Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3139362e3133322e302f32322d3234203d3e203238333433.roa
File:                     3136382e3139362e3133322e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          8Wor2XCwvkrWDanOX1Id8Q8wsDk+IQqRNlZ/eXkwfog=
Subject key identifier:   7E:CF:87:DE:4B:35:AC:B2:AA:C8:7D:A6:18:36:6C:61:6C:65:48:68
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       28C20B83F03F94816CC2B57C1DF70AD2567116BE
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3139362e3133322e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:09 +0000
ROA not before:           Thu 30 Dec 2021 18:17:09 +0000
ROA not after:            Thu 29 Dec 2022 18:22:09 +0000
asID:                     28343
IP address blocks:        168.196.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c2:0b:83:f0:3f:94:81:6c:c2:b5:7c:1d:f7:0a:d2:56:71:16:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:09 2021 GMT
            Not After : Dec 29 18:22:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:24:3e:74:08:32:fe:43:b1:4e:98:82:22:
                    11:ba:02:bc:ae:87:94:7e:b5:ab:a9:2a:ed:4e:57:
                    f4:64:9e:22:c5:b2:f3:fe:d0:99:1e:52:2b:87:68:
                    ba:3a:ef:cb:bd:85:8b:df:ae:0a:c7:a3:e8:5f:7c:
                    d4:d0:89:89:77:a2:54:06:72:f0:11:8f:e7:56:d5:
                    92:63:f4:bb:b5:36:ee:66:9a:25:56:e7:fa:e2:f1:
                    cb:a4:1d:1c:71:5b:90:a9:77:d3:fe:38:39:bd:e1:
                    a1:65:d5:52:fe:57:14:2f:c4:ef:0d:81:11:a4:4d:
                    ac:1f:f9:ae:83:42:d4:c3:05:06:ad:bd:17:22:8c:
                    a9:99:99:90:57:b2:93:88:0d:bf:fa:ff:1e:45:43:
                    be:71:67:4d:d0:74:75:d1:40:55:84:74:c1:cd:ef:
                    e8:b1:9a:3e:aa:72:03:52:61:d0:47:95:86:46:64:
                    53:06:68:c6:c5:0b:cf:a2:b6:10:28:b8:be:fc:33:
                    d7:ac:fd:0a:f2:e7:01:77:e9:e5:1f:38:fd:d7:a2:
                    de:46:e5:c2:ff:4b:76:2d:20:aa:4f:b0:07:10:c8:
                    d3:04:36:0c:42:f7:7b:cb:f4:5c:9e:ed:00:8c:05:
                    74:af:02:e6:cb:fb:05:6e:e5:e3:d3:5f:cc:81:a4:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:87:DE:4B:35:AC:B2:AA:C8:7D:A6:18:36:6C:61:6C:65:48:68
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3139362e3133322e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:32:48:40:3c:a5:b8:68:60:c0:6c:3d:27:d6:ff:05:65:09:
         c9:e2:48:01:fd:dd:b5:fe:d9:ab:df:4f:cc:f3:55:ef:69:be:
         ce:92:c9:f6:66:b1:1f:b6:81:ab:a3:c5:27:14:1e:dc:22:20:
         78:fb:7c:b7:1a:9b:b7:ae:3e:7a:ac:5d:d7:69:a9:4d:93:55:
         3a:fa:44:40:48:8b:eb:74:13:52:03:0d:41:4b:90:e8:d2:18:
         50:46:e5:ee:7b:da:f6:5c:79:3a:f3:e4:1d:97:aa:8c:6b:9a:
         50:94:e3:f2:1f:7d:33:2c:2d:ce:85:28:89:da:24:36:c8:81:
         c6:3b:b7:16:84:54:2c:cd:56:37:35:ca:71:3e:a3:49:8f:c6:
         8d:c2:40:ac:1d:c0:7e:15:af:0d:ec:40:41:3f:4f:fd:2d:2c:
         b5:10:7d:8f:a0:46:37:45:64:59:b1:0e:f4:fd:91:a2:7c:f3:
         2e:6e:62:1f:02:08:c0:4c:fd:10:bf:7b:23:6c:ee:b9:a1:c3:
         b4:b8:55:8e:2a:09:f4:30:55:6b:56:92:57:15:ef:3c:82:b9:
         7b:34:87:dc:3a:3d:74:43:ca:03:d5:89:4a:89:dc:63:6c:f3:
         ac:53:df:9e:84:c0:7e:29:97:80:34:2a:d4:2d:cf:46:c6:03:
         cb:55:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org