Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3133302e3234382e302f32312d3234203d3e203238333433.roa
File:                     3137372e3133302e3234382e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          lxrrR8ehBGCIosO3vKlpyECuA/s9ps+FhNBKpXzQZSU=
Subject key identifier:   90:75:75:D3:72:FD:67:E8:BC:7A:05:FB:2F:28:BC:53:94:0D:FA:B2
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       405E7381BF5E83A72EBCEAB86095D4B696F21C87
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3133302e3234382e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:13 +0000
ROA not before:           Thu 30 Dec 2021 18:17:13 +0000
ROA not after:            Thu 29 Dec 2022 18:22:13 +0000
asID:                     28343
IP address blocks:        177.130.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5e:73:81:bf:5e:83:a7:2e:bc:ea:b8:60:95:d4:b6:96:f2:1c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:13 2021 GMT
            Not After : Dec 29 18:22:13 2022 GMT
        Subject: CN=3082010A0282010100DD08B1102F38B19043193ABE5409AF1E24F5F0EEC37B79251A18B364314EF5343FC5919968C40BDA0E3B7F657E1FCBFCA67A3C9D056071C12CCB55C51746F15302F4BB32EC652D007C69F6E8B10B79F39AED6C321D7BD143D9D4A5683D566115A55386601FA2C23CBFFBE69A91FBCE6011E276C9B8E7CFE56E83332A44E6DA0AAB4C95FF1D0ACCA6FE25C88A1BCE15A2461597588C676E9D73EE8B1C3AD9A91672BB0121281690A449DEAD36515EFED29E44FE4871C11083B8D71FA39444BA7DE24BBB5E1DDC8C35B96E04B852A51F873001979EDA061CDB040E026EC1AC5411BD0B1F33530C8ADCFF551903D893191BC56F9E8A386E8333B3A9B8377EBA70CB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:08:b1:10:2f:38:b1:90:43:19:3a:be:54:09:
                    af:1e:24:f5:f0:ee:c3:7b:79:25:1a:18:b3:64:31:
                    4e:f5:34:3f:c5:91:99:68:c4:0b:da:0e:3b:7f:65:
                    7e:1f:cb:fc:a6:7a:3c:9d:05:60:71:c1:2c:cb:55:
                    c5:17:46:f1:53:02:f4:bb:32:ec:65:2d:00:7c:69:
                    f6:e8:b1:0b:79:f3:9a:ed:6c:32:1d:7b:d1:43:d9:
                    d4:a5:68:3d:56:61:15:a5:53:86:60:1f:a2:c2:3c:
                    bf:fb:e6:9a:91:fb:ce:60:11:e2:76:c9:b8:e7:cf:
                    e5:6e:83:33:2a:44:e6:da:0a:ab:4c:95:ff:1d:0a:
                    cc:a6:fe:25:c8:8a:1b:ce:15:a2:46:15:97:58:8c:
                    67:6e:9d:73:ee:8b:1c:3a:d9:a9:16:72:bb:01:21:
                    28:16:90:a4:49:de:ad:36:51:5e:fe:d2:9e:44:fe:
                    48:71:c1:10:83:b8:d7:1f:a3:94:44:ba:7d:e2:4b:
                    bb:5e:1d:dc:8c:35:b9:6e:04:b8:52:a5:1f:87:30:
                    01:97:9e:da:06:1c:db:04:0e:02:6e:c1:ac:54:11:
                    bd:0b:1f:33:53:0c:8a:dc:ff:55:19:03:d8:93:19:
                    1b:c5:6f:9e:8a:38:6e:83:33:b3:a9:b8:37:7e:ba:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:75:75:D3:72:FD:67:E8:BC:7A:05:FB:2F:28:BC:53:94:0D:FA:B2
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3133302e3234382e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:53:e6:f6:d2:1b:9c:ff:7a:ac:5f:bd:d1:56:ad:a4:23:82:
         a1:86:96:07:40:7f:95:2d:18:e1:09:a8:7a:ce:77:ea:d4:82:
         08:6a:38:8f:c7:12:56:bb:1e:45:cd:14:a0:6b:ea:26:c6:69:
         04:ab:ad:75:dc:ee:df:e6:42:f9:2a:74:dc:13:cd:35:53:c3:
         47:eb:50:da:ca:06:01:fa:8e:64:40:ca:90:33:ea:34:48:25:
         80:74:85:21:bb:a6:5c:ae:5f:71:06:da:48:98:ff:dc:bf:8f:
         0d:d9:da:bc:79:2e:5a:0d:d4:b1:f4:f4:8f:f8:86:dc:06:c5:
         fe:55:f3:ae:d0:5e:6b:ef:4d:5c:01:14:89:ca:4c:f5:ad:96:
         73:7d:20:48:50:42:53:f6:61:8b:30:62:b6:31:83:e6:c8:66:
         5d:68:0d:16:aa:d2:e9:5f:d8:c3:30:11:f3:dd:f4:95:29:0e:
         d2:2e:b0:3b:eb:94:08:f6:7c:a7:e9:0c:3b:ae:47:d6:59:63:
         dc:9d:e9:e8:77:eb:36:b5:75:a4:62:56:39:ff:6a:3e:9d:db:
         f7:fa:35:cf:40:91:04:1f:04:a7:b1:16:c0:40:9b:4c:ca:be:
         6f:2d:96:87:d9:07:05:dd:1c:15:cb:9d:8d:58:4c:09:00:3f:
         03:c3:e9:e8
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUQF5zgb9eg6cuvOq4YJXUtpbyHIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTNaFw0yMjEyMjkxODIyMTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREQwOEIxMTAyRjM4QjE5MDQz
MTkzQUJFNTQwOUFGMUUyNEY1RjBFRUMzN0I3OTI1MUExOEIzNjQzMTRFRjUzNDNG
QzU5MTk5NjhDNDBCREEwRTNCN0Y2NTdFMUZDQkZDQTY3QTNDOUQwNTYwNzFDMTJD
Q0I1NUM1MTc0NkYxNTMwMkY0QkIzMkVDNjUyRDAwN0M2OUY2RThCMTBCNzlGMzlB
RUQ2QzMyMUQ3QkQxNDNEOUQ0QTU2ODNENTY2MTE1QTU1Mzg2NjAxRkEyQzIzQ0JG
RkJFNjlBOTFGQkNFNjAxMUUyNzZDOUI4RTdDRkU1NkU4MzMzMkE0NEU2REEwQUFC
NEM5NUZGMUQwQUNDQTZGRTI1Qzg4QTFCQ0UxNUEyNDYxNTk3NTg4QzY3NkU5RDcz
RUU4QjFDM0FEOUE5MTY3MkJCMDEyMTI4MTY5MEE0NDlERUFEMzY1MTVFRkVEMjlF
NDRGRTQ4NzFDMTEwODNCOEQ3MUZBMzk0NDRCQTdERTI0QkJCNUUxRERDOEMzNUI5
NkUwNEI4NTJBNTFGODczMDAxOTc5RURBMDYxQ0RCMDQwRTAyNkVDMUFDNTQxMUJE
MEIxRjMzNTMwQzhBRENGRjU1MTkwM0Q4OTMxOTFCQzU2RjlFOEEzODZFODMzM0Iz
QTlCODM3N0VCQTcwQ0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3QixEC84sZBDGTq+VAmvHiT18O7De3klGhizZDFO9TQ/xZGZaMQL
2g47f2V+H8v8pno8nQVgccEsy1XFF0bxUwL0uzLsZS0AfGn26LELefOa7WwyHXvR
Q9nUpWg9VmEVpVOGYB+iwjy/++aakfvOYBHidsm458/lboMzKkTm2gqrTJX/HQrM
pv4lyIobzhWiRhWXWIxnbp1z7oscOtmpFnK7ASEoFpCkSd6tNlFe/tKeRP5IccEQ
g7jXH6OURLp94ku7Xh3cjDW5bgS4UqUfhzABl57aBhzbBA4CbsGsVBG9Cx8zUwyK
3P9VGQPYkxkbxW+eijhugzOzqbg3frpwywIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJB1ddNy/WfovHoF+y8ovFOUDfqyMB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMxMzczNzJlMzEzMzMwMmUzMjM0
MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
sYL4MA0GCSqGSIb3DQEBCwUAA4IBAQBcU+b20huc/3qsX73RVq2kI4KhhpYHQH+V
LRjhCah6znfq1IIIajiPxxJWux5FzRSga+omxmkEq6113O7f5kL5KnTcE801U8NH
61DaygYB+o5kQMqQM+o0SCWAdIUhu6Zcrl9xBtpImP/cv48N2dq8eS5aDdSx9PSP
+IbcBsX+VfOu0F5r701cARSJykz1rZZzfSBIUEJT9mGLMGK2MYPmyGZdaA0WqtLp
X9jDMBHz3fSVKQ7SLrA765QI9nyn6Qw7rkfWWWPcnenod+s2tXWkYlY5/2o+ndv3
+jXPQJEEHwSnsRbAQJtMyr5vLZaH2QcF3RwVy52NWEwJAD8Dw+no
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org