Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3132392e3130342e302f32322d3234203d3e203238333433.roa
File:                     3137372e3132392e3130342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          KidJjBhExlQ9GYkjjLaH/Uhn6pCqef0IcTjUd5PhkQQ=
Subject key identifier:   18:96:AD:1F:E7:42:DE:56:0E:1F:58:94:8E:9C:20:85:93:AC:C5:F3
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       63C86ACAFC69284A238A9E65A1BAD05AFFB854BA
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3132392e3130342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:15 +0000
ROA not before:           Thu 30 Dec 2021 18:17:15 +0000
ROA not after:            Thu 29 Dec 2022 18:22:15 +0000
asID:                     28343
IP address blocks:        177.129.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c8:6a:ca:fc:69:28:4a:23:8a:9e:65:a1:ba:d0:5a:ff:b8:54:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:15 2021 GMT
            Not After : Dec 29 18:22:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:3e:9d:12:ee:10:0d:40:6d:db:61:57:9c:
                    34:2c:78:49:b1:f5:d0:e9:3e:d1:c7:9f:79:bb:75:
                    85:48:71:e4:69:e0:f0:18:d5:98:62:30:9e:c8:a7:
                    d9:55:58:42:2f:59:c6:be:43:d0:d9:33:02:b4:16:
                    a0:92:31:53:cc:58:6b:c5:c6:10:57:40:b8:96:c8:
                    b6:80:5c:12:1e:db:ad:f2:9a:44:bc:73:af:9b:4f:
                    ac:69:e0:2f:8a:ac:14:90:42:57:a0:f9:d7:85:74:
                    b9:eb:11:47:e2:8c:e4:38:de:74:41:4e:a7:03:7d:
                    2a:b5:b2:02:89:af:c4:29:cc:3c:f2:9b:01:10:fa:
                    47:6c:41:f8:76:a6:25:18:0e:84:f4:5b:2a:60:fd:
                    95:39:fb:5e:92:38:57:e0:1b:94:e3:61:83:52:95:
                    a0:07:a9:62:5a:2e:55:bf:1d:cd:8f:5c:6e:bf:f1:
                    f0:a2:b0:c7:27:4a:c0:2d:8c:dd:3b:54:ea:d9:20:
                    9a:28:7f:25:3f:b8:4d:e1:43:d9:b2:f9:42:c2:85:
                    d7:70:74:48:39:45:a1:91:e1:7f:91:ab:b6:b3:d7:
                    59:2d:da:88:75:13:7e:ec:7b:59:f7:54:42:d2:07:
                    86:ba:69:0b:ab:cb:d6:10:b8:f0:f4:1f:15:4f:a8:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:96:AD:1F:E7:42:DE:56:0E:1F:58:94:8E:9C:20:85:93:AC:C5:F3
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3132392e3130342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:bf:09:3e:9e:88:e6:56:c0:e7:af:2b:36:9d:b9:19:f8:71:
         54:0f:8f:f6:e5:fc:97:40:94:a6:6d:ab:5a:5c:9f:6f:44:32:
         20:82:b8:44:1d:08:09:15:d6:b9:89:e0:08:b6:7d:b4:1e:fd:
         b5:2e:b5:a9:33:47:05:de:ce:65:05:8f:dd:8b:a1:45:1a:21:
         d0:4b:56:0a:9e:d2:58:90:88:7a:d8:ac:60:42:2f:aa:30:55:
         42:73:03:03:31:0a:2c:77:0f:ce:26:27:32:27:0a:81:0c:3c:
         86:6c:3a:16:64:3d:b0:ed:85:7d:0a:5f:15:bf:de:26:85:c4:
         1c:53:b0:9f:3c:62:e7:4d:81:c5:9a:80:78:a7:99:cf:47:31:
         2b:da:04:41:f7:c4:13:12:04:9f:c2:8e:89:5f:51:52:59:d1:
         69:8c:f9:53:20:15:ee:bf:c2:a9:e9:a2:30:c6:19:78:e1:d0:
         02:2a:1f:24:c9:4e:a8:94:06:8e:27:35:f7:af:60:12:1b:0c:
         26:89:e9:98:fa:06:4f:d7:27:9e:30:68:ff:05:aa:bb:7a:22:
         ab:95:dc:b7:fb:50:0c:a6:39:4e:10:2d:b4:51:35:b1:ad:07:
         1b:16:1f:6a:52:c1:f7:2c:ea:e5:18:56:de:23:ba:f2:f8:11:
         bc:a8:bb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org