Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e38322e3234302e302f32322d3234203d3e203238333433.roa
File:                     3137302e38322e3234302e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          iF6MnRAWUofQlkBx+49+7JKtCZTLyy1RgG7MUCaQUHA=
Subject key identifier:   81:E8:24:72:14:F7:79:DE:99:CB:38:6F:D4:6B:E9:16:D4:51:43:E0
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       3032E4F5AFB92FD4461705D058C7DE416A40D176
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e38322e3234302e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:08 +0000
ROA not before:           Thu 30 Dec 2021 18:17:08 +0000
ROA not after:            Thu 29 Dec 2022 18:22:08 +0000
asID:                     28343
IP address blocks:        170.82.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:32:e4:f5:af:b9:2f:d4:46:17:05:d0:58:c7:de:41:6a:40:d1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:08 2021 GMT
            Not After : Dec 29 18:22:08 2022 GMT
        Subject: CN=3082010A0282010100BA68C1DF1CED8A166B2F8163B203D29D5B4FD7FC46A4F229CE7D778D2720CC3DFCA82C5336C2897A3E5E094774794556280611BD23BEA661464FA2C63C9C5834E726AA1CD39CBE1452B45EF51F6398B6BC5988B9FE987ECBCEF2060162F6D53B99D574E4EBAC503692625AD1C5078C8E363121843A330D63EFB3FFB5CCE04E5E58A9CC72C365EA0E272607630545625E2345962C38739F0031F2A884A0CCC5F2673DBFB6BC88EBD9AA466A54D05A6B6CF9CAAC5D4C9E8E26424B0EF8B21410B77A62A92F6EBE2F9BE3BF36B979511B3A9CC2CF653072764C1823A59FE1D98823936616ABAE706C7504EA76CA4536C4D69609F3337AF74AE62B9D14AF0F7BE4370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:c1:df:1c:ed:8a:16:6b:2f:81:63:b2:03:
                    d2:9d:5b:4f:d7:fc:46:a4:f2:29:ce:7d:77:8d:27:
                    20:cc:3d:fc:a8:2c:53:36:c2:89:7a:3e:5e:09:47:
                    74:79:45:56:28:06:11:bd:23:be:a6:61:46:4f:a2:
                    c6:3c:9c:58:34:e7:26:aa:1c:d3:9c:be:14:52:b4:
                    5e:f5:1f:63:98:b6:bc:59:88:b9:fe:98:7e:cb:ce:
                    f2:06:01:62:f6:d5:3b:99:d5:74:e4:eb:ac:50:36:
                    92:62:5a:d1:c5:07:8c:8e:36:31:21:84:3a:33:0d:
                    63:ef:b3:ff:b5:cc:e0:4e:5e:58:a9:cc:72:c3:65:
                    ea:0e:27:26:07:63:05:45:62:5e:23:45:96:2c:38:
                    73:9f:00:31:f2:a8:84:a0:cc:c5:f2:67:3d:bf:b6:
                    bc:88:eb:d9:aa:46:6a:54:d0:5a:6b:6c:f9:ca:ac:
                    5d:4c:9e:8e:26:42:4b:0e:f8:b2:14:10:b7:7a:62:
                    a9:2f:6e:be:2f:9b:e3:bf:36:b9:79:51:1b:3a:9c:
                    c2:cf:65:30:72:76:4c:18:23:a5:9f:e1:d9:88:23:
                    93:66:16:ab:ae:70:6c:75:04:ea:76:ca:45:36:c4:
                    d6:96:09:f3:33:7a:f7:4a:e6:2b:9d:14:af:0f:7b:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E8:24:72:14:F7:79:DE:99:CB:38:6F:D4:6B:E9:16:D4:51:43:E0
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137302e38322e3234302e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:c7:fa:5f:08:13:1e:73:1d:5d:69:55:c3:eb:e1:ce:88:9e:
         70:59:0b:ea:5f:fd:8a:3e:af:5f:af:83:27:ac:07:6e:fc:bb:
         b0:91:3d:e3:46:bb:e9:aa:80:6c:ec:26:fd:c2:70:06:77:bc:
         54:59:14:6e:c9:0d:52:71:42:03:bb:9d:58:ee:61:e5:85:88:
         52:b7:84:98:1f:31:a9:9b:1b:dc:1b:5b:07:24:4f:33:4b:92:
         1d:62:8e:b6:c0:cd:fd:be:0a:8e:cc:1c:de:78:98:ca:c9:6d:
         9d:52:fb:18:c2:61:3d:39:4c:97:6b:69:91:3c:d3:a4:f8:a0:
         2c:3f:39:05:99:a9:85:a2:9e:dc:5a:67:48:d1:a1:65:47:f5:
         c2:7c:0f:b1:48:c7:1a:36:a5:3b:1a:51:82:50:e5:02:cc:ee:
         cf:4a:7c:a4:b1:46:2a:b5:7b:e5:a4:40:22:c9:9d:6e:db:d0:
         2b:85:86:78:f6:34:49:76:39:6f:07:a1:2d:c2:f5:91:6e:06:
         e5:76:92:d6:bc:bc:83:68:0b:43:24:5c:5e:12:9e:57:1f:a9:
         e6:83:cf:92:6a:9d:10:62:f8:cc:2c:b7:c4:f5:e5:54:1b:c9:
         16:c2:c4:cc:58:a4:51:4b:84:32:c0:b2:fd:0d:8c:dd:2b:a1:
         3a:ae:1e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org