Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3230392e32342e302f32312d3234203d3e203238333433.roa
File:                     3138362e3230392e32342e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          WMZGnnOzr1VRLX+H7dC8+Z6Wazh+SokyltQHjN+APaM=
Subject key identifier:   18:AA:16:7B:44:E3:62:73:68:03:1D:DF:25:31:01:4B:D2:E6:A8:35
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       2666C04E5B989A4068D4A68516C7A38707D027B6
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3230392e32342e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:13 +0000
ROA not before:           Thu 30 Dec 2021 18:17:13 +0000
ROA not after:            Thu 29 Dec 2022 18:22:13 +0000
asID:                     28343
IP address blocks:        186.209.24.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:66:c0:4e:5b:98:9a:40:68:d4:a6:85:16:c7:a3:87:07:d0:27:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:13 2021 GMT
            Not After : Dec 29 18:22:13 2022 GMT
        Subject: CN=3082010A0282010100E7EE2EFE6CE632B2979AFA571B41BEA23B8888AB97AC4072BB14675EA04ADB9803DF03E0B2825D28E37E10B40B0CA8FB2832C709E744A31C7D4456F072CF6C32FF7CDA07AA95B0A10ED214A17C460A8B63EC840402ADCC9317C04E913197FFC7F4BD0DE1E4BD902B81CC1D3643450BEE173102A10A8DF6DA9412F75B81DCADF09D8A987450BE81332E144A5015F48958FE195411E460F1A14597C87B8D718C24B1232A83DFE651ADCA47C8D7EC3E5C83205DE0CD3E2DC23A5C44C97DA39C4CB9457BBD388336C8BCF662F3E5017ACA4E453E528CB407B0CE476B7D9D8EE506566AF13557FA59A2E4AC60421D5C9775EF250E4E07F98F623E5666775C2EC475150203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ee:2e:fe:6c:e6:32:b2:97:9a:fa:57:1b:41:
                    be:a2:3b:88:88:ab:97:ac:40:72:bb:14:67:5e:a0:
                    4a:db:98:03:df:03:e0:b2:82:5d:28:e3:7e:10:b4:
                    0b:0c:a8:fb:28:32:c7:09:e7:44:a3:1c:7d:44:56:
                    f0:72:cf:6c:32:ff:7c:da:07:aa:95:b0:a1:0e:d2:
                    14:a1:7c:46:0a:8b:63:ec:84:04:02:ad:cc:93:17:
                    c0:4e:91:31:97:ff:c7:f4:bd:0d:e1:e4:bd:90:2b:
                    81:cc:1d:36:43:45:0b:ee:17:31:02:a1:0a:8d:f6:
                    da:94:12:f7:5b:81:dc:ad:f0:9d:8a:98:74:50:be:
                    81:33:2e:14:4a:50:15:f4:89:58:fe:19:54:11:e4:
                    60:f1:a1:45:97:c8:7b:8d:71:8c:24:b1:23:2a:83:
                    df:e6:51:ad:ca:47:c8:d7:ec:3e:5c:83:20:5d:e0:
                    cd:3e:2d:c2:3a:5c:44:c9:7d:a3:9c:4c:b9:45:7b:
                    bd:38:83:36:c8:bc:f6:62:f3:e5:01:7a:ca:4e:45:
                    3e:52:8c:b4:07:b0:ce:47:6b:7d:9d:8e:e5:06:56:
                    6a:f1:35:57:fa:59:a2:e4:ac:60:42:1d:5c:97:75:
                    ef:25:0e:4e:07:f9:8f:62:3e:56:66:77:5c:2e:c4:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AA:16:7B:44:E3:62:73:68:03:1D:DF:25:31:01:4B:D2:E6:A8:35
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3230392e32342e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:33:4e:46:db:b4:4d:a4:55:4a:19:b9:c5:42:fe:01:72:8b:
         31:e9:34:ad:31:f4:9a:b8:aa:ed:cf:55:cc:88:5c:67:2e:66:
         b4:67:b5:48:62:bb:f3:16:b6:52:f8:8e:ae:45:a2:1c:05:8b:
         98:6e:2a:fd:b2:03:62:4e:32:a8:fe:ee:e4:8d:b9:6e:6b:7c:
         8b:fb:c1:4e:e6:18:f5:6c:62:c5:c8:e2:45:9a:b0:e3:71:52:
         28:4e:ee:f1:1e:77:cd:b3:db:69:89:43:45:97:13:60:85:f8:
         1e:33:7c:56:6b:b6:14:b0:c4:3c:76:68:04:8e:57:b7:fb:a5:
         e9:a4:bf:03:22:70:24:83:1f:b3:6c:f1:3d:5a:26:f6:06:61:
         5e:2c:0d:36:7a:77:8f:51:2f:38:6f:50:25:83:dc:5e:b3:8e:
         f2:d1:e8:2c:de:eb:d5:78:05:db:cc:0b:9b:07:4d:1f:bf:1e:
         d4:a0:d6:c4:89:27:dc:57:50:e0:77:f4:ac:21:c5:b3:f3:c4:
         20:18:00:78:6d:4c:68:55:ca:30:4b:64:9a:60:99:15:26:0f:
         cf:1f:e2:58:d3:fb:bf:97:de:87:01:5b:25:69:2b:d2:7b:60:
         46:fb:7f:00:b8:dc:9a:68:63:16:84:a0:d8:b8:49:2f:41:92:
         1b:07:a7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org