Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e38322e3137362e302f32322d3234203d3e203238333433.roa
File:                     3137302e38322e3137362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          JLQ8juMi+sNUUDb/BNR/9aDmfy3h03rOpj5xC26KVjk=
Subject key identifier:   F8:FB:92:27:93:45:9C:D6:FC:39:0B:29:13:2D:E6:FD:56:86:76:F0
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       11BC13816C9CE5FA20DAED1B0B5537AB6BD8269D
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e38322e3137362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:08 +0000
ROA not before:           Thu 30 Dec 2021 18:17:08 +0000
ROA not after:            Thu 29 Dec 2022 18:22:08 +0000
asID:                     28343
IP address blocks:        170.82.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:bc:13:81:6c:9c:e5:fa:20:da:ed:1b:0b:55:37:ab:6b:d8:26:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:08 2021 GMT
            Not After : Dec 29 18:22:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:1f:40:ff:ad:69:a0:74:28:3c:b2:2b:5c:
                    e6:39:78:66:23:5c:be:04:55:ab:6f:5d:b5:c5:77:
                    01:ba:f7:38:46:17:fb:55:5e:65:1a:fd:91:63:5d:
                    01:0d:02:23:2a:a4:0c:63:90:9d:5b:a5:01:9f:d2:
                    a6:4d:2c:ef:e9:c4:2b:fc:70:00:bc:f1:5a:dc:8a:
                    ac:39:20:73:e5:b4:53:a7:77:1b:b7:a7:77:d8:91:
                    a7:2a:9e:b4:43:cf:1f:c3:86:09:3c:bd:8b:08:ab:
                    52:fd:e2:e1:15:87:7a:92:d1:e8:de:e1:65:df:6c:
                    3f:86:1a:f6:29:0a:e3:9f:9e:45:5c:2c:7f:00:10:
                    ae:d7:26:ab:a3:d1:6f:a2:a1:d4:14:76:31:b3:61:
                    f0:87:34:94:37:d9:b5:f6:40:47:e2:78:19:8f:54:
                    2c:b2:ed:a5:3f:f7:31:4b:11:44:89:fc:9d:b8:22:
                    dc:06:e6:cf:a7:c8:5b:6b:4d:3d:fa:4b:17:ba:15:
                    2e:65:a0:a4:c1:9d:cb:cb:96:09:74:96:a5:9a:52:
                    b1:79:e3:89:ee:b2:03:14:28:a8:d3:0f:3a:0a:26:
                    12:c3:c4:a4:87:b2:06:cb:0e:8a:b3:fc:ed:60:1d:
                    af:ae:19:d2:30:28:ae:18:51:ff:72:eb:3c:eb:b0:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FB:92:27:93:45:9C:D6:FC:39:0B:29:13:2D:E6:FD:56:86:76:F0
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e38322e3137362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:12:ae:6f:c8:ee:e8:62:80:f3:3c:f5:54:91:f1:d1:84:56:
         f2:dc:c3:bb:22:79:d0:94:52:25:4c:39:41:7e:3d:5b:5b:ee:
         b8:32:84:7d:8e:3d:d9:57:5e:ab:0f:78:d5:c7:2a:c7:26:10:
         ce:bf:51:83:a5:21:d5:76:48:c1:cc:c1:47:0a:e5:88:ed:e1:
         a9:87:58:73:f9:75:ea:b3:a5:52:05:e0:90:f2:f2:86:28:74:
         b2:a9:c2:14:97:fc:26:ff:1b:82:95:0e:91:72:71:6f:cb:6f:
         7a:9f:de:c3:ef:6e:d8:a3:8d:4e:ef:71:30:0d:26:f0:6b:b1:
         1f:bb:98:e6:eb:49:78:b7:fb:30:58:01:85:5c:25:e4:49:50:
         3c:25:11:49:6c:c8:02:b2:14:e6:87:38:36:57:4c:79:15:32:
         41:d0:78:d6:d8:57:17:a4:1a:a8:f7:d6:8d:35:cb:32:19:75:
         00:52:aa:c1:8d:66:50:07:8a:7d:36:70:cf:a6:3b:2f:4e:8c:
         5e:ad:7c:80:18:ef:78:ff:83:10:58:fa:85:be:70:45:4a:62:
         43:be:e1:78:ea:02:d7:13:84:81:ec:73:9d:27:9d:6d:1b:df:
         a7:b5:84:66:5b:72:89:65:01:fe:22:2e:02:7d:46:b8:78:cd:
         dc:41:ab:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org