:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:1b:d6:fb:83:d0:b1:8f:2c:39:a4:ab:99:
                    97:7c:7f:ec:21:a4:8a:43:55:5f:8b:89:f9:b6:41:
                    8c:1d:9e:60:26:1a:d4:b1:a2:50:38:4e:21:40:db:
                    02:93:91:ad:be:0f:c5:eb:7d:f1:89:8d:f3:24:2d:
                    06:4a:b3:ac:bb:a5:f9:cb:d5:3b:cc:49:27:32:b6:
                    02:74:71:8a:4f:a9:76:1a:23:f5:4a:9e:46:c7:d0:
                    17:88:65:54:31:f9:41:d3:91:1a:35:2d:05:8d:0a:
                    c8:ff:89:d8:b0:1d:7a:05:05:0f:9c:97:58:c3:91:
                    de:95:4c:c2:78:27:15:a6:a4:a4:66:54:1d:61:cf:
                    69:1a:5a:ce:c7:f3:e7:51:8d:b6:71:1a:f6:8f:5b:
                    49:21:72:02:70:34:04:b3:77:b5:8f:9a:5a:bb:19:
                    e2:46:20:a3:13:c9:42:a7:8c:f9:50:d9:94:16:bc:
                    50:d0:6c:5d:6e:8e:21:61:10:5f:37:30:49:69:62:
                    ab:da:f9:3c:94:9c:e6:2e:eb:72:65:ed:99:60:56:
                    df:f7:62:19:e6:47:c3:b6:20:69:d5:95:70:a3:a2:
                    d6:60:9b:1f:9e:f5:7d:af:f0:13:2f:e7:e1:33:2b:
                    03:0f:32:ad:56:bb:67:f2:a0:d8:c0:34:75:37:31:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CA:4B:BC:18:62:18:82:6E:A0:6A:EC:C7:2F:27:A9:3C:E9:0C:63
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3134332e3235352e3232302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:ff:7e:97:cc:ee:09:1a:78:fe:01:6d:f4:32:61:28:b1:25:
         cd:ad:82:b4:3e:77:09:87:60:5d:43:29:7b:d4:79:e7:b1:09:
         e1:96:fc:38:9c:25:7a:5e:31:a0:97:03:7d:7f:9a:e7:55:7f:
         b2:02:c0:60:44:3d:77:fa:b5:ba:62:08:08:09:dd:93:a4:b1:
         85:87:da:0f:3b:58:e7:7b:cc:b7:96:0f:56:b1:2d:7a:4e:c5:
         ea:84:ef:46:df:4c:a4:01:eb:02:9e:5a:a8:4f:5e:35:c3:d9:
         a9:44:fd:c5:9a:cc:ea:24:40:9e:7d:2a:7c:a0:72:5d:0d:96:
         74:85:1b:46:b4:2a:5b:33:94:1f:3b:26:17:07:f6:c3:d4:05:
         06:84:49:65:f9:d6:e5:bd:9f:bc:62:e3:5f:1d:06:0e:1f:da:
         ac:3e:09:a1:1c:95:9e:17:19:88:e4:6a:42:ec:6f:ee:b0:59:
         74:83:fd:51:b5:23:ca:58:d7:4d:c8:fb:2d:19:31:67:78:44:
         4d:46:3e:07:d5:f2:64:e9:33:8a:9b:15:46:27:c2:cf:80:16:
         6b:f2:b3:30:34:e3:07:f3:14:5c:24:4a:01:88:34:23:b6:2f:
         e2:e3:de:36:6c:27:91:b2:c3:77:39:4c:86:07:93:84:ac:d1:
         36:34:10:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org