Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3232312e3136382e302f32312d3234203d3e203238333433.roa
File:                     3137372e3232312e3136382e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          N1jVmcthl9rbrmGH/MReacx28V3fu9JDfVbZSO7aSvw=
Subject key identifier:   FB:91:BF:A9:95:50:55:98:F3:1E:6E:99:C0:CA:91:80:F1:42:EB:99
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       5E083DF5C6C99331F6A7892E19BA2DEE41845793
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3232312e3136382e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:07 +0000
ROA not before:           Thu 30 Dec 2021 18:17:07 +0000
ROA not after:            Thu 29 Dec 2022 18:22:07 +0000
asID:                     28343
IP address blocks:        177.221.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:08:3d:f5:c6:c9:93:31:f6:a7:89:2e:19:ba:2d:ee:41:84:57:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:07 2021 GMT
            Not After : Dec 29 18:22:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:78:b4:62:03:1e:c7:fd:64:f5:ac:b4:3b:
                    ee:8e:9b:a6:1a:76:cd:70:d2:e7:5c:ab:80:94:8a:
                    f9:e4:64:e2:21:2a:85:1c:46:f8:8a:44:f9:e3:f6:
                    72:4e:8e:69:b9:85:d4:35:70:87:e0:45:ad:87:be:
                    47:99:32:7f:32:78:92:61:fe:66:7f:3c:4b:e9:a0:
                    2a:39:e7:23:45:51:2b:f8:63:7f:1c:e6:b7:7d:01:
                    2c:6e:46:b0:2d:73:2b:8f:1f:52:43:26:da:f2:52:
                    33:7e:f1:0c:f5:90:af:14:db:96:3d:b5:1c:76:91:
                    f5:83:5a:24:a6:d6:6b:0a:3a:b8:52:6c:68:85:d0:
                    cf:91:31:ba:d0:87:34:a7:49:94:fe:6d:33:bb:89:
                    06:80:38:f2:7e:5b:2f:0e:c8:05:4c:79:2e:47:3a:
                    87:cb:2e:1c:6b:72:0b:4a:2f:75:1f:3a:19:71:a1:
                    38:77:ce:7b:f5:3f:9e:ab:b1:84:e5:73:96:bc:cc:
                    d2:07:c1:e0:d3:a9:4b:ef:1f:2b:9d:99:d5:9e:56:
                    a9:20:8b:45:ec:7c:3a:a5:e4:9c:80:3b:7e:fa:bc:
                    1a:d1:42:8c:d5:ee:d2:46:eb:24:16:6f:45:71:bf:
                    28:dc:52:1c:66:cc:2d:cb:13:09:7a:39:8a:89:85:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:91:BF:A9:95:50:55:98:F3:1E:6E:99:C0:CA:91:80:F1:42:EB:99
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e3232312e3136382e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:46:8e:13:de:49:71:c5:89:02:8a:a0:6e:6a:58:59:ed:a3:
         e2:79:8f:b1:63:21:42:d4:ea:ba:9d:01:1e:80:af:e3:f1:09:
         d3:f3:b1:06:64:a6:8e:da:72:86:aa:66:a1:8f:f8:0a:58:ed:
         56:be:42:71:9c:ed:94:1d:03:c4:3d:70:e8:e7:8a:f1:20:5a:
         5f:68:da:e9:03:7a:d5:5d:1e:1f:c1:ff:28:bb:40:19:2c:a7:
         fe:9e:00:87:84:06:8f:b0:3d:e7:ef:e4:13:fb:17:2d:17:79:
         77:78:11:f9:5f:82:0a:d6:93:ea:af:71:a6:9d:e5:3d:b1:ab:
         83:91:17:21:b0:1a:b1:99:f2:8e:6d:c9:38:11:fd:e4:86:bc:
         2b:f7:67:32:a9:d5:3d:85:0d:7f:a9:34:c0:08:6c:c6:e8:7e:
         78:6f:1d:25:55:18:26:09:1b:9a:fa:6a:1f:e7:a7:42:dd:0e:
         28:37:33:55:3d:1f:a8:d4:ec:4b:65:d2:b9:48:16:00:af:ba:
         42:76:9d:dd:90:bc:5a:b8:77:6c:5e:4f:44:14:8b:81:2d:02:
         76:33:6e:68:03:10:4d:d4:e2:a8:a3:8e:cc:38:8f:26:8c:bc:
         90:89:0d:c0:18:67:ec:6d:3a:f1:7e:95:b3:c4:a6:93:df:1b:
         0c:e6:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org