Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3230392e31362e302f32312d3234203d3e203238333433.roa
File:                     3138362e3230392e31362e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          O0wvA0Uw+0sv2cU+BrPpvE128fvf+nPIrFVzXkw7jk0=
Subject key identifier:   88:92:77:51:C0:A9:2F:C7:E2:3C:B1:D0:99:8A:15:58:D4:4D:F9:E4
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       25D1AF6882B63EAB3AD16DFB93B4B49B7798D33B
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3230392e31362e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:08 +0000
ROA not before:           Thu 30 Dec 2021 18:17:08 +0000
ROA not after:            Thu 29 Dec 2022 18:22:08 +0000
asID:                     28343
IP address blocks:        186.209.16.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d1:af:68:82:b6:3e:ab:3a:d1:6d:fb:93:b4:b4:9b:77:98:d3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:08 2021 GMT
            Not After : Dec 29 18:22:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:d0:e4:b9:53:6d:08:5c:be:fe:51:e6:d7:
                    da:60:d1:a0:ef:ce:55:ca:5c:d7:e5:c1:c1:61:97:
                    e7:3e:66:9a:02:f3:65:a3:9f:8b:34:3c:42:19:cc:
                    73:54:ae:7c:a0:e8:bb:fd:7d:5a:58:02:8a:95:92:
                    0a:c6:08:d2:ae:0b:c1:a4:81:38:c0:38:bd:93:6c:
                    26:61:6d:79:4e:75:92:86:69:3e:dc:cf:18:72:63:
                    73:c0:49:6c:8d:db:9a:4c:68:ad:58:a1:86:b4:57:
                    0b:93:05:1e:7f:1a:c6:9c:ca:62:9d:ff:da:5b:6d:
                    6a:f4:02:1d:df:80:4b:68:1f:42:d0:0b:84:d2:23:
                    ef:20:8a:08:ae:e6:90:cb:f5:38:74:ab:ac:3e:9c:
                    cf:60:bb:2d:7d:8c:c0:b2:32:a3:48:66:e6:58:dc:
                    ab:76:3b:c6:52:6d:ca:e5:51:81:56:8a:31:36:1b:
                    18:ed:4c:25:40:35:e7:15:12:14:d8:10:aa:5b:a9:
                    43:f2:3d:44:37:2d:eb:69:f0:d1:4c:27:d8:12:fb:
                    ab:56:ed:e9:89:51:94:0f:a5:99:9d:e6:9a:4c:5d:
                    ab:88:a1:49:71:5c:64:6c:0a:c2:86:59:4d:1b:68:
                    a5:07:8b:17:16:10:11:14:c8:d2:2e:43:60:75:05:
                    b1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:92:77:51:C0:A9:2F:C7:E2:3C:B1:D0:99:8A:15:58:D4:4D:F9:E4
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3230392e31362e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:8f:c1:71:7c:e7:d4:e5:a8:2b:5d:0c:fe:af:1e:8c:bb:40:
         0c:bd:f9:97:97:3c:90:4e:6b:a0:a0:c6:53:40:b2:55:f5:71:
         d6:69:b6:05:e3:2b:7c:59:14:56:a4:49:73:89:a3:f6:8e:64:
         d8:e9:bd:ba:f3:ae:00:13:a2:e5:a2:76:e3:d1:3a:8b:0f:33:
         bd:00:77:50:d2:b9:41:4b:b7:5d:92:6d:04:df:93:26:71:27:
         55:e1:99:6c:e9:4d:0f:2f:45:bd:1b:13:d4:23:55:1e:ea:61:
         2b:94:b8:46:96:9b:16:ee:85:f3:b8:d4:6a:4e:06:67:cc:70:
         f5:88:e2:1b:e3:a1:f0:72:bb:c1:de:3e:0d:e3:3f:e0:01:ef:
         cc:5e:f7:b9:d8:e1:f0:f6:05:1e:c0:5d:0e:a1:fe:a1:fd:f3:
         ca:ae:4d:35:7a:c1:4e:3a:cd:a1:96:44:94:d1:11:d1:b7:50:
         26:c4:3f:7a:2a:a9:62:2e:a5:91:8c:48:f9:16:fd:96:bc:c3:
         0a:50:9c:3f:d4:aa:51:35:78:3d:ae:18:ba:96:6a:f5:ce:12:
         f0:c1:b6:6d:3a:06:27:cb:60:51:28:97:da:dc:a8:89:8c:66:
         04:78:de:31:94:8b:d5:6f:e3:43:8a:13:6c:87:ad:ea:63:c1:
         0f:34:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org