Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136372e3235302e3137362e302f32322d3234203d3e203238333433.roa
File:                     3136372e3235302e3137362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          9lwOJq6sZ3cB3IyyJf+ZyyPz9wfPyJ1BgqhpFj7VWHs=
Subject key identifier:   D7:BA:22:F4:2A:E0:67:83:5C:2F:D3:D3:58:EB:8D:A6:DA:8A:55:AB
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       61F0463237F843DFE12F1CA196C607ED20F74C9F
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136372e3235302e3137362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:09 +0000
ROA not before:           Thu 30 Dec 2021 18:17:09 +0000
ROA not after:            Thu 29 Dec 2022 18:22:09 +0000
asID:                     28343
IP address blocks:        167.250.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f0:46:32:37:f8:43:df:e1:2f:1c:a1:96:c6:07:ed:20:f7:4c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:09 2021 GMT
            Not After : Dec 29 18:22:09 2022 GMT
        Subject: CN=3082010A0282010100E4A6AC9AF92A3E8A30A2958C0A141E8BDFA2FD14EE0515FC719C55F7059DB1336CA431FB46DA6427833D425C8332439A3B0292B4D7F694231CFC2E310E7E39F97FE0C371AEA227D902495FC03256AEBA10136B284924431C2F2945511238A8D0A4DF680A8D3B7E068531130D04A75F757229F18473809C47409E248D65ED6A75371B8E9C632ECB624B11EABB70BFE57534588252A167AE6398CE2BF9064D0D45D2810E7FE3890A181466D3A097033F0246DDFC3A643D6C1BE2F98D711C1622441E7D2171ACBF49F684FA75AAF6A2A9AAC52B75E900FCBE9962CA8434189E2AE39D8DA65CF75CD3150082D013D6DE563B52BEF061969AA040273F04FB2E086A2F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a6:ac:9a:f9:2a:3e:8a:30:a2:95:8c:0a:14:
                    1e:8b:df:a2:fd:14:ee:05:15:fc:71:9c:55:f7:05:
                    9d:b1:33:6c:a4:31:fb:46:da:64:27:83:3d:42:5c:
                    83:32:43:9a:3b:02:92:b4:d7:f6:94:23:1c:fc:2e:
                    31:0e:7e:39:f9:7f:e0:c3:71:ae:a2:27:d9:02:49:
                    5f:c0:32:56:ae:ba:10:13:6b:28:49:24:43:1c:2f:
                    29:45:51:12:38:a8:d0:a4:df:68:0a:8d:3b:7e:06:
                    85:31:13:0d:04:a7:5f:75:72:29:f1:84:73:80:9c:
                    47:40:9e:24:8d:65:ed:6a:75:37:1b:8e:9c:63:2e:
                    cb:62:4b:11:ea:bb:70:bf:e5:75:34:58:82:52:a1:
                    67:ae:63:98:ce:2b:f9:06:4d:0d:45:d2:81:0e:7f:
                    e3:89:0a:18:14:66:d3:a0:97:03:3f:02:46:dd:fc:
                    3a:64:3d:6c:1b:e2:f9:8d:71:1c:16:22:44:1e:7d:
                    21:71:ac:bf:49:f6:84:fa:75:aa:f6:a2:a9:aa:c5:
                    2b:75:e9:00:fc:be:99:62:ca:84:34:18:9e:2a:e3:
                    9d:8d:a6:5c:f7:5c:d3:15:00:82:d0:13:d6:de:56:
                    3b:52:be:f0:61:96:9a:a0:40:27:3f:04:fb:2e:08:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BA:22:F4:2A:E0:67:83:5C:2F:D3:D3:58:EB:8D:A6:DA:8A:55:AB
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136372e3235302e3137362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:bf:22:1e:d5:81:85:27:8a:e8:86:3b:08:76:bc:c8:02:a4:
         d1:0e:ca:b8:f9:4d:f5:26:0c:5d:5e:72:b5:45:3a:f9:be:ed:
         ee:14:2c:ce:16:0b:cc:98:ed:e2:47:ea:3a:e7:b4:3c:0d:15:
         2a:fe:09:4c:ae:11:dd:02:c0:bc:90:6f:e5:af:dd:9c:67:0f:
         08:22:43:87:c6:8b:ac:63:6d:f7:d3:9e:f9:b4:eb:09:8b:1d:
         f0:14:ce:00:13:b8:00:24:be:b1:83:e2:5d:b3:4b:3f:c2:0c:
         f3:0b:31:15:74:4a:1b:83:04:b1:36:6e:4e:3f:a8:20:b6:91:
         4f:ed:88:4e:fa:6f:52:1a:23:fb:87:f4:7e:45:1d:2b:7d:2c:
         f6:53:46:35:21:29:6f:da:bb:1b:39:c3:6d:07:63:18:34:ba:
         d1:89:20:4e:a3:72:73:37:25:ba:41:43:6d:5e:fe:75:fb:a0:
         22:53:b8:da:d8:f7:e8:52:2d:05:90:f2:67:c2:01:f5:38:46:
         7f:72:1e:a8:76:64:95:11:7c:aa:47:bd:d1:4f:8b:86:88:e1:
         6c:5d:01:f1:e3:16:b7:a6:4f:bb:40:5e:8b:7f:16:18:3c:90:
         7a:5c:cc:31:23:94:42:72:e7:67:6d:07:5f:f2:57:19:96:dc:
         a4:a8:6f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org