Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3233322e32342e302f32322d3234203d3e203238333433.roa
File:                     3136382e3233322e32342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          5W8ZTRKyHdxd+SbI22q/JyCjTQTq9vDQepeGzHn6eLs=
Subject key identifier:   CB:B0:26:22:53:D6:52:9D:7C:BA:EC:07:7A:C8:48:2C:86:34:CD:47
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       6D488CFE3BAD85F256B1820292025F426A549AAA
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3233322e32342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:11 +0000
ROA not before:           Thu 30 Dec 2021 18:17:11 +0000
ROA not after:            Thu 29 Dec 2022 18:22:11 +0000
asID:                     28343
IP address blocks:        168.232.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:48:8c:fe:3b:ad:85:f2:56:b1:82:02:92:02:5f:42:6a:54:9a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:11 2021 GMT
            Not After : Dec 29 18:22:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:c6:cf:07:0c:e0:7e:5a:d2:34:18:34:22:
                    8a:d7:e0:88:26:4e:3d:e3:f9:6f:b7:b8:d7:cf:4d:
                    88:6f:fe:aa:9e:c5:df:86:59:01:8c:53:84:6d:fd:
                    78:89:1f:71:a5:aa:ec:4f:ac:7b:86:95:04:be:86:
                    23:47:7b:f7:bc:fa:44:0e:79:09:88:5c:a5:c4:ba:
                    6d:e3:f7:24:b9:10:07:87:74:7a:c8:1d:95:e7:e3:
                    06:57:c0:f5:76:41:fb:95:ff:ac:5c:5c:73:6c:a0:
                    77:c6:0a:1a:94:5e:2e:89:86:8a:1f:e6:b9:a3:6a:
                    2b:6d:51:68:a8:d4:f8:fc:a5:91:ef:1a:74:60:16:
                    5e:e1:7e:10:0a:ce:84:8c:cc:c2:d8:72:83:b1:e3:
                    15:f8:e7:fb:8d:86:0c:30:1f:2c:70:57:82:76:db:
                    ef:3e:b8:5f:09:47:25:1d:46:d1:28:54:37:2a:95:
                    4f:08:e7:97:aa:d8:13:5e:78:c1:93:19:36:14:ad:
                    a8:cc:30:fe:6b:99:ef:40:d2:82:7d:1c:6d:eb:5b:
                    64:f1:ce:be:9c:1b:3a:5e:76:43:5d:d7:66:81:ec:
                    e4:81:79:fb:a8:7d:7b:0f:2c:c5:89:47:8e:ec:66:
                    21:e3:91:9f:b8:be:a1:b8:84:61:90:66:a9:49:fc:
                    62:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B0:26:22:53:D6:52:9D:7C:BA:EC:07:7A:C8:48:2C:86:34:CD:47
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3136382e3233322e32342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:1b:5e:ea:5f:47:f9:14:1f:42:1b:7e:78:58:86:e8:59:3e:
         c7:d4:5b:39:54:d4:94:6c:7a:8e:51:12:3f:8e:30:60:11:f4:
         63:d3:0a:6d:d2:04:4f:66:28:0b:0d:89:8d:57:08:38:09:20:
         2e:8f:71:7c:f2:8c:cd:57:0d:5b:fc:3d:56:b8:0c:f3:61:51:
         6e:e6:f7:d5:f1:c6:5b:5a:a4:c5:77:8e:1b:af:c0:5c:4e:e4:
         f8:82:c7:8f:28:91:c4:fc:2c:f0:e0:77:c7:1e:b4:4b:33:8a:
         18:2f:7d:c0:df:c1:9f:18:a3:83:af:6d:ab:e2:5d:a3:51:16:
         ca:a6:e1:f0:9a:91:f3:24:5d:62:b1:da:e5:78:74:d3:41:b1:
         53:4a:f1:97:f8:71:9c:2a:5c:8e:cb:ac:48:51:08:56:f8:36:
         52:ec:17:69:7b:7a:25:c1:8a:dd:fd:5a:45:56:ba:f0:7c:96:
         9c:cf:61:19:6f:a3:63:35:ff:3e:f0:45:4c:91:ea:e4:ef:86:
         c3:a2:8d:27:9f:43:8f:c7:23:bb:8f:d8:c6:b6:07:45:59:9e:
         36:8a:c3:74:a7:b4:14:b6:88:1e:f6:71:c0:55:24:06:6f:a7:
         2f:f2:ae:21:bb:2d:22:62:cb:df:09:87:53:fa:aa:b3:25:f8:
         87:8f:c1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org