Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e302e3132302e302f32322d3234203d3e203238333433.roa
File:                     3136382e302e3132302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          T2GY7ugoYahHkDP40M7YHOxEL/WbJ2VfJzICjgerz40=
Subject key identifier:   64:99:4B:C7:DA:8B:33:7E:03:BF:CD:54:3E:F6:53:9F:97:43:3F:B0
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       57B7D4C129677075B2C0C2F7335B7919F05696F9
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e302e3132302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:14 +0000
ROA not before:           Thu 30 Dec 2021 18:17:14 +0000
ROA not after:            Thu 29 Dec 2022 18:22:14 +0000
asID:                     28343
IP address blocks:        168.0.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b7:d4:c1:29:67:70:75:b2:c0:c2:f7:33:5b:79:19:f0:56:96:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:14 2021 GMT
            Not After : Dec 29 18:22:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0f:e7:3d:55:4e:8d:c3:bd:1b:fe:65:85:ad:
                    30:d1:c7:5e:87:a1:a5:ab:c1:c4:58:e7:65:83:5e:
                    45:11:d5:67:ab:b6:99:0f:c9:f4:0d:04:8e:82:a8:
                    ee:e6:0c:f4:c7:08:78:0e:26:70:af:1a:6e:ea:00:
                    e9:ea:d8:4c:35:9b:cf:86:58:f0:b9:67:5c:ab:c9:
                    37:3d:c3:b1:64:0b:e0:16:7f:5b:a6:40:f0:b0:7d:
                    6b:45:af:f2:90:fe:7f:c0:6e:e7:fd:5c:c0:d0:35:
                    1e:53:4e:ea:89:e5:df:b3:1d:4c:76:a9:7f:e1:82:
                    b7:34:26:69:0e:3c:b3:bc:a6:fe:a2:53:44:f2:0b:
                    ca:93:89:cd:8a:11:0d:1e:38:11:74:e3:77:51:10:
                    9f:d5:26:11:89:3f:93:ab:dd:8c:df:15:6f:13:63:
                    28:ea:24:49:7d:f4:b6:21:c4:8a:01:a7:70:2b:5f:
                    43:8d:7b:3e:4f:fb:2c:8a:1d:a0:33:ce:0d:9f:67:
                    08:87:91:ec:5a:a6:92:a9:e8:12:4f:bb:f6:7b:b8:
                    87:72:c1:1b:d4:60:69:bc:a2:2c:a3:d5:14:b0:0c:
                    f8:68:9d:10:ea:2c:c3:0d:f2:bf:10:fd:19:9b:d6:
                    d2:2c:cc:0a:41:fb:7b:5a:c7:cb:e4:46:6a:df:ca:
                    1e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:4B:C7:DA:8B:33:7E:03:BF:CD:54:3E:F6:53:9F:97:43:3F:B0
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e302e3132302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:72:52:6e:7a:95:97:34:ca:09:a1:19:7c:72:50:1d:29:c1:
         dd:6c:01:6b:fd:23:b8:29:e2:b9:66:09:ce:54:63:f3:f8:59:
         a1:c4:63:c5:ce:27:ea:23:24:2d:93:0f:3d:5d:ca:fd:4f:5c:
         ec:bc:f8:37:9c:ce:93:68:a6:1f:1f:1a:7b:fb:e8:b1:a6:3c:
         9a:49:f3:15:aa:28:25:d8:fc:6e:29:75:af:fa:90:fb:28:5f:
         68:51:52:b6:6e:2a:0c:74:12:78:e0:d3:18:24:dd:b8:69:e2:
         0c:97:aa:5e:ee:ed:0b:f8:ae:c6:83:a6:01:cb:f9:f3:af:23:
         b7:c3:c4:26:54:8c:e7:60:ef:a1:46:9b:b4:25:5d:b7:66:45:
         72:11:e6:dc:77:11:c6:7d:5f:a3:73:ff:a6:0c:f1:24:0d:fc:
         e7:65:9a:b0:8a:6c:07:6a:9e:56:2b:21:49:a0:5d:47:c5:2f:
         37:ec:e8:fc:6f:05:7a:96:54:9d:2e:bd:b7:49:f0:18:a1:bd:
         3e:72:8e:4e:cf:b4:a0:41:06:0d:f1:2c:62:87:6b:12:57:fe:
         44:1a:95:6c:6d:6e:57:52:01:15:a0:d7:63:89:95:73:e6:4c:
         08:85:eb:78:56:23:c5:a1:9a:d7:29:10:4e:12:fb:c5:c5:9e:
         30:80:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org