Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e37332e3138342e302f32322d3234203d3e203238333433.roa
File:                     3137372e37332e3138342e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          tDU/JnhC01OXuSwWIr5FsGDb6JijWdFg9Iv/sg9aUFE=
Subject key identifier:   54:1F:DD:C1:65:53:F4:F8:A8:D0:18:E4:7B:81:4F:A0:42:8E:BC:99
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       4C9F83C40E59D66ECC317F0C558D112891C2D29E
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e37332e3138342e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:15 +0000
ROA not before:           Thu 30 Dec 2021 18:17:15 +0000
ROA not after:            Thu 29 Dec 2022 18:22:15 +0000
asID:                     28343
IP address blocks:        177.73.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9f:83:c4:0e:59:d6:6e:cc:31:7f:0c:55:8d:11:28:91:c2:d2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:15 2021 GMT
            Not After : Dec 29 18:22:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4f:78:c8:ba:78:a4:54:44:83:4e:1f:84:50:
                    2b:04:8d:3b:49:d4:cf:d9:89:7b:51:c4:78:bc:ef:
                    8a:bd:3f:74:44:b3:0e:a7:a4:1a:d7:74:c4:58:0f:
                    d6:8e:15:68:4c:ab:05:3c:3e:05:4f:b1:51:6f:7d:
                    a5:7c:54:48:9a:c1:94:2d:aa:55:e3:5b:ed:38:da:
                    cc:59:a9:d2:e5:dd:0b:fd:62:72:2b:a6:de:d2:e7:
                    4a:22:fb:ae:77:ec:82:0a:96:32:39:75:70:e7:1e:
                    d8:e2:13:3a:d4:8f:4c:6e:5f:e6:62:a5:c1:c2:f6:
                    78:ff:75:3e:6d:22:d3:dc:60:52:d0:e3:4b:32:4e:
                    a7:4e:6c:69:4a:e6:6f:61:9b:7e:0d:d5:76:08:79:
                    74:ca:02:94:79:17:60:b2:79:8d:00:33:d0:88:d6:
                    06:d5:b5:a8:e5:55:84:cb:6b:8e:d4:74:70:2e:67:
                    85:0e:0f:c1:09:1f:3a:15:4d:1a:11:d8:c3:a5:fa:
                    69:a9:cf:16:56:e4:e7:69:fb:2d:f6:29:e7:2e:97:
                    d7:ae:2b:dc:71:9b:e9:1a:25:73:02:72:a4:ef:8f:
                    6b:ed:f3:7a:68:e5:bd:1a:05:4e:4b:7f:cd:bb:1e:
                    1b:d8:c2:d9:3b:c7:c5:f7:c9:69:4f:5e:f1:2c:1f:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1F:DD:C1:65:53:F4:F8:A8:D0:18:E4:7B:81:4F:A0:42:8E:BC:99
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e37332e3138342e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:3a:b2:85:ed:bd:03:ee:20:8f:a2:0b:24:dd:4b:55:ee:38:
         a3:14:e4:b6:cf:dd:a5:d6:53:82:67:e4:2b:39:3c:40:ea:f9:
         86:58:ab:22:b6:32:b1:bb:71:04:d4:7c:58:9b:64:98:16:15:
         06:52:1f:55:33:70:b6:00:ac:9b:76:3d:b9:ca:76:28:7a:56:
         bd:20:bd:15:a4:40:07:78:dc:41:7a:45:a6:ac:4c:b9:6d:47:
         89:91:ba:57:cc:25:44:68:3e:b3:10:5b:8b:1a:02:18:08:da:
         64:77:59:3d:9d:71:30:9b:af:3d:2e:32:19:8d:55:3d:34:0b:
         13:1b:44:73:b8:9b:d3:eb:d5:8e:0c:aa:1d:07:5f:1e:7f:77:
         27:6f:b1:09:52:0e:c3:e3:39:32:5a:79:d6:eb:3b:67:83:f3:
         d5:e2:f6:9d:8f:e1:58:07:e8:80:d4:b5:83:a9:f4:d7:4b:13:
         47:58:0f:3e:53:d1:5a:fd:00:a3:5c:35:9b:a1:88:9e:97:4b:
         02:29:25:92:5b:df:f7:a3:a1:3f:a5:de:34:40:5f:91:5b:0b:
         10:6a:d5:94:41:7e:fe:df:ef:38:71:13:5b:ff:b0:66:b5:e9:
         3c:cf:de:78:fe:de:e8:f6:70:ae:06:4f:5a:34:78:38:5d:17:
         0c:b8:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org