Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3133302e3232342e302f32302d3234203d3e203238333433.roa
File:                     3137372e3133302e3232342e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          F1wqQ44L6TfjAyBqBX2AcbQU8tpoFknVQyTxNN020RM=
Subject key identifier:   CF:8D:D8:70:A8:7F:F4:36:F4:A4:D9:F6:E8:A0:5B:87:F2:C8:5D:0A
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       1A1B2873FC79FE32DF34F8D700C61B1A4A2466AA
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3133302e3232342e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:13 +0000
ROA not before:           Thu 30 Dec 2021 18:17:13 +0000
ROA not after:            Thu 29 Dec 2022 18:22:13 +0000
asID:                     28343
IP address blocks:        177.130.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1b:28:73:fc:79:fe:32:df:34:f8:d7:00:c6:1b:1a:4a:24:66:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:13 2021 GMT
            Not After : Dec 29 18:22:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:37:0e:29:8d:02:84:eb:74:9f:e5:74:86:
                    9e:41:91:85:10:52:ef:17:72:36:0b:cf:d3:0f:ae:
                    70:e5:68:72:75:6a:95:26:37:28:b3:43:4a:55:37:
                    f2:6b:a4:37:32:24:8c:ab:2a:0c:08:5e:7a:76:a1:
                    ed:07:13:1a:7d:a1:2e:45:57:f7:9f:33:48:12:ac:
                    1e:10:44:d2:c0:2b:cb:15:bc:4f:71:43:7a:a9:54:
                    e9:bb:47:65:1b:29:6d:39:a5:7c:be:86:bd:db:2c:
                    fd:8d:4b:a0:ab:dd:87:3b:33:ca:5f:18:27:38:b2:
                    26:f3:fa:37:2b:43:ab:1d:32:19:58:39:36:4c:fd:
                    d9:05:39:9e:9a:ab:9a:90:8f:c9:0b:d3:f9:16:33:
                    19:9f:b3:52:d2:72:41:56:fa:34:d2:c2:7e:45:4a:
                    9e:90:8a:f9:1e:10:c4:5a:66:6f:74:9d:0c:4a:a7:
                    15:21:05:e3:b1:7e:68:3a:73:9d:1e:6b:fb:04:bf:
                    63:9b:32:13:d5:d4:a7:2f:f3:c3:0f:78:2f:2b:33:
                    3b:c5:02:12:d3:a2:b2:82:12:59:dd:c0:76:cf:1e:
                    49:db:a8:f4:2a:c8:5e:26:17:ad:7f:92:ae:ee:1a:
                    46:2d:b1:4a:c0:c7:b4:63:9f:59:4b:70:df:22:1d:
                    99:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8D:D8:70:A8:7F:F4:36:F4:A4:D9:F6:E8:A0:5B:87:F2:C8:5D:0A
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3133302e3232342e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:d1:19:af:a3:60:37:97:b2:b2:a8:30:69:bd:3a:47:a4:22:
         96:ec:ea:ca:29:84:fa:bc:c3:0b:26:84:28:ef:1f:ed:c9:91:
         69:22:a4:2d:68:4f:b8:f6:50:8e:d5:64:c3:53:e3:d3:92:ed:
         ea:b1:d2:b6:cb:52:c9:fc:db:c3:d5:a8:83:d0:18:c9:23:61:
         f9:d9:71:7e:47:31:10:ca:83:15:af:c2:7d:c7:ac:43:06:6d:
         54:58:c3:af:ce:9b:2e:7b:ec:40:69:ff:bb:a7:b8:e9:1c:9e:
         c7:67:50:e3:d5:90:26:c8:4a:e5:bb:94:ef:05:3e:e0:28:a0:
         6f:a2:02:98:2c:48:5c:06:2b:73:3e:35:f0:69:30:1d:af:a4:
         23:b6:ee:03:98:3e:f1:d1:82:29:5f:7f:a0:24:36:6b:f4:d5:
         86:41:a4:55:06:3a:18:da:5b:50:7b:77:fc:de:d4:58:a5:9d:
         0d:a5:ec:ea:a4:a3:ad:30:26:fa:d4:e6:0c:5f:5a:1b:aa:28:
         aa:75:ff:c9:58:eb:e8:1e:6b:60:23:fd:16:b5:86:e7:2a:14:
         24:e8:27:37:16:f9:d5:d4:6a:cf:21:57:31:5d:fe:2e:69:14:
         44:11:34:fb:13:ac:f1:9b:92:98:cd:3a:29:91:83:05:df:19:
         20:bb:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org