Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3130342e302e302f32302d3234203d3e203238333433.roa
File:                     3137372e3130342e302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          RP0Tt322IC6cGT5UqjqJr1s3uiU8UscuRHhj/cFzZpQ=
Subject key identifier:   B1:BC:A6:2D:5C:97:6F:CD:B9:6C:46:7A:01:B2:1F:3E:B1:CE:1F:CC
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       0E2F2FEBACC8E15ED33056305FBF061022FABD24
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3130342e302e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:08 +0000
ROA not before:           Thu 30 Dec 2021 18:17:08 +0000
ROA not after:            Thu 29 Dec 2022 18:22:08 +0000
asID:                     28343
IP address blocks:        177.104.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2f:2f:eb:ac:c8:e1:5e:d3:30:56:30:5f:bf:06:10:22:fa:bd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:08 2021 GMT
            Not After : Dec 29 18:22:08 2022 GMT
        Subject: CN=3082010A0282010100D7198A526FBE29A499C3A85B87779AEAE1F99E69E6535AA72373F5DF54BE6DC3D40AF4B8B285EC5BD846DE32B25598D4F7326A3DC518F5D03F09B68CA2B3D53FFA7D13C6B96FD433A1F03DF042D3CA535BA7096E899A85B4478A121EDFFA4B24D91E29494607EFF473A6F18D257D3E1D25F83400C714A2D95439D7905B8181A9DD585B4116CF28C261BF99D06554AADCAE7D23AF551D238F4F5DEAFA3C59479954EBEECF1F2312AF7F03240E29E18C29F5C324CA25DAF9A637E139AEBBDAFCE2EC59A8F7F5EDE5020A5F97E6056DD405274FBCEA5E1C1E55A1F7470A3A793BA98FC29806B8F7FC17D0C74D81BBE59F1FB8A7D63DF658954F370CE879124ABCBD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:8a:52:6f:be:29:a4:99:c3:a8:5b:87:77:
                    9a:ea:e1:f9:9e:69:e6:53:5a:a7:23:73:f5:df:54:
                    be:6d:c3:d4:0a:f4:b8:b2:85:ec:5b:d8:46:de:32:
                    b2:55:98:d4:f7:32:6a:3d:c5:18:f5:d0:3f:09:b6:
                    8c:a2:b3:d5:3f:fa:7d:13:c6:b9:6f:d4:33:a1:f0:
                    3d:f0:42:d3:ca:53:5b:a7:09:6e:89:9a:85:b4:47:
                    8a:12:1e:df:fa:4b:24:d9:1e:29:49:46:07:ef:f4:
                    73:a6:f1:8d:25:7d:3e:1d:25:f8:34:00:c7:14:a2:
                    d9:54:39:d7:90:5b:81:81:a9:dd:58:5b:41:16:cf:
                    28:c2:61:bf:99:d0:65:54:aa:dc:ae:7d:23:af:55:
                    1d:23:8f:4f:5d:ea:fa:3c:59:47:99:54:eb:ee:cf:
                    1f:23:12:af:7f:03:24:0e:29:e1:8c:29:f5:c3:24:
                    ca:25:da:f9:a6:37:e1:39:ae:bb:da:fc:e2:ec:59:
                    a8:f7:f5:ed:e5:02:0a:5f:97:e6:05:6d:d4:05:27:
                    4f:bc:ea:5e:1c:1e:55:a1:f7:47:0a:3a:79:3b:a9:
                    8f:c2:98:06:b8:f7:fc:17:d0:c7:4d:81:bb:e5:9f:
                    1f:b8:a7:d6:3d:f6:58:95:4f:37:0c:e8:79:12:4a:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BC:A6:2D:5C:97:6F:CD:B9:6C:46:7A:01:B2:1F:3E:B1:CE:1F:CC
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3130342e302e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:ba:69:7e:bf:f2:f1:5e:f8:cb:29:2b:53:c5:d9:16:4f:24:
         b5:63:90:04:ef:80:96:3d:8d:47:81:6f:f4:c2:5a:04:58:69:
         ad:22:4e:d3:14:7d:c7:39:db:d9:58:4f:e9:f2:54:a0:b5:0a:
         3f:97:50:83:f5:29:f9:d0:d5:dd:09:ba:94:84:73:a7:17:cf:
         94:1c:fa:8c:77:ca:1f:7e:a4:fb:bb:93:cd:0c:09:73:38:b5:
         be:a3:78:d7:63:17:c1:4a:d6:7c:bb:3c:29:53:80:78:d8:6f:
         95:70:1b:7f:99:c7:e6:84:a9:30:b5:c3:06:78:fa:35:1e:6f:
         cd:7c:c8:dc:93:d0:78:8b:6c:6c:39:6c:03:8e:50:7c:27:fd:
         f6:c5:50:9c:14:e1:22:38:b9:49:4b:10:2b:da:bd:49:4a:7e:
         0c:9a:c6:17:1d:9e:32:e1:0c:05:9c:e9:5d:c6:5a:98:92:aa:
         67:75:59:d1:0b:ab:51:62:08:40:d1:7d:ba:4d:76:1e:55:92:
         2a:16:2c:0b:55:87:e3:99:ac:2f:2d:6d:79:ef:c9:fa:c7:20:
         20:76:ca:1b:15:c8:be:3a:1c:16:6f:37:e6:74:a0:13:7c:8f:
         24:72:9d:81:af:c1:03:01:53:ca:b3:32:ff:b0:4e:2b:ed:5b:
         26:b8:fe:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org