Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3230302e3139322e302f31392d3234203d3e203238333433.roa
File:                     3137372e3230302e3139322e302f31392d3234203d3e203238333433.roa (raw, json)
Hash identifier:          sz+UeDoCmdYJb398buinFIZFsHLiL6T8znScXcLCQUQ=
Subject key identifier:   58:45:82:76:C6:58:01:23:73:28:A0:B8:47:8D:58:DC:A2:5F:91:C9
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       6198D39FE4E9412854F9904FA2EFE2AFBA7688FC
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3230302e3139322e302f31392d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:09 +0000
ROA not before:           Thu 30 Dec 2021 18:17:09 +0000
ROA not after:            Thu 29 Dec 2022 18:22:09 +0000
asID:                     28343
IP address blocks:        177.200.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:98:d3:9f:e4:e9:41:28:54:f9:90:4f:a2:ef:e2:af:ba:76:88:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:09 2021 GMT
            Not After : Dec 29 18:22:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:87:80:d6:68:2e:a2:d3:e1:25:f7:e1:70:
                    7b:8d:07:6f:cb:56:54:b7:47:f1:c1:50:4c:e7:a3:
                    13:23:3e:0d:47:c0:7e:2e:89:8f:da:ad:5a:bd:03:
                    62:59:1d:e5:9d:06:7b:6d:bb:9b:74:70:9e:2f:47:
                    05:99:6e:c1:e6:d1:06:66:09:00:0a:9b:b5:7a:c7:
                    b1:49:d2:91:a9:ad:41:30:aa:27:d7:a9:b8:e8:fc:
                    f5:4e:36:f4:3c:fb:25:b5:f5:24:8b:e2:c1:97:c8:
                    34:90:9d:dd:f1:9e:43:2f:4c:af:80:64:52:3d:36:
                    24:e7:be:e0:39:00:41:be:f5:a4:08:df:0d:ba:a4:
                    96:4c:2f:8f:22:6f:4c:c6:8f:a1:74:b3:02:3f:46:
                    f8:18:98:cf:d4:3a:6a:a2:77:b7:f2:8e:ab:0e:72:
                    63:44:98:19:bf:b7:0a:0d:73:26:e0:79:77:73:41:
                    0f:0b:46:90:8b:ef:92:e8:83:74:b2:25:45:b2:8d:
                    0b:2c:fe:7c:a0:29:da:b8:c9:a4:1c:c4:69:5f:3a:
                    93:43:47:93:93:af:94:19:91:88:14:70:30:23:b6:
                    4f:6b:87:a5:56:5b:19:58:55:9b:5c:24:9f:b7:78:
                    c2:92:95:0e:38:79:08:57:fb:b3:47:b3:ec:a7:0e:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:45:82:76:C6:58:01:23:73:28:A0:B8:47:8D:58:DC:A2:5F:91:C9
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3230302e3139322e302f31392d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:d9:15:82:db:09:ff:de:23:d3:8d:b3:be:25:62:91:d1:5d:
         e3:e0:6a:25:d5:ca:94:24:40:0d:2c:1f:52:74:25:8b:10:72:
         53:ba:91:0c:5c:cb:e7:50:7a:1b:c1:62:c9:8c:4f:a4:4a:ca:
         08:dd:0a:49:2d:36:46:f5:26:85:3b:e4:98:54:9a:73:e6:1c:
         6a:96:70:3b:cd:42:96:3d:ec:49:06:ac:93:ba:96:b4:cb:cf:
         fd:a0:54:4d:bf:0b:2e:51:85:3f:ed:93:23:51:15:54:48:5d:
         97:f8:78:3b:cf:0d:03:c2:51:43:a8:c0:bf:ab:c1:ef:0b:92:
         30:93:91:2d:a1:f3:41:4a:2d:5c:83:0f:c3:49:65:8b:09:2a:
         91:75:f8:13:8d:d3:a4:5a:7a:4f:17:6e:78:36:50:a1:e1:47:
         49:99:aa:2e:4c:73:a2:2c:02:32:0c:b5:c8:da:2e:de:73:0e:
         35:e3:4f:55:66:f0:78:31:98:f5:68:96:eb:38:fc:a3:21:47:
         9c:24:60:82:c5:0c:81:53:9f:26:a3:c2:dd:fd:39:3b:28:97:
         9d:6d:3d:49:c4:84:e6:a9:18:bb:24:5d:a7:e6:b5:6b:86:f9:
         77:a3:34:a7:ec:f2:f6:0f:ba:34:56:ae:39:49:cb:77:2d:23:
         28:d8:07:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org