Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e37332e3133362e302f32322d3234203d3e203238333433.roa
File:                     3137372e37332e3133362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          MPLvMuRTlrRrWqzwtjm69LO1rekqyF34Jk5PC3oRxfQ=
Subject key identifier:   58:E9:5A:14:BC:35:56:18:36:DE:B6:5E:E2:83:88:EB:F0:B7:E3:93
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       257DAFCC4AF193A2780FD04FE841999A68C7B6BE
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e37332e3133362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:09 +0000
ROA not before:           Thu 30 Dec 2021 18:17:09 +0000
ROA not after:            Thu 29 Dec 2022 18:22:09 +0000
asID:                     28343
IP address blocks:        177.73.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7d:af:cc:4a:f1:93:a2:78:0f:d0:4f:e8:41:99:9a:68:c7:b6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:09 2021 GMT
            Not After : Dec 29 18:22:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:73:c7:0e:af:2c:b7:55:9a:82:ba:bc:ef:13:
                    de:57:4c:70:73:f1:6e:b5:e3:7e:e3:a2:22:3a:01:
                    c9:a7:b8:75:ff:8c:62:da:58:0b:ae:74:67:18:0b:
                    dd:c9:d2:22:c7:a0:05:9c:11:af:55:a7:86:61:0e:
                    90:8c:a4:29:3f:1c:54:15:30:95:65:99:67:40:a1:
                    e6:a8:73:77:e5:21:4c:52:00:e3:bd:d6:e1:c2:03:
                    d7:d3:3b:7a:63:7e:e6:61:b9:10:fe:3c:c5:f7:67:
                    a7:43:d4:e2:15:76:0d:b0:8e:3e:57:07:55:e0:e1:
                    16:7e:dd:56:66:e8:1b:aa:a7:83:d6:c6:e8:86:26:
                    fc:a5:50:97:0c:cf:3f:5b:d5:31:1c:1f:68:e4:3e:
                    af:85:f2:37:c1:34:bf:18:29:94:b2:7b:af:f2:13:
                    62:c8:57:53:0d:b8:26:7b:68:65:39:f3:b9:2a:6f:
                    b9:2b:00:c7:a1:c2:c3:7f:86:cb:6b:5d:a6:26:56:
                    ce:66:5e:a0:24:59:30:22:2d:6c:35:c3:c6:e2:9b:
                    8b:ad:82:93:5e:4d:4f:75:74:d5:9a:16:7b:5a:f8:
                    bc:6f:ba:df:e8:fb:8b:cc:29:62:26:80:e9:dc:1c:
                    bf:97:87:71:7c:14:2e:8d:d6:04:67:66:72:5c:cb:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E9:5A:14:BC:35:56:18:36:DE:B6:5E:E2:83:88:EB:F0:B7:E3:93
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e37332e3133362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:42:53:0a:de:46:d9:d6:75:2c:41:5e:ad:fe:49:04:6d:a2:
         df:6a:a4:98:a1:a8:98:25:d3:9a:cb:d9:ca:d5:6e:37:41:fc:
         b5:34:06:9f:ac:8a:9f:33:68:e0:49:a6:02:99:41:c9:4a:22:
         cd:d6:60:c1:42:2c:56:f3:5d:15:40:c0:b6:5c:2d:e6:75:12:
         99:73:31:ef:c2:ce:b9:51:6c:60:a6:eb:da:50:e9:52:46:f8:
         ae:38:36:22:db:d6:03:4d:cf:97:66:68:48:72:46:28:69:4a:
         45:2a:e9:58:74:89:cc:e8:02:68:1b:94:9d:04:ff:63:ba:25:
         09:6a:47:07:8d:26:1e:9f:c5:6a:75:ef:68:84:fb:0b:3a:4c:
         4b:fd:3e:94:6f:b4:9d:d0:29:1f:96:62:b9:32:50:6f:80:3e:
         b9:5c:95:7e:4c:58:e1:52:44:91:bc:73:0b:fe:ff:43:33:16:
         76:01:09:12:d2:d6:d7:7e:ee:f9:58:f7:63:c9:41:0e:5e:4f:
         c9:2f:c0:e7:09:07:bc:f9:5b:f7:d5:3d:7f:ff:07:26:34:7d:
         93:a7:7d:31:78:9d:6f:f2:a5:39:b3:6e:69:4c:ff:a4:4e:05:
         18:2f:98:ad:42:41:9c:eb:fe:8a:d8:fa:10:b1:03:29:4e:cf:
         5c:6c:83:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org