Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e3233312e32342e302f32322d3234203d3e203238333433.roa
File:                     3137302e3233312e32342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          mCFldC9AbwfMEhjtyGL5L07m3d5p0YbVnXWo25YbGoQ=
Subject key identifier:   27:6F:A6:FC:06:8A:DA:9E:C2:29:0F:62:77:62:EA:7D:A2:A9:2D:D8
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       40317D55B23D27D1ADA0888C1382E02661D7A5FF
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e3233312e32342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:12 +0000
ROA not before:           Thu 30 Dec 2021 18:17:12 +0000
ROA not after:            Thu 29 Dec 2022 18:22:12 +0000
asID:                     28343
IP address blocks:        170.231.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:31:7d:55:b2:3d:27:d1:ad:a0:88:8c:13:82:e0:26:61:d7:a5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:12 2021 GMT
            Not After : Dec 29 18:22:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:ff:11:55:c9:86:c6:29:54:81:57:58:c7:
                    a6:bd:b0:b5:7c:b1:33:22:27:bd:0c:c9:f2:50:73:
                    09:bd:d6:87:e3:96:6e:da:52:39:d5:77:08:4d:87:
                    ce:41:30:80:8c:91:e9:08:9b:99:f7:43:30:88:98:
                    88:43:b9:e8:27:13:05:44:5f:e0:48:45:c3:24:f1:
                    de:0c:78:8f:ad:5f:07:01:a3:cc:11:23:31:31:80:
                    1b:8a:c4:28:a5:83:c5:0c:ee:f0:6a:28:08:f7:28:
                    bf:53:6a:d0:44:65:38:62:cd:ec:cc:e2:b1:5e:af:
                    8b:18:d1:f7:63:92:18:65:d0:41:a5:cd:f0:5c:64:
                    5e:a9:e9:d7:0a:c8:62:b1:ec:5e:30:9c:6d:6a:f7:
                    3b:4f:83:c6:18:52:d0:30:fa:8a:19:b1:28:e0:30:
                    df:0c:f8:0c:89:73:f5:a4:95:43:d3:19:fe:0c:9f:
                    be:d5:ae:b1:75:02:ef:63:1b:98:ac:93:c1:59:5f:
                    3a:b0:d8:d8:17:2f:13:b2:31:01:8d:50:a9:d7:2b:
                    f9:c0:15:a6:47:17:e8:7e:b9:58:91:3b:7c:3c:f5:
                    a7:86:39:fe:6c:9e:80:dd:bc:0b:5c:46:de:60:63:
                    58:75:8b:d8:80:14:5a:ab:ab:ab:7d:51:17:fe:c2:
                    ca:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6F:A6:FC:06:8A:DA:9E:C2:29:0F:62:77:62:EA:7D:A2:A9:2D:D8
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e3233312e32342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:d8:8c:a5:30:0f:c3:0d:5a:8a:e1:a2:e4:ba:2c:f3:7b:2b:
         0a:21:f5:b8:c1:c5:44:9f:c4:21:52:6d:3c:cb:12:e4:22:ad:
         7c:ef:30:4e:80:5b:90:f5:89:1b:19:bb:2d:28:48:29:28:8b:
         3d:c7:01:d4:e8:c6:59:31:b0:bd:35:1a:18:bc:e7:8d:10:d5:
         f8:1b:77:05:93:aa:66:a1:8c:c3:82:d4:af:8e:52:d5:5d:36:
         e4:0a:59:6b:f3:2f:21:cb:c8:5b:02:49:03:93:99:71:60:a5:
         2b:83:e7:56:0b:da:96:ba:a8:68:83:41:69:9d:56:53:90:d1:
         80:d0:84:1f:3c:eb:61:80:bb:b5:75:d1:ab:19:f7:a6:c6:d4:
         24:06:d7:ec:29:2c:44:7d:f3:ce:e8:6c:3e:09:d4:f1:49:ef:
         e7:d5:44:bd:ec:4a:7d:5c:5b:be:fe:3c:d7:65:71:5f:cb:da:
         f6:38:fa:d9:02:45:75:18:a1:b3:85:06:6a:a9:52:ab:48:03:
         51:11:2a:95:60:68:31:08:99:56:75:88:f7:7f:e1:8e:05:81:
         7d:14:3a:3a:bc:c2:d1:18:7e:b0:46:89:46:3b:da:d4:c1:a6:
         c8:ae:70:bb:55:ad:89:70:ac:18:38:5f:8d:8b:ea:bb:d1:c9:
         67:64:5c:de
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUQDF9VbI9J9GtoIiME4LgJmHXpf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTJaFw0yMjEyMjkxODIyMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE4NkZGMTE1NUM5ODZDNjI5
NTQ4MTU3NThDN0E2QkRCMEI1N0NCMTMzMjIyN0JEMENDOUYyNTA3MzA5QkRENjg3
RTM5NjZFREE1MjM5RDU3NzA4NEQ4N0NFNDEzMDgwOEM5MUU5MDg5Qjk5Rjc0MzMw
ODg5ODg4NDNCOUU4MjcxMzA1NDQ1RkUwNDg0NUMzMjRGMURFMEM3ODhGQUQ1RjA3
MDFBM0NDMTEyMzMxMzE4MDFCOEFDNDI4QTU4M0M1MENFRUYwNkEyODA4RjcyOEJG
NTM2QUQwNDQ2NTM4NjJDREVDQ0NFMkIxNUVBRjhCMThEMUY3NjM5MjE4NjVEMDQx
QTVDREYwNUM2NDVFQTlFOUQ3MEFDODYyQjFFQzVFMzA5QzZENkFGNzNCNEY4M0M2
MTg1MkQwMzBGQThBMTlCMTI4RTAzMERGMENGODBDODk3M0Y1QTQ5NTQzRDMxOUZF
MEM5RkJFRDVBRUIxNzUwMkVGNjMxQjk4QUM5M0MxNTk1RjNBQjBEOEQ4MTcyRjEz
QjIzMTAxOEQ1MEE5RDcyQkY5QzAxNUE2NDcxN0U4N0VCOTU4OTEzQjdDM0NGNUE3
ODYzOUZFNkM5RTgwRERCQzBCNUM0NkRFNjA2MzU4NzU4QkQ4ODAxNDVBQUJBQkFC
N0Q1MTE3RkVDMkNBQTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwYb/EVXJhsYpVIFXWMemvbC1fLEzIie9DMnyUHMJvdaH45Zu2lI5
1XcITYfOQTCAjJHpCJuZ90MwiJiIQ7noJxMFRF/gSEXDJPHeDHiPrV8HAaPMESMx
MYAbisQopYPFDO7waigI9yi/U2rQRGU4Ys3szOKxXq+LGNH3Y5IYZdBBpc3wXGRe
qenXCshisexeMJxtavc7T4PGGFLQMPqKGbEo4DDfDPgMiXP1pJVD0xn+DJ++1a6x
dQLvYxuYrJPBWV86sNjYFy8TsjEBjVCp1yv5wBWmRxfofrlYkTt8PPWnhjn+bJ6A
3bwLXEbeYGNYdYvYgBRaq6urfVEX/sLKqQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FCdvpvwGitqewikPYndi6n2iqS3YMB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMxMzczMDJlMzIzMzMxMmUzMjM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrn
GDANBgkqhkiG9w0BAQsFAAOCAQEAiNiMpTAPww1aiuGi5Los83srCiH1uMHFRJ/E
IVJtPMsS5CKtfO8wToBbkPWJGxm7LShIKSiLPccB1OjGWTGwvTUaGLznjRDV+Bt3
BZOqZqGMw4LUr45S1V025ApZa/MvIcvIWwJJA5OZcWClK4PnVgvalrqoaINBaZ1W
U5DRgNCEHzzrYYC7tXXRqxn3psbUJAbX7CksRH3zzuhsPgnU8Unv59VEvexKfVxb
vv4812VxX8va9jj62QJFdRihs4UGaqlSq0gDUREqlWBoMQiZVnWI93/hjgWBfRQ6
OrzC0Rh+sEaJRjva1MGmyK5wu1WtiXCsGDhfjYvqu9HJZ2Rc3g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org