Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137392e3139302e39362e302f31392d3234203d3e203238333433.roa
File:                     3137392e3139302e39362e302f31392d3234203d3e203238333433.roa (raw, json)
Hash identifier:          RPT0gmOufMpWowfBA+ZMF8Aj81crBehWcata0xGVEHc=
Subject key identifier:   A6:D4:4D:11:57:BD:CD:36:A2:F3:09:11:8E:E6:52:33:0D:84:23:3F
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       6FE19E250B57B0F50440DEB56EE854621DE50610
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137392e3139302e39362e302f31392d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:10 +0000
ROA not before:           Thu 30 Dec 2021 18:17:10 +0000
ROA not after:            Thu 29 Dec 2022 18:22:10 +0000
asID:                     28343
IP address blocks:        179.190.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e1:9e:25:0b:57:b0:f5:04:40:de:b5:6e:e8:54:62:1d:e5:06:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:10 2021 GMT
            Not After : Dec 29 18:22:10 2022 GMT
        Subject: CN=3082010A0282010100DF094DC76A52ED5E16116B2B81F773D5DB98F83596FBBE57105ACBC29D5E7CCB4CD01FF8B0B70C0F0D83CB365D1139BD9D3FBB3F5523438DA3B3601B97CD4231BF5E539803714D421DC57E2996ADED656930CD9AEF2B58007D9CB6FD953A4F5E38656E10D42BEE7C2BF956F6BC0834243FAC882A361AD481F4BE8A427CF942F80CAD2C6D024A5DF159C6259C16B684F037D2DD2FAED14DEC67E9AD6BB1FB03742809744969FD60D47F6859DF5404A484CCD599586FE767CCC9A594604FF0DA0965466E48806211F9A1F063D23B61BFD3B035ECD0CA242742B56BFF1EF9A47E397B7094515932653319A7B54109E96EF98E145590B81D6EFFA9AEB026C0BABFB70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:09:4d:c7:6a:52:ed:5e:16:11:6b:2b:81:f7:
                    73:d5:db:98:f8:35:96:fb:be:57:10:5a:cb:c2:9d:
                    5e:7c:cb:4c:d0:1f:f8:b0:b7:0c:0f:0d:83:cb:36:
                    5d:11:39:bd:9d:3f:bb:3f:55:23:43:8d:a3:b3:60:
                    1b:97:cd:42:31:bf:5e:53:98:03:71:4d:42:1d:c5:
                    7e:29:96:ad:ed:65:69:30:cd:9a:ef:2b:58:00:7d:
                    9c:b6:fd:95:3a:4f:5e:38:65:6e:10:d4:2b:ee:7c:
                    2b:f9:56:f6:bc:08:34:24:3f:ac:88:2a:36:1a:d4:
                    81:f4:be:8a:42:7c:f9:42:f8:0c:ad:2c:6d:02:4a:
                    5d:f1:59:c6:25:9c:16:b6:84:f0:37:d2:dd:2f:ae:
                    d1:4d:ec:67:e9:ad:6b:b1:fb:03:74:28:09:74:49:
                    69:fd:60:d4:7f:68:59:df:54:04:a4:84:cc:d5:99:
                    58:6f:e7:67:cc:c9:a5:94:60:4f:f0:da:09:65:46:
                    6e:48:80:62:11:f9:a1:f0:63:d2:3b:61:bf:d3:b0:
                    35:ec:d0:ca:24:27:42:b5:6b:ff:1e:f9:a4:7e:39:
                    7b:70:94:51:59:32:65:33:19:a7:b5:41:09:e9:6e:
                    f9:8e:14:55:90:b8:1d:6e:ff:a9:ae:b0:26:c0:ba:
                    bf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D4:4D:11:57:BD:CD:36:A2:F3:09:11:8E:E6:52:33:0D:84:23:3F
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3137392e3139302e39362e302f31392d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.190.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:90:b1:d8:cb:3c:19:c0:48:46:58:0a:2d:3b:27:e8:af:f5:
         0d:33:37:7a:76:1d:d3:b1:11:68:b0:c2:fd:92:e9:1b:7d:3c:
         aa:84:ad:a9:50:22:0d:36:2d:07:d2:bc:4c:cc:84:c4:c4:92:
         64:c7:4e:97:02:24:25:ab:a9:f2:0d:83:e8:85:d3:fe:1a:c6:
         9f:f9:52:7b:fb:a9:82:5d:93:36:71:d7:dc:78:6e:85:44:4b:
         e4:df:e8:04:77:d5:2c:cc:99:2e:a2:e7:58:48:83:a8:2d:c0:
         00:bb:73:ae:45:39:0f:b9:84:d3:d5:1b:c1:1c:27:87:10:4d:
         cd:be:ac:dd:1e:3c:1a:16:f0:13:14:0f:37:83:c4:83:af:f5:
         5a:9d:3b:20:c9:04:70:dc:71:d9:d7:eb:a2:42:ae:b8:d9:63:
         c4:9f:e7:ac:bc:62:ae:e3:2a:7a:b0:7f:0f:34:7c:0c:34:7a:
         4f:25:a6:a1:77:3b:60:6b:ca:76:37:f0:b4:b3:28:34:92:b9:
         c3:a5:5c:12:11:69:f8:23:44:e6:92:b5:b4:81:64:f7:01:c9:
         b7:ae:aa:d1:e2:ef:eb:22:94:33:e4:56:50:24:c6:7c:59:67:
         52:40:13:9d:c0:e2:c6:b0:5c:e3:ea:13:96:6a:95:a8:6b:be:
         34:87:cb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org