Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3139342e33362e302f32322d3234203d3e203238333433.roa
File:                     3136382e3139342e33362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          mGZ8cACOJ5cBhEdYFwvbHZsKKzVRyPkJiSbkP99h6TE=
Subject key identifier:   3F:46:32:95:AE:87:3B:6C:28:39:0F:0D:53:7F:B4:3B:56:CB:2F:D4
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       6155068589123C99529795A0EEBA1002E9B0B39E
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3139342e33362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:12 +0000
ROA not before:           Thu 30 Dec 2021 18:17:12 +0000
ROA not after:            Thu 29 Dec 2022 18:22:12 +0000
asID:                     28343
IP address blocks:        168.194.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:55:06:85:89:12:3c:99:52:97:95:a0:ee:ba:10:02:e9:b0:b3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:12 2021 GMT
            Not After : Dec 29 18:22:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:df:7c:c4:69:51:6b:f3:3b:95:00:f1:a6:
                    16:53:59:83:d9:16:44:52:fd:c6:14:c6:ea:e0:02:
                    62:24:a1:15:8d:2b:be:10:57:ce:51:08:92:0d:65:
                    5a:1b:12:82:6c:08:29:8e:4e:a5:7e:36:76:c7:2e:
                    76:28:1a:90:40:3c:98:08:df:0f:84:d3:71:ad:b9:
                    2a:47:e1:b0:76:f8:5a:68:13:bb:e7:ec:bc:83:04:
                    50:f2:d7:d9:98:a2:f3:e9:fe:e8:b2:6a:68:48:08:
                    e8:6c:31:de:69:2c:6c:d9:ad:11:02:0a:6d:37:8f:
                    d6:9d:20:f7:c9:6b:66:f0:eb:2b:4c:80:73:1f:97:
                    b3:fb:39:62:90:66:2c:b3:e6:69:92:16:1a:bc:3b:
                    17:95:a2:99:6a:88:e8:ce:02:c1:f6:75:4f:70:6e:
                    77:e7:fe:98:16:91:b3:a6:3e:27:b8:72:3f:2f:0e:
                    62:63:e6:83:e6:51:8b:86:a7:ba:ae:20:5b:91:c0:
                    db:a6:cc:18:54:d9:83:77:e1:41:d2:41:ae:80:dc:
                    c2:70:d3:0c:14:b0:0f:c2:04:d8:78:67:8e:e6:ea:
                    ef:d9:e5:cc:d8:14:36:00:e7:21:14:e2:b8:91:49:
                    ba:8b:32:ce:37:98:61:67:e1:7d:48:e6:00:db:7b:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:32:95:AE:87:3B:6C:28:39:0F:0D:53:7F:B4:3B:56:CB:2F:D4
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3139342e33362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:aa:4b:24:05:02:34:6c:d3:de:6b:b3:ef:bb:7f:7f:55:47:
         37:75:8b:50:40:6f:ac:89:eb:1d:4f:c0:86:48:e6:d4:e2:ee:
         c5:92:91:57:5d:9d:81:76:b9:f9:f3:35:dd:9e:d1:39:24:36:
         6d:bd:7a:10:5d:72:b6:5b:82:ce:f0:56:17:b0:41:a6:7d:fa:
         01:82:1e:03:a7:b5:8d:2b:4b:5b:7b:7b:0d:62:d2:55:5b:fa:
         cd:a2:bf:e2:48:80:4f:b7:33:18:f9:be:71:fa:3f:7d:90:d2:
         bd:98:2c:f2:37:0d:75:b3:7f:3b:5c:f7:37:34:f7:07:e5:97:
         86:18:0f:bf:5f:0c:02:2c:07:31:d0:e6:9e:70:ec:5f:f4:11:
         02:57:f6:77:72:da:56:43:db:57:a5:ee:6b:0d:14:81:4c:49:
         cb:c8:59:dd:d8:c9:45:a8:0b:f2:c6:0e:ed:e5:70:77:f3:a0:
         69:a6:24:68:86:17:28:2e:7e:e2:0b:6f:5b:f9:2d:80:cc:f1:
         bf:8e:76:f5:d9:88:21:15:aa:0e:4f:d1:ff:d7:37:31:96:09:
         fc:63:70:73:f0:a5:3e:05:73:69:66:32:97:08:e6:6b:2d:b7:
         51:3a:59:f3:69:03:9f:88:b2:19:3a:42:e3:98:32:7d:cf:68:
         05:8f:7d:a3
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUYVUGhYkSPJlSl5Wg7roQAumws54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTJaFw0yMjEyMjkxODIyMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0IyRURGN0NDNDY5NTE2QkYz
M0I5NTAwRjFBNjE2NTM1OTgzRDkxNjQ0NTJGREM2MTRDNkVBRTAwMjYyMjRBMTE1
OEQyQkJFMTA1N0NFNTEwODkyMEQ2NTVBMUIxMjgyNkMwODI5OEU0RUE1N0UzNjc2
QzcyRTc2MjgxQTkwNDAzQzk4MDhERjBGODREMzcxQURCOTJBNDdFMUIwNzZGODVB
NjgxM0JCRTdFQ0JDODMwNDUwRjJEN0Q5OThBMkYzRTlGRUU4QjI2QTY4NDgwOEU4
NkMzMURFNjkyQzZDRDlBRDExMDIwQTZEMzc4RkQ2OUQyMEY3Qzk2QjY2RjBFQjJC
NEM4MDczMUY5N0IzRkIzOTYyOTA2NjJDQjNFNjY5OTIxNjFBQkMzQjE3OTVBMjk5
NkE4OEU4Q0UwMkMxRjY3NTRGNzA2RTc3RTdGRTk4MTY5MUIzQTYzRTI3Qjg3MjNG
MkYwRTYyNjNFNjgzRTY1MThCODZBN0JBQUUyMDVCOTFDMERCQTZDQzE4NTREOTgz
NzdFMTQxRDI0MUFFODBEQ0MyNzBEMzBDMTRCMDBGQzIwNEQ4Nzg2NzhFRTZFQUVG
RDlFNUNDRDgxNDM2MDBFNzIxMTRFMkI4OTE0OUJBOEIzMkNFMzc5ODYxNjdFMTdE
NDhFNjAwREI3QkE5RjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyy7ffMRpUWvzO5UA8aYWU1mD2RZEUv3GFMbq4AJiJKEVjSu+EFfO
UQiSDWVaGxKCbAgpjk6lfjZ2xy52KBqQQDyYCN8PhNNxrbkqR+GwdvhaaBO75+y8
gwRQ8tfZmKLz6f7osmpoSAjobDHeaSxs2a0RAgptN4/WnSD3yWtm8OsrTIBzH5ez
+zlikGYss+ZpkhYavDsXlaKZaojozgLB9nVPcG535/6YFpGzpj4nuHI/Lw5iY+aD
5lGLhqe6riBbkcDbpswYVNmDd+FB0kGugNzCcNMMFLAPwgTYeGeO5urv2eXM2BQ2
AOchFOK4kUm6izLON5hhZ+F9SOYA23up9wIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FD9GMpWuhztsKDkPDVN/tDtWyy/UMB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMxMzYzODJlMzEzOTM0MmUzMzM2
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjC
JDANBgkqhkiG9w0BAQsFAAOCAQEAwqpLJAUCNGzT3muz77t/f1VHN3WLUEBvrInr
HU/Ahkjm1OLuxZKRV12dgXa5+fM13Z7ROSQ2bb16EF1ytluCzvBWF7BBpn36AYIe
A6e1jStLW3t7DWLSVVv6zaK/4kiAT7czGPm+cfo/fZDSvZgs8jcNdbN/O1z3NzT3
B+WXhhgPv18MAiwHMdDmnnDsX/QRAlf2d3LaVkPbV6Xuaw0UgUxJy8hZ3djJRagL
8sYO7eVwd/OgaaYkaIYXKC5+4gtvW/ktgMzxv4529dmIIRWqDk/R/9c3MZYJ/GNw
c/ClPgVzaWYylwjmay23UTpZ82kDn4iyGTpC45gyfc9oBY99ow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org