Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3230392e3139322e302f32302d3234203d3e203238333433.roa
File:                     3138362e3230392e3139322e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          8kYCqabtQPdkyZTzi6nitmXKR715CKNu7jscn5/FsTk=
Subject key identifier:   2B:AE:F5:BF:B7:DC:88:EA:83:F1:96:78:C4:B8:04:DA:06:7D:D7:08
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       7BC75904BA2A4F8436034FDA5025DA90C26C2539
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3230392e3139322e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:07 +0000
ROA not before:           Thu 30 Dec 2021 18:17:07 +0000
ROA not after:            Thu 29 Dec 2022 18:22:07 +0000
asID:                     28343
IP address blocks:        186.209.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c7:59:04:ba:2a:4f:84:36:03:4f:da:50:25:da:90:c2:6c:25:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:07 2021 GMT
            Not After : Dec 29 18:22:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:6a:d6:7c:26:15:87:f2:8c:24:7a:02:13:
                    4e:ae:f7:fe:7e:ed:5d:be:20:a8:d9:a4:c4:25:0a:
                    15:c0:52:b3:f6:a0:c7:14:65:8c:79:9b:0b:73:ee:
                    f6:71:35:c5:57:8e:27:7f:7a:cf:5e:3e:0c:ac:9d:
                    39:fc:67:5a:51:23:4b:9e:94:38:0e:b7:6d:17:94:
                    17:14:21:46:0f:6e:63:b2:56:0c:41:ec:84:a5:46:
                    e8:86:dd:5a:20:f2:4c:4f:e4:b7:75:f9:a4:29:57:
                    ea:1e:02:90:d9:52:bd:83:f5:d0:ed:46:84:c7:c6:
                    57:4a:d4:66:1e:2f:2c:59:a0:f4:9e:f1:3c:fd:4f:
                    0a:93:38:7d:a9:1a:83:96:93:d0:ed:60:9d:64:57:
                    48:16:84:01:9c:bc:11:e9:05:9d:29:c7:cf:af:e1:
                    44:88:2f:70:ef:94:3c:77:48:9c:27:bd:90:f7:e2:
                    d1:94:c2:82:4c:8c:54:a0:74:38:3d:f6:61:34:82:
                    4c:f2:ba:47:dd:ad:61:4b:ef:9d:3d:22:56:23:6d:
                    ad:87:58:76:bc:1e:03:b4:ef:8e:22:e4:ec:a6:8b:
                    9c:98:d4:ba:ff:37:12:86:f4:a4:60:f5:6e:e8:88:
                    c0:4d:89:e5:ae:62:e1:ee:49:0b:4a:c1:73:0d:29:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AE:F5:BF:B7:DC:88:EA:83:F1:96:78:C4:B8:04:DA:06:7D:D7:08
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3230392e3139322e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:52:65:6b:23:d4:b4:ad:c3:64:d6:e3:47:54:f6:c6:77:24:
         19:00:81:e0:de:3a:46:cb:66:17:d6:07:b3:a1:22:8d:48:24:
         c3:88:0e:bf:7b:4f:39:fd:7e:72:db:f6:5b:c3:c9:8d:36:5a:
         e2:63:12:85:08:72:d3:23:03:9d:a4:95:13:e0:5b:16:19:4e:
         2c:73:e4:03:5c:a0:77:b9:ea:1b:70:9b:90:ce:73:0a:6f:66:
         0b:87:b0:40:9d:8c:77:91:6e:c1:69:85:5e:a3:20:5a:35:5e:
         83:02:7a:af:cb:28:52:84:27:73:fb:83:6b:c9:80:d5:66:f7:
         01:18:0a:26:e1:57:6d:1c:25:66:ba:ae:56:32:f1:b2:bf:73:
         67:82:0e:31:f2:12:9d:ad:4f:4e:ef:6d:89:db:44:51:b7:5b:
         b3:8b:e8:c7:95:62:29:b9:ea:9a:32:2f:2c:32:0b:a3:8a:a9:
         2c:67:99:c0:53:62:32:51:7b:43:b1:a2:bf:83:71:ac:d1:08:
         51:17:64:63:58:37:be:f2:13:9d:d1:e2:26:c3:8d:cb:70:a3:
         93:77:ec:5e:87:50:ba:66:87:1e:cf:a8:8a:1a:08:30:9e:f5:
         0d:e9:4c:37:3f:46:60:44:f0:a3:45:89:84:fb:50:fc:30:d0:
         24:43:dd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org