Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e35342e302e302f32302d3234203d3e203238333433.roa
File:                     3137372e35342e302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          3RAK8pI3cLXr8CFLQkQ8cR4LD9IrWOJH1GFFjgkT48o=
Subject key identifier:   59:10:AF:92:7D:46:66:37:9A:32:3E:36:CF:2E:DC:44:BB:29:74:7F
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       2B1A53BE390906BE3BF88FEC945AED9C37C98854
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e35342e302e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:15 +0000
ROA not before:           Thu 30 Dec 2021 18:17:15 +0000
ROA not after:            Thu 29 Dec 2022 18:22:15 +0000
asID:                     28343
IP address blocks:        177.54.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1a:53:be:39:09:06:be:3b:f8:8f:ec:94:5a:ed:9c:37:c9:88:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:15 2021 GMT
            Not After : Dec 29 18:22:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:31:1c:e7:4b:23:6d:69:4f:40:a1:2f:e5:
                    da:81:10:f4:f5:17:83:e7:e5:5e:5d:34:0b:1f:91:
                    34:56:76:b5:9c:81:49:5b:0a:04:d3:b9:1e:91:18:
                    a2:84:39:0b:e6:58:ab:6e:f8:19:1b:87:53:22:9f:
                    ea:4b:af:20:e3:96:64:1c:03:70:ef:9b:7e:a5:e9:
                    bd:3b:46:99:c2:c9:75:20:4e:44:4d:ed:08:fe:59:
                    57:09:f8:6f:24:9b:ec:8d:43:2d:4a:af:c5:43:4a:
                    b8:69:2d:40:cb:b9:0e:98:39:69:cd:ab:4c:40:46:
                    84:32:87:42:ec:45:fc:25:8f:f5:b9:d7:71:60:93:
                    34:5c:8b:22:55:b8:3e:77:c0:92:bf:c0:df:b5:92:
                    bf:fe:e6:f8:95:fd:d9:bf:e0:49:ca:28:46:c1:5e:
                    00:ff:d9:ec:a5:9c:5c:45:cb:4d:75:51:dc:3a:73:
                    9e:3b:17:de:8b:24:68:90:6c:eb:60:cf:37:29:40:
                    a2:eb:a4:0e:16:92:f6:b2:5c:ad:df:92:e9:e1:8a:
                    4e:e9:b4:cc:b0:b4:c8:80:fc:dd:78:95:a1:52:1b:
                    7c:e7:4d:ae:bd:1c:11:95:0f:f8:b1:aa:77:12:cb:
                    2e:8e:9e:b5:0f:f5:29:9c:7b:1b:ce:74:fd:95:ab:
                    dd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:10:AF:92:7D:46:66:37:9A:32:3E:36:CF:2E:DC:44:BB:29:74:7F
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e35342e302e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:f3:cf:c5:9e:f4:98:0a:ba:e8:56:83:3e:9c:07:9e:9e:f0:
         71:0e:32:ae:5a:58:19:8c:82:f6:7a:c4:b1:c5:a5:76:5e:17:
         b2:6b:f3:72:aa:aa:02:04:e6:af:00:7c:9b:6a:eb:2c:97:70:
         7c:ca:c3:de:5f:c4:32:16:2e:31:24:56:b1:3c:29:33:03:65:
         19:d8:97:ab:e9:65:3a:46:d5:49:89:f8:b1:30:64:2c:c0:92:
         fb:6e:ec:f2:e0:f9:8f:9f:28:55:a1:85:71:a0:e8:97:f6:4d:
         ec:95:bf:34:d7:5b:63:a0:f5:2a:18:ff:5d:cc:76:6a:1b:4e:
         28:6d:08:9c:ad:7c:03:b5:67:de:07:5c:52:44:d2:08:88:23:
         0d:ac:52:9b:50:7c:c5:dd:f4:c8:31:b9:b2:dc:48:68:06:c8:
         ce:d5:9b:eb:3b:84:72:66:3d:eb:b0:72:99:7b:4b:d8:71:ef:
         90:f3:56:71:f2:05:ce:76:25:cc:96:4f:ea:3f:65:dc:1a:b4:
         1d:e3:fa:c3:7b:db:73:a0:72:f3:86:a4:b7:88:2c:19:b4:08:
         01:63:fa:81:02:61:89:53:b5:0b:c2:e0:ff:3c:b2:2d:e4:0b:
         e7:b1:a4:2b:e7:1e:21:53:66:bb:fd:0a:f1:88:82:d6:43:d9:
         ed:a8:be:a1
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUKxpTvjkJBr47+I/slFrtnDfJiFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTVaFw0yMjEyMjkxODIyMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREM4QTMxMUNFNzRCMjM2RDY5
NEY0MEExMkZFNURBODExMEY0RjUxNzgzRTdFNTVFNUQzNDBCMUY5MTM0NTY3NkI1
OUM4MTQ5NUIwQTA0RDNCOTFFOTExOEEyODQzOTBCRTY1OEFCNkVGODE5MUI4NzUz
MjI5RkVBNEJBRjIwRTM5NjY0MUMwMzcwRUY5QjdFQTVFOUJEM0I0Njk5QzJDOTc1
MjA0RTQ0NERFRDA4RkU1OTU3MDlGODZGMjQ5QkVDOEQ0MzJENEFBRkM1NDM0QUI4
NjkyRDQwQ0JCOTBFOTgzOTY5Q0RBQjRDNDA0Njg0MzI4NzQyRUM0NUZDMjU4RkY1
QjlENzcxNjA5MzM0NUM4QjIyNTVCODNFNzdDMDkyQkZDMERGQjU5MkJGRkVFNkY4
OTVGREQ5QkZFMDQ5Q0EyODQ2QzE1RTAwRkZEOUVDQTU5QzVDNDVDQjRENzU1MURD
M0E3MzlFM0IxN0RFOEIyNDY4OTA2Q0VCNjBDRjM3Mjk0MEEyRUJBNDBFMTY5MkY2
QjI1Q0FEREY5MkU5RTE4QTRFRTlCNENDQjBCNEM4ODBGQ0RENzg5NUExNTIxQjdD
RTc0REFFQkQxQzExOTUwRkY4QjFBQTc3MTJDQjJFOEU5RUI1MEZGNTI5OUM3QjFC
Q0U3NEZEOTVBQkREQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3IoxHOdLI21pT0ChL+XagRD09ReD5+VeXTQLH5E0Vna1nIFJWwoE
07kekRiihDkL5lirbvgZG4dTIp/qS68g45ZkHANw75t+pem9O0aZwsl1IE5ETe0I
/llXCfhvJJvsjUMtSq/FQ0q4aS1Ay7kOmDlpzatMQEaEModC7EX8JY/1uddxYJM0
XIsiVbg+d8CSv8DftZK//ub4lf3Zv+BJyihGwV4A/9nspZxcRctNdVHcOnOeOxfe
iyRokGzrYM83KUCi66QOFpL2slyt35Lp4YpO6bTMsLTIgPzdeJWhUht8502uvRwR
lQ/4sap3Essujp61D/UpnHsbznT9lavdtwIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FFkQr5J9RmY3mjI+Ns8u3ES7KXR/MB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMxMzczNzJlMzUzNDJlMzAyZTMw
MmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEsTYAMA0G
CSqGSIb3DQEBCwUAA4IBAQC488/FnvSYCrroVoM+nAeenvBxDjKuWlgZjIL2esSx
xaV2Xheya/NyqqoCBOavAHybaussl3B8ysPeX8QyFi4xJFaxPCkzA2UZ2Jer6WU6
RtVJifixMGQswJL7buzy4PmPnyhVoYVxoOiX9k3slb8011tjoPUqGP9dzHZqG04o
bQicrXwDtWfeB1xSRNIIiCMNrFKbUHzF3fTIMbmy3EhoBsjO1ZvrO4RyZj3rsHKZ
e0vYce+Q81Zx8gXOdiXMlk/qP2XcGrQd4/rDe9tzoHLzhqS3iCwZtAgBY/qBAmGJ
U7ULwuD/PLIt5AvnsaQr5x4hU2a7/QrxiILWQ9ntqL6h
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org