Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3138342e3134342e302f32312d3234203d3e203238333433.roa
File:                     3137372e3138342e3134342e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          /8rVADZC4BuTlASzi7V7H97UKooX+vdpj6zK1CVn3bw=
Subject key identifier:   EA:F3:1F:BC:87:94:51:98:85:5F:EF:97:05:C8:92:39:6A:99:D9:7F
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       1EB5359739BA7B67ED8AD8D8C97C375EBD67401E
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3138342e3134342e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:10 +0000
ROA not before:           Thu 30 Dec 2021 18:17:10 +0000
ROA not after:            Thu 29 Dec 2022 18:22:10 +0000
asID:                     28343
IP address blocks:        177.184.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b5:35:97:39:ba:7b:67:ed:8a:d8:d8:c9:7c:37:5e:bd:67:40:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:10 2021 GMT
            Not After : Dec 29 18:22:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:71:21:ab:36:a2:24:bf:f0:d4:4a:f4:03:
                    37:1f:58:9d:59:77:aa:2b:8d:9b:2c:ac:04:af:19:
                    e8:82:e0:cc:d6:24:6b:d9:17:84:26:53:ba:20:ff:
                    f0:c0:b9:87:27:47:5b:7a:be:41:b2:67:03:9b:8f:
                    44:33:40:b8:46:69:1a:d8:28:52:18:99:24:0c:8b:
                    df:c0:f1:e5:05:a4:0b:69:4f:05:04:25:a0:ea:e0:
                    7b:28:5a:ad:3c:ec:f6:c7:c4:bc:70:4d:5c:55:6b:
                    c5:6e:5c:b3:ed:e5:d7:f4:4e:ee:24:91:be:95:ad:
                    1a:d2:23:21:31:33:92:84:ca:9b:2b:17:57:a5:b7:
                    c2:7e:a8:90:69:ed:74:9b:48:93:1c:af:b5:6e:94:
                    0d:63:f4:11:45:12:25:68:5d:c1:43:e6:f4:57:76:
                    22:d6:0c:03:82:ac:d0:36:0f:9d:23:21:4c:ad:7c:
                    5d:10:98:c5:1d:eb:45:36:fe:8c:07:f8:18:b1:b2:
                    53:17:b9:f9:b5:f1:3f:ae:f6:25:b8:45:4f:e2:9f:
                    e0:87:9d:66:85:8b:96:87:0b:28:7c:81:4d:50:21:
                    b7:06:96:38:54:cb:1a:76:20:0d:d7:ca:d8:5e:87:
                    80:96:fe:35:d8:ab:7a:20:93:e4:9e:a9:89:ad:c2:
                    63:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F3:1F:BC:87:94:51:98:85:5F:EF:97:05:C8:92:39:6A:99:D9:7F
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3138342e3134342e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:d4:1d:ce:33:4c:b5:25:06:b7:4e:28:27:bc:ca:a9:33:78:
         12:54:bf:85:b4:4e:64:79:3e:29:96:5d:89:74:c6:d9:8e:5e:
         c3:cb:b9:ec:61:df:56:a4:50:ff:1e:6f:0a:d9:25:66:ad:90:
         b0:84:4e:15:4c:46:1c:da:5a:72:d9:cf:ff:48:d6:c6:aa:2d:
         32:90:60:11:31:ec:53:d3:ca:cb:08:18:cd:3c:05:f9:73:1f:
         1e:24:87:23:9c:37:4c:bf:43:04:3d:c0:21:15:d1:b0:9a:03:
         23:b9:54:25:00:0d:08:83:e4:39:d1:51:f9:d9:0f:64:b4:fc:
         c4:81:d4:23:3c:37:8a:5a:9e:19:6e:29:09:b8:fd:a2:bf:1b:
         11:cd:60:2e:f3:ab:8c:ce:1e:a8:15:ad:5e:74:52:fe:1b:b1:
         99:64:f5:82:f0:7f:02:96:a7:7b:ff:77:1e:e4:29:9d:b6:c7:
         c6:de:55:b6:c0:50:d7:c0:e4:6a:ff:7d:18:cf:ca:98:05:cc:
         b7:2c:df:b1:fa:89:ce:c6:04:fe:59:53:31:f6:ac:2f:aa:2f:
         3f:3c:af:5f:7c:0b:0b:3c:f5:f1:9d:d2:05:25:3e:6a:1e:42:
         2b:40:e1:22:a0:f4:98:02:46:51:12:4a:0f:b2:f4:0f:2d:4e:
         34:c9:11:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org