Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3233322e3233322e302f32322d3234203d3e203238333433.roa
File:                     3136382e3233322e3233322e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          vOQvEuKPLpCFA3OB4Jx4iniPrLvL1ydGvoj6YW12zpM=
Subject key identifier:   1D:97:75:17:E5:9C:72:FE:37:5A:39:6E:62:01:06:13:85:23:80:74
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       08B62B4486DFBD53CA4095988D1D71238ECDEFDB
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3233322e3233322e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:16 +0000
ROA not before:           Thu 30 Dec 2021 18:17:16 +0000
ROA not after:            Thu 29 Dec 2022 18:22:16 +0000
asID:                     28343
IP address blocks:        168.232.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b6:2b:44:86:df:bd:53:ca:40:95:98:8d:1d:71:23:8e:cd:ef:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:16 2021 GMT
            Not After : Dec 29 18:22:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:36:1f:00:71:8b:68:c7:56:7c:6e:c6:45:
                    19:dc:67:9d:f7:e3:71:19:4f:ad:e2:04:63:fc:84:
                    d2:81:76:79:ac:8d:c1:af:37:c3:5e:e2:75:30:39:
                    e4:10:b4:cf:2c:01:c7:ac:50:39:f7:a0:5e:49:44:
                    08:63:9b:bd:ce:79:70:e3:bc:72:1d:fe:eb:42:d8:
                    92:a0:66:69:a7:9c:da:b5:00:80:09:c1:20:4a:fa:
                    4e:fe:08:07:b3:de:7a:f6:d5:50:e7:f9:fd:9c:fa:
                    61:78:1b:f2:74:92:9b:e2:26:4c:4c:4e:0b:a5:44:
                    32:ec:69:ed:47:9b:7e:eb:fe:93:e2:cc:bb:d3:a8:
                    e2:a9:a6:7e:5f:c1:57:cd:f2:29:3e:1f:7d:68:62:
                    26:56:0b:26:31:d5:4d:02:fc:2c:16:26:c1:45:da:
                    54:d1:2a:b5:9a:8e:99:4d:34:99:6c:7f:4a:6e:b8:
                    10:25:a4:f0:07:0d:e5:56:de:aa:e3:0d:e5:f1:ba:
                    00:9f:b6:1f:09:ce:be:34:7c:51:ca:77:75:38:33:
                    95:c4:aa:1d:2e:f3:50:ac:cc:54:d0:c4:cf:fe:27:
                    31:d2:1e:64:fc:58:3f:06:e9:78:fc:c2:f8:a3:96:
                    d5:32:84:97:00:5a:42:d0:53:3f:ca:1d:09:56:2a:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:97:75:17:E5:9C:72:FE:37:5A:39:6E:62:01:06:13:85:23:80:74
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3233322e3233322e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:d3:cd:54:ef:aa:0a:dd:7a:81:a6:21:11:0c:23:bb:2c:f5:
         cd:9d:ab:c5:13:3d:f5:9c:17:ab:77:47:ee:e7:d8:10:f1:e0:
         de:f5:b7:16:19:0b:5d:01:52:5d:19:88:37:cd:8e:5c:c9:10:
         db:9a:b2:84:ca:40:a6:67:d1:f5:b8:08:83:63:e6:73:74:a6:
         a0:6e:45:21:3f:5b:d3:be:c0:d7:21:25:16:55:b3:6d:0e:11:
         c0:59:56:ac:75:c4:69:ef:c3:b0:a9:fe:23:a2:21:b9:cc:fe:
         69:97:f4:60:94:5f:82:28:af:b2:6d:1d:c0:12:07:0c:2e:73:
         ab:aa:a0:53:0d:32:2b:7a:68:48:32:9b:dd:60:73:a4:0b:53:
         65:ee:f8:86:71:33:78:7f:bc:fa:91:ae:47:10:e2:28:3d:59:
         76:4f:65:bc:70:70:3c:ab:4b:68:23:b0:70:f7:32:28:97:df:
         4a:61:73:55:7f:ce:14:63:02:7d:d3:8d:49:94:e0:dd:e2:b7:
         a1:08:33:1a:b1:49:8e:cd:1e:1c:9d:c1:4c:74:36:c9:39:d6:
         2a:e8:1b:bf:91:9e:db:98:46:74:79:52:bb:a3:1f:c3:fd:a0:
         a1:6e:e5:3e:d8:60:60:0d:92:4a:49:c5:5f:8e:07:13:4c:f0:
         99:fb:b9:f2
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUCLYrRIbfvVPKQJWYjR1xI47N79swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTZaFw0yMjEyMjkxODIyMTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg2MTM2MUYwMDcxOEI2OEM3
NTY3QzZFQzY0NTE5REM2NzlERjdFMzcxMTk0RkFERTIwNDYzRkM4NEQyODE3Njc5
QUM4REMxQUYzN0MzNUVFMjc1MzAzOUU0MTBCNENGMkMwMUM3QUM1MDM5RjdBMDVF
NDk0NDA4NjM5QkJEQ0U3OTcwRTNCQzcyMURGRUVCNDJEODkyQTA2NjY5QTc5Q0RB
QjUwMDgwMDlDMTIwNEFGQTRFRkUwODA3QjNERTdBRjZENTUwRTdGOUZEOUNGQTYx
NzgxQkYyNzQ5MjlCRTIyNjRDNEM0RTBCQTU0NDMyRUM2OUVENDc5QjdFRUJGRTkz
RTJDQ0JCRDNBOEUyQTlBNjdFNUZDMTU3Q0RGMjI5M0UxRjdENjg2MjI2NTYwQjI2
MzFENTREMDJGQzJDMTYyNkMxNDVEQTU0RDEyQUI1OUE4RTk5NEQzNDk5NkM3RjRB
NkVCODEwMjVBNEYwMDcwREU1NTZERUFBRTMwREU1RjFCQTAwOUZCNjFGMDlDRUJF
MzQ3QzUxQ0E3Nzc1MzgzMzk1QzRBQTFEMkVGMzUwQUNDQzU0RDBDNENGRkUyNzMx
RDIxRTY0RkM1ODNGMDZFOTc4RkNDMkY4QTM5NkQ1MzI4NDk3MDA1QTQyRDA1MzNG
Q0ExRDA5NTYyQTEyMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyGE2HwBxi2jHVnxuxkUZ3Ged9+NxGU+t4gRj/ITSgXZ5rI3BrzfD
XuJ1MDnkELTPLAHHrFA596BeSUQIY5u9znlw47xyHf7rQtiSoGZpp5zatQCACcEg
SvpO/ggHs9569tVQ5/n9nPpheBvydJKb4iZMTE4LpUQy7GntR5t+6/6T4sy706ji
qaZ+X8FXzfIpPh99aGImVgsmMdVNAvwsFibBRdpU0Sq1mo6ZTTSZbH9KbrgQJaTw
Bw3lVt6q4w3l8boAn7YfCc6+NHxRynd1ODOVxKodLvNQrMxU0MTP/icx0h5k/Fg/
Bul4/ML4o5bVMoSXAFpC0FM/yh0JVioSHwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FB2XdRflnHL+N1o5bmIBBhOFI4B0MB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMxMzYzODJlMzIzMzMyMmUzMjMz
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
qOjoMA0GCSqGSIb3DQEBCwUAA4IBAQDO081U76oK3XqBpiERDCO7LPXNnavFEz31
nBerd0fu59gQ8eDe9bcWGQtdAVJdGYg3zY5cyRDbmrKEykCmZ9H1uAiDY+ZzdKag
bkUhP1vTvsDXISUWVbNtDhHAWVasdcRp78Owqf4joiG5zP5pl/RglF+CKK+ybR3A
EgcMLnOrqqBTDTIremhIMpvdYHOkC1Nl7viGcTN4f7z6ka5HEOIoPVl2T2W8cHA8
q0toI7Bw9zIol99KYXNVf84UYwJ9041JlODd4rehCDMasUmOzR4cncFMdDbJOdYq
6Bu/kZ7bmEZ0eVK7ox/D/aChbuU+2GBgDZJKScVfjgcTTPCZ+7ny
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org