Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e35332e3132342e302f32322d3234203d3e203238333433.roa
File:                     3137372e35332e3132342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          18P1TuZpI2PQ9dqVlP7i7Vxi6EBNFI0A6RY35kuvyZM=
Subject key identifier:   FB:4E:E3:C6:F1:84:72:6B:12:C2:F2:99:6E:58:F9:18:46:E7:9B:77
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       7A7C7BF999B99EABB055FC9F55AC00C2E6F95DA1
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e35332e3132342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:10 +0000
ROA not before:           Thu 30 Dec 2021 18:17:10 +0000
ROA not after:            Thu 29 Dec 2022 18:22:10 +0000
asID:                     28343
IP address blocks:        177.53.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7c:7b:f9:99:b9:9e:ab:b0:55:fc:9f:55:ac:00:c2:e6:f9:5d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:10 2021 GMT
            Not After : Dec 29 18:22:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:90:12:10:74:1c:10:eb:4a:ea:2a:cf:96:
                    ec:93:84:6c:6f:2f:f8:ed:e3:dc:31:e9:b3:67:38:
                    64:09:a2:fd:aa:15:ee:b8:28:09:fd:a7:b7:36:b7:
                    30:8d:b5:3c:76:51:43:7a:da:9a:e8:af:f0:ba:b9:
                    8e:c1:7c:f6:9e:e4:95:c2:e2:d3:7a:f0:1e:85:17:
                    74:fb:e9:b2:de:11:c9:a8:0a:e2:45:f7:a5:ba:90:
                    f6:55:c0:05:71:f2:1d:c8:44:05:31:d3:de:a7:83:
                    5f:a6:19:55:8b:49:74:a8:02:26:4c:4e:7b:a2:b0:
                    fc:9a:59:d3:54:13:30:49:dc:b9:9c:4c:4e:98:dc:
                    48:d8:15:db:ed:a2:0e:f3:57:e8:0a:a5:9a:5e:d0:
                    4d:3d:05:b6:a8:c2:5a:31:98:a6:d0:e9:24:52:ba:
                    77:28:70:7a:1b:48:1d:c0:44:27:3c:2f:62:76:28:
                    a4:c2:d0:eb:9a:02:7c:20:95:2c:48:a5:ab:1d:3b:
                    2f:a7:44:49:b3:dc:c8:14:62:71:ea:ed:85:03:83:
                    d2:67:ec:78:83:33:ef:77:d4:7c:98:0c:fc:21:e3:
                    97:52:6e:29:07:b0:42:c3:0b:9e:08:c4:a9:d4:e5:
                    37:a5:bd:e0:a4:e9:9a:e6:14:e0:36:bd:9b:3f:0d:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4E:E3:C6:F1:84:72:6B:12:C2:F2:99:6E:58:F9:18:46:E7:9B:77
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e35332e3132342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:ef:a1:d6:46:93:d2:9b:9f:84:5e:7b:92:70:5b:46:38:0c:
         29:95:43:30:aa:f6:d7:a3:fb:e9:4d:c0:eb:df:b0:c2:70:09:
         64:e0:50:4c:bd:bf:2f:ed:fe:bf:bf:6b:dc:c9:36:bd:e5:e2:
         8a:fd:ec:4e:a7:64:b5:4c:0a:5f:f5:d7:5a:62:9d:78:a3:b0:
         68:13:3c:00:3d:fc:34:97:44:98:3f:9f:26:bd:ce:ab:c1:1b:
         55:f9:44:a2:d3:bb:81:df:dd:be:88:b6:56:8e:a2:81:bf:fe:
         4f:c0:c4:90:7c:48:f5:b1:04:a0:41:d7:61:cf:37:ea:ac:f2:
         e4:d5:f7:a0:77:8a:5a:f9:a7:1c:46:a5:f8:50:90:52:68:64:
         f0:bf:68:ec:37:1a:a5:b5:51:c6:78:5b:a6:1a:61:5b:32:9c:
         9e:bd:fc:b2:59:39:a6:f8:e5:3d:a2:46:6c:11:b4:1a:fc:92:
         c2:02:4b:7b:56:2d:5b:34:4b:fd:0a:76:c4:1a:28:b3:51:c0:
         a7:23:f1:f0:75:28:2c:3c:9b:f6:21:d8:14:cc:c0:80:af:e8:
         1b:61:1e:ba:92:bf:ca:c3:8a:d1:84:58:7b:7d:27:9b:55:11:
         ef:04:a2:89:f9:41:ff:18:8d:18:a0:a7:49:53:d4:06:5d:1f:
         3b:00:25:20
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUenx7+Zm5nquwVfyfVawAwub5XaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTBaFw0yMjEyMjkxODIyMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI1NjkwMTIxMDc0MUMxMEVC
NEFFQTJBQ0Y5NkVDOTM4NDZDNkYyRkY4RURFM0RDMzFFOUIzNjczODY0MDlBMkZE
QUExNUVFQjgyODA5RkRBN0I3MzZCNzMwOERCNTNDNzY1MTQzN0FEQTlBRThBRkYw
QkFCOThFQzE3Q0Y2OUVFNDk1QzJFMkQzN0FGMDFFODUxNzc0RkJFOUIyREUxMUM5
QTgwQUUyNDVGN0E1QkE5MEY2NTVDMDA1NzFGMjFEQzg0NDA1MzFEM0RFQTc4MzVG
QTYxOTU1OEI0OTc0QTgwMjI2NEM0RTdCQTJCMEZDOUE1OUQzNTQxMzMwNDlEQ0I5
OUM0QzRFOThEQzQ4RDgxNURCRURBMjBFRjM1N0U4MEFBNTlBNUVEMDREM0QwNUI2
QThDMjVBMzE5OEE2RDBFOTI0NTJCQTc3Mjg3MDdBMUI0ODFEQzA0NDI3M0MyRjYy
NzYyOEE0QzJEMEVCOUEwMjdDMjA5NTJDNDhBNUFCMUQzQjJGQTc0NDQ5QjNEQ0M4
MTQ2MjcxRUFFRDg1MDM4M0QyNjdFQzc4ODMzM0VGNzdENDdDOTgwQ0ZDMjFFMzk3
NTI2RTI5MDdCMDQyQzMwQjlFMDhDNEE5RDRFNTM3QTVCREUwQTRFOTlBRTYxNEUw
MzZCRDlCM0YwREJBMzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu1aQEhB0HBDrSuoqz5bsk4Rsby/47ePcMemzZzhkCaL9qhXuuCgJ
/ae3NrcwjbU8dlFDetqa6K/wurmOwXz2nuSVwuLTevAehRd0++my3hHJqAriRfel
upD2VcAFcfIdyEQFMdPep4NfphlVi0l0qAImTE57orD8mlnTVBMwSdy5nExOmNxI
2BXb7aIO81foCqWaXtBNPQW2qMJaMZim0OkkUrp3KHB6G0gdwEQnPC9idiikwtDr
mgJ8IJUsSKWrHTsvp0RJs9zIFGJx6u2FA4PSZ+x4gzPvd9R8mAz8IeOXUm4pB7BC
wwueCMSp1OU3pb3gpOma5hTgNr2bPw26MQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FPtO48bxhHJrEsLymW5Y+RhG55t3MB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMxMzczNzJlMzUzMzJlMzEzMjM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArE1
fDANBgkqhkiG9w0BAQsFAAOCAQEAze+h1kaT0pufhF57knBbRjgMKZVDMKr216P7
6U3A69+wwnAJZOBQTL2/L+3+v79r3Mk2veXiiv3sTqdktUwKX/XXWmKdeKOwaBM8
AD38NJdEmD+fJr3Oq8EbVflEotO7gd/dvoi2Vo6igb/+T8DEkHxI9bEEoEHXYc83
6qzy5NX3oHeKWvmnHEal+FCQUmhk8L9o7DcapbVRxnhbphphWzKcnr38slk5pvjl
PaJGbBG0GvySwgJLe1YtWzRL/Qp2xBoos1HApyPx8HUoLDyb9iHYFMzAgK/oG2Ee
upK/ysOK0YRYe30nm1UR7wSiiflB/xiNGKCnSVPUBl0fOwAlIA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org