Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136372e3234392e3232342e302f32322d3234203d3e203238333433.roa
File:                     3136372e3234392e3232342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          3LImKmqfPQdwIyjgZdPXFUTKEuclyZLPpayMIqAS0bQ=
Subject key identifier:   BA:E0:BE:4B:F2:FE:C0:BC:5A:29:03:74:A5:21:4B:75:32:56:00:8B
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       42980D2B3FA0B8907CC466C73F3C9F9BDDA02725
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136372e3234392e3232342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:07 +0000
ROA not before:           Thu 30 Dec 2021 18:17:07 +0000
ROA not after:            Thu 29 Dec 2022 18:22:07 +0000
asID:                     28343
IP address blocks:        167.249.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:98:0d:2b:3f:a0:b8:90:7c:c4:66:c7:3f:3c:9f:9b:dd:a0:27:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:07 2021 GMT
            Not After : Dec 29 18:22:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:2e:2e:1b:48:b8:02:13:95:7a:fa:c6:c1:
                    f9:9e:63:ca:59:47:02:f3:cc:d6:12:f7:1e:5f:c6:
                    74:18:51:ae:a2:1a:bd:be:be:95:28:b6:69:37:7d:
                    09:49:6c:35:d0:48:40:94:a5:06:0d:eb:f3:af:b7:
                    3c:c9:d5:05:64:41:d2:5c:dc:c6:d2:b8:cd:11:e9:
                    79:85:c7:62:51:86:64:cc:41:9b:b2:af:f4:cf:43:
                    34:0d:19:84:ee:95:36:f3:90:73:8f:e5:44:db:5b:
                    82:da:fb:98:e9:75:8e:db:a8:6a:e5:52:17:6a:6b:
                    91:8c:37:86:2a:b8:b1:e1:f3:f9:55:bc:78:30:64:
                    3e:d4:c0:4c:46:3b:c1:2e:27:3d:4b:73:7d:23:cc:
                    cb:91:e9:d7:fe:8a:ef:86:f1:98:d8:08:24:8b:ef:
                    b0:02:f0:62:91:0d:21:b9:9f:b2:38:f1:98:98:95:
                    d2:3c:31:03:f7:d1:08:58:2e:fc:f1:29:b0:cd:1e:
                    4f:44:43:25:b4:18:1f:6c:6d:25:8f:e4:ff:7a:b6:
                    46:7e:ab:46:a3:21:8e:aa:45:68:bf:c7:9c:96:6d:
                    53:b4:22:58:d2:91:47:cf:7a:48:67:b4:b6:1e:28:
                    cb:2c:fb:2e:40:98:5c:ee:10:cc:97:e3:39:37:90:
                    10:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E0:BE:4B:F2:FE:C0:BC:5A:29:03:74:A5:21:4B:75:32:56:00:8B
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136372e3234392e3232342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:87:29:6e:46:57:7a:1b:94:e4:64:75:66:75:27:61:17:
         6e:54:15:c1:1a:71:aa:05:dd:6a:83:b7:ca:3a:41:bd:a2:74:
         ef:b8:5f:04:33:2e:d5:96:98:57:0f:0b:a4:bb:8a:74:24:ac:
         ce:b1:b7:d3:99:86:1b:a3:01:00:9a:97:a5:21:87:46:e8:40:
         c9:b0:1b:19:79:34:56:1f:0e:8f:95:e2:ae:9d:51:c3:bb:a6:
         8f:d4:b1:9c:e8:01:a0:b2:ab:f6:9a:59:22:55:d1:0a:98:62:
         52:d4:1a:09:dd:3e:6e:c6:ae:da:46:b0:e8:96:a4:2c:8e:0b:
         cb:7c:3b:5a:7e:4b:c4:81:fd:4f:86:e9:98:73:8a:58:d6:1f:
         09:6c:e7:18:0e:a8:a5:48:f5:0b:8c:53:f1:95:d5:6b:aa:14:
         b5:43:94:0f:4a:94:60:8f:30:9e:b4:77:4e:dc:f0:50:5c:af:
         db:e2:2a:69:11:34:d0:20:db:09:c1:21:84:40:7c:b7:35:49:
         cc:ea:47:de:c8:98:97:cd:e1:e0:0d:7e:db:d0:e9:fe:58:ff:
         de:e1:c7:5c:5e:96:19:ac:cb:56:20:ab:ce:82:55:18:77:ca:
         af:43:57:d2:4b:0e:52:39:26:b3:97:f9:38:1d:47:6c:07:54:
         ca:e7:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org