Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3232362e3134342e302f32312d3234203d3e203238333433.roa
File:                     3138362e3232362e3134342e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          rvPs5plV7qbBRVlxCDwUrDKRi5aCoo85HepGFooqEL8=
Subject key identifier:   58:38:36:1C:80:DF:AC:C1:91:F9:66:1C:EA:2E:90:DC:E5:1F:44:2E
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       23F2BABCF1822C6C1D1F183BD14029565F9729F7
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3232362e3134342e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:14 +0000
ROA not before:           Thu 30 Dec 2021 18:17:14 +0000
ROA not after:            Thu 29 Dec 2022 18:22:14 +0000
asID:                     28343
IP address blocks:        186.226.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f2:ba:bc:f1:82:2c:6c:1d:1f:18:3b:d1:40:29:56:5f:97:29:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:14 2021 GMT
            Not After : Dec 29 18:22:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e6:66:b3:2a:4c:8b:41:7f:1e:11:a8:98:06:
                    e5:b6:54:5c:4a:93:c7:5a:f4:8f:bd:56:36:49:7b:
                    98:56:b2:27:57:9a:1c:a2:70:10:4f:52:52:37:a8:
                    a8:2d:47:a6:5e:02:3d:a1:37:53:e4:17:3c:ab:20:
                    ad:d6:cc:1d:54:ac:fb:ba:8d:29:24:1a:47:fd:42:
                    fd:ec:c8:16:45:39:cf:1a:6f:2e:e1:f0:de:42:80:
                    2a:7b:47:fd:d9:f6:b8:4b:36:f7:76:67:80:92:10:
                    32:a7:32:a3:49:54:b1:6d:70:66:3e:09:8b:00:14:
                    0f:24:d3:74:cb:44:f2:2e:9c:67:ea:53:b9:07:23:
                    03:5c:b5:e6:0f:e2:81:f0:83:6c:71:44:98:d3:f2:
                    5e:1b:cc:15:3f:bd:70:c5:4d:70:2b:11:e9:c4:d4:
                    ea:86:f8:65:4e:7a:bf:e7:66:b2:b2:37:7b:f8:f4:
                    dd:e0:f4:d6:4c:0c:ee:22:89:81:e5:4d:83:14:e8:
                    46:6c:a4:1d:e5:dc:74:03:9c:ad:07:2d:a4:9e:19:
                    d9:5f:9e:2e:34:19:0a:26:01:de:89:23:d0:64:0f:
                    5c:34:83:ef:31:85:00:e5:e1:20:54:4e:a8:50:eb:
                    4d:8d:82:d5:93:8d:e0:d2:e6:fc:78:5c:c9:96:d0:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:38:36:1C:80:DF:AC:C1:91:F9:66:1C:EA:2E:90:DC:E5:1F:44:2E
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3232362e3134342e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:eb:bc:4b:ae:47:3c:fe:b4:5b:cf:8d:00:05:6a:da:15:e1:
         60:87:ed:1a:e3:a5:a8:86:6d:4d:4e:77:25:99:6c:9f:43:57:
         1d:f0:8d:cc:68:66:6e:76:23:ed:3b:87:9e:10:a2:82:59:3b:
         5d:91:1d:60:fa:ac:3a:2f:26:53:c8:ec:a5:5f:35:98:0e:81:
         69:77:06:d0:89:f0:e2:d0:e8:3d:59:61:17:80:79:34:c1:36:
         50:45:83:32:1b:71:52:7e:e0:41:66:cb:80:c7:6a:71:02:c2:
         f0:a6:7a:83:83:81:d8:c4:ed:54:d2:27:f4:1d:ae:8d:71:d9:
         72:e9:36:cc:f5:0a:84:ad:d8:ff:4d:c4:95:c5:9f:b8:d2:50:
         5c:91:75:e6:cb:83:6c:69:98:3f:cc:de:ec:5d:75:2c:23:2a:
         24:53:42:90:92:e4:f5:2c:ec:f0:39:1b:37:b7:a9:ca:14:61:
         de:fb:80:a4:a3:87:bf:d8:78:22:3e:8c:70:d2:08:4d:7e:72:
         a2:8b:1e:17:8e:d7:e7:68:dc:88:91:6b:a2:a3:d0:6a:f8:15:
         7e:3c:d0:68:f6:f6:30:5b:74:32:61:5b:55:a7:ff:63:88:7e:
         54:21:99:23:4c:5d:50:01:29:13:8f:bd:45:41:ab:96:86:c5:
         23:5d:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org