Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3130312e39362e302f31392d3234203d3e203238333433.roa
File:                     3137372e3130312e39362e302f31392d3234203d3e203238333433.roa (raw, json)
Hash identifier:          R18TF0sSFR0EfzxR9Q5lpl9Q0bacLOef0so80Gb3SUs=
Subject key identifier:   A4:65:1D:7D:8A:72:EB:C0:37:9E:03:92:30:A2:86:A2:B6:E8:74:B1
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       6D47E28387D6183E66CC9C0C335F2B66331D404C
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3130312e39362e302f31392d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:13 +0000
ROA not before:           Thu 30 Dec 2021 18:17:13 +0000
ROA not after:            Thu 29 Dec 2022 18:22:13 +0000
asID:                     28343
IP address blocks:        177.101.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:47:e2:83:87:d6:18:3e:66:cc:9c:0c:33:5f:2b:66:33:1d:40:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:13 2021 GMT
            Not After : Dec 29 18:22:13 2022 GMT
        Subject: CN=3082010A0282010100D9E819231E0C2787B5A851883373CBEE8D8C0A07F3B9A825FB76FAECF1DEF7384BA6DDB0AC73B48416FD63260F49B55B494B1FE1C2B542F0340F0915E85A76079B841FC8CE63CBE4928212F947FAD0A0CDE52FE02452EE83235B0BE40148F4A5F6286BC176582CEFC542366D8E56D47003B5542937419A017B4155A5993D7A5BD86F96A3FDF81B2BA04FE6B8BCA1FD32FD7FE06ED6C21DEB9665DE1AA3064DBAD6993050311E9D7587A34C9916112B06EA7839EFA245DA7B68196D56BA4FD3A5511D466B633611FBFA746F724C7C9C9B38704A1F2A9224C5801886E508C8AFD2D476F3D0581E4D32460644A452DBC6CC2C81FBA32D32D9E42CD41DBC2AD244250203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:19:23:1e:0c:27:87:b5:a8:51:88:33:73:
                    cb:ee:8d:8c:0a:07:f3:b9:a8:25:fb:76:fa:ec:f1:
                    de:f7:38:4b:a6:dd:b0:ac:73:b4:84:16:fd:63:26:
                    0f:49:b5:5b:49:4b:1f:e1:c2:b5:42:f0:34:0f:09:
                    15:e8:5a:76:07:9b:84:1f:c8:ce:63:cb:e4:92:82:
                    12:f9:47:fa:d0:a0:cd:e5:2f:e0:24:52:ee:83:23:
                    5b:0b:e4:01:48:f4:a5:f6:28:6b:c1:76:58:2c:ef:
                    c5:42:36:6d:8e:56:d4:70:03:b5:54:29:37:41:9a:
                    01:7b:41:55:a5:99:3d:7a:5b:d8:6f:96:a3:fd:f8:
                    1b:2b:a0:4f:e6:b8:bc:a1:fd:32:fd:7f:e0:6e:d6:
                    c2:1d:eb:96:65:de:1a:a3:06:4d:ba:d6:99:30:50:
                    31:1e:9d:75:87:a3:4c:99:16:11:2b:06:ea:78:39:
                    ef:a2:45:da:7b:68:19:6d:56:ba:4f:d3:a5:51:1d:
                    46:6b:63:36:11:fb:fa:74:6f:72:4c:7c:9c:9b:38:
                    70:4a:1f:2a:92:24:c5:80:18:86:e5:08:c8:af:d2:
                    d4:76:f3:d0:58:1e:4d:32:46:06:44:a4:52:db:c6:
                    cc:2c:81:fb:a3:2d:32:d9:e4:2c:d4:1d:bc:2a:d2:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:65:1D:7D:8A:72:EB:C0:37:9E:03:92:30:A2:86:A2:B6:E8:74:B1
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3130312e39362e302f31392d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:e5:91:28:45:b8:95:c3:cd:34:42:bb:65:9f:df:3d:31:
         4d:99:7a:5e:97:10:a5:34:95:0a:39:8e:14:3f:33:df:e5:ff:
         67:17:62:95:a6:32:20:be:8e:06:10:e2:77:6f:97:23:88:03:
         8e:2e:3e:fe:1b:8a:49:ff:27:a9:a8:e9:fe:e8:e0:05:62:a2:
         b4:b3:17:14:bc:b3:47:0f:fa:05:97:86:84:50:bf:95:44:18:
         b4:f4:a4:56:3e:f5:54:41:34:5f:99:69:14:cf:c3:7b:06:b4:
         3c:d8:67:d5:e2:4b:a4:31:db:68:d9:4e:54:05:9a:5f:d7:65:
         79:6c:00:e6:a7:dc:20:81:3f:73:28:ed:19:f3:dc:99:65:e8:
         1b:c7:c9:d7:88:52:26:15:ee:41:b6:15:47:19:18:f3:f8:f7:
         d8:71:9b:20:b1:a9:f7:86:d9:36:b0:f0:2a:2b:fe:14:84:9f:
         9f:ba:cf:46:33:87:79:b4:d4:54:3c:ad:0e:2a:c2:23:3d:7e:
         8a:8e:e1:bf:ab:ef:65:30:e9:06:41:d1:6d:4d:26:ad:cc:a6:
         20:e6:a4:85:6d:b7:0e:e4:e1:0a:ca:dc:3d:47:9e:a5:54:d5:
         67:ce:e6:88:99:e0:fd:c6:91:25:dc:d8:cb:be:b3:a6:e6:88:
         84:ef:14:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org