Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3232312e3136302e302f32312d3234203d3e203238333433.roa
File:                     3137372e3232312e3136302e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          1IkaQlMIfLj6TjsWKM1pqoawDdOxQi+N5ZSPBcAFWPo=
Subject key identifier:   99:65:B3:BC:8F:95:3F:2B:EA:EB:BC:4D:B9:E6:3D:5D:4D:FB:A5:14
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       6F50B306F15C3F192222BF48CCEEDB75F5445A6D
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3232312e3136302e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:11 +0000
ROA not before:           Thu 30 Dec 2021 18:17:11 +0000
ROA not after:            Thu 29 Dec 2022 18:22:11 +0000
asID:                     28343
IP address blocks:        177.221.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:50:b3:06:f1:5c:3f:19:22:22:bf:48:cc:ee:db:75:f5:44:5a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:11 2021 GMT
            Not After : Dec 29 18:22:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ad:cd:41:62:fc:db:25:bf:69:95:92:10:5b:
                    03:ac:14:1b:bc:75:68:c1:b1:38:87:dd:d0:39:4d:
                    d6:e2:70:cb:34:92:9c:4b:8b:94:96:8d:55:da:a2:
                    b1:40:e0:42:48:87:2d:aa:f2:54:ed:39:a8:87:a5:
                    22:75:4e:fd:fa:49:03:c3:5f:46:fb:b2:be:77:d7:
                    93:54:44:99:f5:6a:43:46:11:a8:47:e0:cc:fd:a5:
                    c7:cc:34:5a:da:5c:d4:be:37:a3:1e:95:bb:0f:1f:
                    47:7b:6c:f7:a5:34:86:75:58:d9:3b:69:8c:25:3d:
                    89:ce:27:d9:08:0b:2a:d8:ee:c2:52:7d:ad:21:82:
                    b0:17:fe:7e:2b:54:7c:56:95:94:95:1e:fc:b8:5a:
                    76:ff:b0:39:5e:4b:96:61:5b:fa:7b:05:14:dd:49:
                    ed:cc:de:05:32:ec:cb:18:9e:80:fa:d0:77:37:b2:
                    0c:79:8b:29:28:09:0c:a0:db:2a:6a:bd:ef:90:5a:
                    b4:76:17:60:97:f4:86:25:96:8a:57:ab:db:5d:69:
                    40:e1:04:cb:44:f0:d0:43:59:9d:36:de:74:cf:f2:
                    61:e4:a7:e8:3c:7e:7a:b4:8c:92:4b:be:0a:ac:cf:
                    33:70:80:bd:e1:8b:2e:1a:1d:ee:95:51:df:2e:da:
                    d2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:65:B3:BC:8F:95:3F:2B:EA:EB:BC:4D:B9:E6:3D:5D:4D:FB:A5:14
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3232312e3136302e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:da:80:cb:93:a1:c5:01:64:2c:38:fa:3d:54:57:90:82:88:
         97:cc:1e:f7:f4:04:2c:fa:2e:0a:58:99:63:af:c7:89:26:2d:
         a7:1a:54:43:53:08:54:4c:2f:41:70:ea:94:9a:c1:90:20:f6:
         8b:03:f7:44:ea:cf:fc:ad:3c:77:48:32:0e:fe:ec:d3:40:46:
         30:54:65:60:0f:11:21:44:77:58:38:6b:7c:ba:31:fc:91:d1:
         85:c6:a8:9d:73:5c:7a:5f:aa:98:88:62:4c:56:87:31:b0:19:
         32:d3:58:7f:44:b3:59:99:35:73:7e:9e:8b:96:e1:86:58:4e:
         86:4d:12:af:00:de:5e:31:72:50:09:56:95:fd:9c:1d:8e:f6:
         46:cf:5a:5b:8f:b3:16:0d:93:b7:cf:68:14:81:7e:4b:f9:fa:
         60:2e:7b:0f:ac:6b:bc:00:4a:48:8c:bf:48:32:86:e5:23:f0:
         c9:41:3b:9e:47:0b:3f:c6:8d:6e:e7:bd:7a:bf:67:fe:5d:8b:
         6c:38:e6:f6:3e:f7:ff:be:9a:c8:3a:2c:0b:ad:53:44:9d:be:
         8e:a3:57:b9:ba:82:85:86:27:1c:ec:c6:2d:90:f4:20:05:62:
         14:a6:a4:36:15:c1:b7:da:1c:f9:3d:f9:67:ca:f9:36:04:d4:
         b8:e6:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org