Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e3233382e3231362e302f32322d3234203d3e203238333433.roa
File:                     3137302e3233382e3231362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          1df8TxW9OWxgZ0dhOPdQRDAk2iTJ/wHGsp1ezQ7dcWk=
Subject key identifier:   A1:A5:B4:A4:3D:FF:EF:E8:C2:10:C0:05:14:C2:1A:ED:95:C3:78:0F
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       4DE85CC6EB1FB65FF66E1645B1A0D8ED3E7DB032
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e3233382e3231362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:14 +0000
ROA not before:           Thu 30 Dec 2021 18:17:14 +0000
ROA not after:            Thu 29 Dec 2022 18:22:14 +0000
asID:                     28343
IP address blocks:        170.238.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e8:5c:c6:eb:1f:b6:5f:f6:6e:16:45:b1:a0:d8:ed:3e:7d:b0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:14 2021 GMT
            Not After : Dec 29 18:22:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:d7:63:06:e8:b0:43:f1:6c:a4:e5:9a:bc:
                    41:f2:91:ae:d5:81:b9:28:37:b3:b1:05:ae:df:f5:
                    c2:82:38:60:23:a6:77:9c:dc:7f:43:40:7e:de:cd:
                    53:cd:87:e8:a7:2e:02:47:55:be:3e:58:fe:0c:c8:
                    f4:6e:82:ab:c4:a1:4d:87:7f:10:ce:08:4f:91:ef:
                    35:f6:87:f0:79:67:2f:f2:47:b1:13:48:af:a3:d4:
                    e9:59:b7:23:7e:24:0e:8c:44:36:21:f7:4c:1f:e1:
                    2f:95:af:08:e2:53:51:79:6d:cc:18:06:a1:54:f6:
                    45:9e:54:93:b6:2f:35:21:fc:ba:d0:28:2a:ac:c8:
                    dd:8e:5c:af:f2:62:c6:3a:ac:8b:1a:b4:c7:d6:1b:
                    7d:a2:d4:2f:da:a9:c5:06:d9:38:74:64:ba:3a:08:
                    c7:f1:09:e5:e3:e7:0d:3c:21:e6:60:66:e8:02:cd:
                    4d:b3:d3:13:0c:0f:ba:f9:90:3f:b6:33:a9:91:1a:
                    06:43:45:de:fb:c2:aa:26:95:04:d6:06:00:22:07:
                    2f:e5:71:f7:9e:3b:a0:83:36:5e:25:a3:8f:af:dc:
                    9d:6d:3d:af:35:1f:74:8d:fa:54:da:ce:07:e2:ed:
                    b8:07:28:6e:3f:4d:c6:20:94:c6:76:f8:e6:5a:72:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A5:B4:A4:3D:FF:EF:E8:C2:10:C0:05:14:C2:1A:ED:95:C3:78:0F
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e3233382e3231362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:85:21:ce:a0:44:7d:0f:bc:7a:f2:6b:a8:d0:7c:4b:dc:46:
         aa:89:07:76:48:c0:a1:9a:2c:bd:4a:0c:7c:0a:ab:ef:bb:82:
         e4:44:c4:e7:6f:ec:48:39:45:17:6c:46:22:04:d5:a5:de:d4:
         1b:83:1e:2d:76:e8:f9:ae:1b:fe:6f:f7:ca:0d:a9:48:4e:0d:
         a5:b5:18:d4:f7:6e:a7:52:ce:37:a8:2d:b8:5f:e8:14:4c:7d:
         93:e6:3f:d0:04:3b:0b:9f:0c:02:2c:d1:a0:64:56:76:26:de:
         65:50:be:18:d0:a0:c6:95:54:b9:8c:c1:17:85:c2:a3:9e:f7:
         c9:43:b8:ea:2d:4b:db:09:df:14:de:ee:5b:57:0c:db:be:68:
         dd:df:9e:b9:10:fb:9d:25:65:7d:c3:8b:6e:87:4e:0c:2d:ee:
         22:21:d3:1e:a9:d2:09:7b:3a:ce:62:df:27:1c:48:1e:04:83:
         8c:71:a2:d7:6d:f1:ee:5e:10:77:ae:00:02:71:53:b7:d8:6e:
         26:85:a9:ef:8c:9d:70:a7:30:92:b4:7e:ce:e9:2e:0c:9d:7a:
         fc:3d:52:52:4c:94:55:eb:e4:7c:97:94:55:6c:0b:5d:0f:f8:
         d0:11:c9:4a:41:b3:f2:2c:6b:f4:6a:0d:bb:28:05:39:dd:8e:
         ff:eb:59:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org