Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3232352e302e302f32302d3234203d3e203238333433.roa
File:                     3138362e3232352e302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          EL0FH3cdZUebemO9kBsw/vFJF5eSuR86MBBGboSBEc0=
Subject key identifier:   AB:01:B3:1F:79:9D:52:49:6B:34:CD:DD:25:B4:31:36:B6:36:CE:0F
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       718F72C7F7A753BA109043EFB659F15ABCF20F8F
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3232352e302e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:14 +0000
ROA not before:           Thu 30 Dec 2021 18:17:14 +0000
ROA not after:            Thu 29 Dec 2022 18:22:14 +0000
asID:                     28343
IP address blocks:        186.225.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8f:72:c7:f7:a7:53:ba:10:90:43:ef:b6:59:f1:5a:bc:f2:0f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:14 2021 GMT
            Not After : Dec 29 18:22:14 2022 GMT
        Subject: CN=3082010A0282010100B142CE009C87DD05F17533FEE58636EFDD9EA00FDBFF582B133ED83954E8BD2FE28F9AA702F5DCE4F80BB431B85C8A993E8DC04B157489883024186E22A6C27CE66A9C4A6EAACA98758FEC94D52F679C8F0D352151185CBC450D1553A61901454CC185B3615CB98AB7B748D68F135ED47CA88E1263F329873EC3D12A95D676D1E5A7C57D0CD72FFF9085DD3589409FB60F90AB04C48EE0E231420E910A134E25EC2F20464C1278ED3F2F1592C4259918A6A23CA25893172756B1A165A689958F7C13C2E728D270FD852684F28E2355C9F1366F40711A04CD8F1165CDD43F292045B34DB45E34D66969EC88A9E5C89A54D9C35ACFFDF2CA0A887F27ABF60674AB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:ce:00:9c:87:dd:05:f1:75:33:fe:e5:86:
                    36:ef:dd:9e:a0:0f:db:ff:58:2b:13:3e:d8:39:54:
                    e8:bd:2f:e2:8f:9a:a7:02:f5:dc:e4:f8:0b:b4:31:
                    b8:5c:8a:99:3e:8d:c0:4b:15:74:89:88:30:24:18:
                    6e:22:a6:c2:7c:e6:6a:9c:4a:6e:aa:ca:98:75:8f:
                    ec:94:d5:2f:67:9c:8f:0d:35:21:51:18:5c:bc:45:
                    0d:15:53:a6:19:01:45:4c:c1:85:b3:61:5c:b9:8a:
                    b7:b7:48:d6:8f:13:5e:d4:7c:a8:8e:12:63:f3:29:
                    87:3e:c3:d1:2a:95:d6:76:d1:e5:a7:c5:7d:0c:d7:
                    2f:ff:90:85:dd:35:89:40:9f:b6:0f:90:ab:04:c4:
                    8e:e0:e2:31:42:0e:91:0a:13:4e:25:ec:2f:20:46:
                    4c:12:78:ed:3f:2f:15:92:c4:25:99:18:a6:a2:3c:
                    a2:58:93:17:27:56:b1:a1:65:a6:89:95:8f:7c:13:
                    c2:e7:28:d2:70:fd:85:26:84:f2:8e:23:55:c9:f1:
                    36:6f:40:71:1a:04:cd:8f:11:65:cd:d4:3f:29:20:
                    45:b3:4d:b4:5e:34:d6:69:69:ec:88:a9:e5:c8:9a:
                    54:d9:c3:5a:cf:fd:f2:ca:0a:88:7f:27:ab:f6:06:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:01:B3:1F:79:9D:52:49:6B:34:CD:DD:25:B4:31:36:B6:36:CE:0F
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3232352e302e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:44:41:54:42:19:5c:5e:76:71:e8:37:2c:7e:d2:fa:12:36:
         3b:07:44:59:25:f2:f4:f4:21:54:0c:42:ba:9e:3b:fe:59:2d:
         40:89:32:ea:0f:ec:09:1e:0c:cd:79:61:10:76:c8:45:cc:03:
         ae:85:69:cf:68:9a:0e:0e:eb:9d:ff:5a:e0:cd:79:4e:53:39:
         0a:16:d1:b1:77:08:bb:dc:6a:37:eb:cc:f5:b6:88:7a:4a:56:
         00:07:a3:87:9c:dc:93:aa:7d:b4:f2:37:91:12:1d:cd:b8:b3:
         41:bd:ce:1f:2d:47:09:82:fe:7b:35:90:16:d2:f9:a7:a0:98:
         39:5e:d4:66:5f:f6:e6:3d:12:94:7f:a5:32:1f:5d:7d:92:15:
         53:51:8a:fd:b2:cb:c4:c2:16:98:a0:a2:0d:4c:0b:31:b1:4e:
         ad:f5:34:e6:89:0e:5d:44:9e:3a:96:01:c9:39:e6:c9:da:7e:
         63:a0:b2:01:26:a2:08:7a:25:b6:58:dc:56:c0:08:23:fb:dd:
         aa:96:cc:56:38:dd:34:a1:39:4b:89:c2:2c:3e:b6:06:61:7e:
         43:f2:d0:0a:9c:89:77:d7:8c:d9:80:51:57:8e:fd:da:20:5f:
         db:a0:0c:d2:39:53:25:6b:1b:e5:86:fa:50:33:b7:dc:06:2a:
         2f:be:7e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org