Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e37342e3230382e302f32302d3234203d3e203238333433.roa
File:                     3137372e37342e3230382e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          P6o8ELQvfWb+XK51bY4dwo5zl8zt641ZAuQPtHnqdEY=
Subject key identifier:   02:9A:B6:D7:CA:ED:C6:42:CC:62:BC:D6:37:2C:A7:93:6F:74:37:C6
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       0AB189697CB646529214DD380A604F5B48904AB1
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e37342e3230382e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:14 +0000
ROA not before:           Thu 30 Dec 2021 18:17:14 +0000
ROA not after:            Thu 29 Dec 2022 18:22:14 +0000
asID:                     28343
IP address blocks:        177.74.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b1:89:69:7c:b6:46:52:92:14:dd:38:0a:60:4f:5b:48:90:4a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:14 2021 GMT
            Not After : Dec 29 18:22:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1b:db:f1:07:55:2c:e8:d5:34:f0:58:17:8a:
                    33:f8:d1:22:3f:ef:78:f9:58:2b:84:21:2a:0e:89:
                    ab:15:5b:6e:89:93:2b:6f:a3:34:41:8a:e1:8e:c7:
                    d9:0e:de:73:e6:88:8b:60:13:95:cb:42:6b:0c:cd:
                    92:17:9b:e9:e6:3b:43:82:7b:27:d6:e9:53:25:9d:
                    76:8a:57:92:18:24:01:a2:61:75:50:4a:4d:74:30:
                    0d:ac:91:a2:5f:91:82:eb:ad:83:e9:3d:11:ba:18:
                    d7:c1:d6:7b:12:c4:bb:e5:55:f5:bc:96:b8:6e:00:
                    67:93:17:59:50:92:40:92:f9:cf:73:ca:a8:e0:54:
                    07:91:26:92:23:19:81:2b:9d:4c:d4:bc:67:76:0c:
                    6c:d4:9e:df:cf:63:56:07:05:65:42:2a:9f:99:03:
                    a0:25:6b:35:9b:e8:22:dd:d1:11:e0:c0:c9:c8:e8:
                    dc:fe:fb:06:79:4f:0a:ca:9f:a8:91:0c:40:f0:0e:
                    0b:bb:21:a5:77:b4:74:c8:71:c3:dc:23:d8:a8:11:
                    43:68:fd:31:c3:93:20:37:70:73:7a:ad:a9:de:fb:
                    35:79:cc:7c:a8:72:9a:d1:00:36:d4:87:53:49:39:
                    36:46:90:a5:5a:44:9a:3d:3c:25:fc:28:ad:6c:8f:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9A:B6:D7:CA:ED:C6:42:CC:62:BC:D6:37:2C:A7:93:6F:74:37:C6
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137372e37342e3230382e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:bf:49:12:e7:26:69:7d:5b:13:38:6d:88:f1:c1:79:00:c2:
         6d:93:df:fd:36:34:3e:c1:2d:47:a4:a4:46:fb:18:1b:f5:2c:
         9b:6a:9a:4e:d2:f0:44:fc:bc:64:04:78:db:9e:f1:8a:e3:ba:
         6c:5c:74:df:05:a2:8f:b2:70:8f:c6:f2:b8:3f:1f:bc:5a:68:
         9f:bc:5c:e3:7b:83:b9:56:cd:b3:f2:4e:b1:51:c2:b9:6e:e7:
         80:21:85:1c:e6:9f:4b:a7:b2:91:56:17:88:f2:2a:b4:25:4d:
         04:eb:55:0e:a0:04:30:b3:c4:e0:a8:7b:ba:85:06:97:85:71:
         d7:dc:08:12:40:c2:9b:f5:e3:f2:10:3c:09:7f:7c:29:6f:d7:
         86:16:0e:51:e7:87:38:60:b7:66:6a:41:6d:29:ee:9a:a7:4f:
         e3:70:ac:63:2d:73:52:4c:0b:e5:a7:7b:f5:e5:70:e8:8f:5f:
         fd:1d:a7:f8:0a:fb:f8:8e:5c:33:bf:46:4e:5e:f1:e5:16:2d:
         28:9f:22:b3:59:24:60:6a:7f:a3:2a:cd:fa:4e:55:03:15:33:
         85:c4:5b:fe:21:01:6f:c6:02:8b:c6:f0:49:a6:ea:d0:8d:3c:
         6c:03:06:75:c7:59:83:e5:08:f4:54:7b:ca:c7:bd:87:95:08:
         bc:7f:98:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org