Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3232362e3135322e302f32312d3234203d3e203238333433.roa
File:                     3138362e3232362e3135322e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          5hYZauj2U1JzED5zaVMBh4ISL5Wv/GMrNZSpWkJ7neE=
Subject key identifier:   16:8F:EB:64:CE:24:FE:1C:F1:09:AD:C5:B9:3E:D8:F9:9F:E1:77:B6
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       6B70164F08B5A03E8899DE2CB3BAA45A42730ADB
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3232362e3135322e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:11 +0000
ROA not before:           Thu 30 Dec 2021 18:17:11 +0000
ROA not after:            Thu 29 Dec 2022 18:22:11 +0000
asID:                     28343
IP address blocks:        186.226.152.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:70:16:4f:08:b5:a0:3e:88:99:de:2c:b3:ba:a4:5a:42:73:0a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:11 2021 GMT
            Not After : Dec 29 18:22:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:19:64:1d:65:72:71:06:db:b1:f8:ec:81:
                    2c:6e:2a:81:9d:cb:1f:ae:4b:5d:84:a7:bc:3a:54:
                    87:ea:9c:78:41:5a:ed:5d:8c:11:6d:4a:3a:b7:05:
                    73:08:7f:92:8b:d8:46:48:85:45:83:cc:69:b7:90:
                    7b:0d:6a:76:f4:68:54:1b:50:1a:59:d6:95:28:93:
                    14:74:60:a3:93:cd:b9:e7:73:5e:72:6d:65:2e:0d:
                    20:8e:bc:07:e4:2e:72:64:61:5a:48:a0:ce:97:09:
                    6b:4e:ed:62:0d:f8:9c:ab:7b:e4:b9:3a:66:d1:c5:
                    bb:25:77:63:fa:6f:06:00:cf:3e:28:91:25:b7:ae:
                    9d:40:8b:21:11:ec:97:b7:b3:b7:39:b5:62:e3:f7:
                    db:8e:82:ed:dd:a0:8c:52:28:ea:df:f8:d3:25:e9:
                    f2:5e:c5:a9:2d:f0:3e:0a:a8:f2:31:b7:c1:a0:05:
                    08:10:1d:14:6e:0b:10:75:c9:69:a3:b1:50:81:8d:
                    a1:23:30:75:3f:27:90:d5:c4:3e:c7:37:05:da:e0:
                    e2:57:6c:62:a5:5d:28:66:04:a8:0a:e2:bc:58:0c:
                    99:34:dd:62:e1:17:1d:00:d3:77:47:b9:ed:b5:08:
                    65:37:08:fd:e6:df:7b:32:d8:0b:58:2c:f8:6f:4e:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8F:EB:64:CE:24:FE:1C:F1:09:AD:C5:B9:3E:D8:F9:9F:E1:77:B6
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3232362e3135322e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:58:fb:af:20:0a:ee:dc:38:e1:15:74:2d:83:c9:97:26:2d:
         4e:a8:81:c3:6a:29:8f:ab:83:dc:d2:82:ad:15:55:1f:9c:37:
         93:d8:3b:f2:23:ed:cd:94:64:32:85:a7:08:02:f0:aa:10:1e:
         c5:7a:df:c6:bf:08:24:75:da:d3:67:69:d2:75:0c:02:79:4f:
         ad:6c:c0:b6:cd:fb:0d:d2:84:9f:48:0d:b0:be:ae:59:0a:a0:
         a6:4c:db:57:f5:02:a5:ac:fb:c1:96:dd:e7:a3:29:48:52:c7:
         5a:ad:c1:e5:6a:a3:a1:74:22:14:1f:af:ee:eb:00:77:fc:f6:
         da:6e:b1:d0:bf:21:e1:08:57:99:6b:fe:b0:25:9f:28:4d:b6:
         6e:9f:f4:5e:20:f5:3a:70:b8:1c:b5:6d:0b:ec:81:da:94:a6:
         82:ac:7e:06:5e:2f:e9:b7:d8:ae:4a:9b:d4:53:62:8d:b6:f1:
         3b:d1:fd:b8:67:c5:ec:68:d2:c5:9a:e6:e4:14:29:69:88:02:
         bb:ce:9c:c8:3e:14:24:6b:95:8c:82:dd:45:09:7d:09:7e:2c:
         5c:56:4e:5c:67:ac:d9:44:9c:9a:e1:3e:ca:10:3c:03:1e:47:
         be:26:fc:b9:14:1d:31:bf:c3:b0:3e:05:07:06:21:a7:69:3c:
         02:3b:1d:e6
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUa3AWTwi1oD6Imd4ss7qkWkJzCtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3RDRFQTRFRTFCNUUzNzEyNjcxMzMwNDcyOUVGNDRB
QjAwMDQzNDAeFw0yMTEyMzAxODE3MTFaFw0yMjEyMjkxODIyMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTZFNzE5NjQxRDY1NzI3MTA2
REJCMUY4RUM4MTJDNkUyQTgxOURDQjFGQUU0QjVEODRBN0JDM0E1NDg3RUE5Qzc4
NDE1QUVENUQ4QzExNkQ0QTNBQjcwNTczMDg3RjkyOEJEODQ2NDg4NTQ1ODNDQzY5
Qjc5MDdCMEQ2QTc2RjQ2ODU0MUI1MDFBNTlENjk1Mjg5MzE0NzQ2MEEzOTNDREI5
RTc3MzVFNzI2RDY1MkUwRDIwOEVCQzA3RTQyRTcyNjQ2MTVBNDhBMENFOTcwOTZC
NEVFRDYyMERGODlDQUI3QkU0QjkzQTY2RDFDNUJCMjU3NzYzRkE2RjA2MDBDRjNF
Mjg5MTI1QjdBRTlENDA4QjIxMTFFQzk3QjdCM0I3MzlCNTYyRTNGN0RCOEU4MkVE
RERBMDhDNTIyOEVBREZGOEQzMjVFOUYyNUVDNUE5MkRGMDNFMEFBOEYyMzFCN0Mx
QTAwNTA4MTAxRDE0NkUwQjEwNzVDOTY5QTNCMTUwODE4REExMjMzMDc1M0YyNzkw
RDVDNDNFQzczNzA1REFFMEUyNTc2QzYyQTU1RDI4NjYwNEE4MEFFMkJDNTgwQzk5
MzRERDYyRTExNzFEMDBEMzc3NDdCOUVEQjUwODY1MzcwOEZERTZERjdCMzJEODBC
NTgyQ0Y4NkY0RTBCNDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAlucZZB1lcnEG27H47IEsbiqBncsfrktdhKe8OlSH6px4QVrtXYwR
bUo6twVzCH+Si9hGSIVFg8xpt5B7DWp29GhUG1AaWdaVKJMUdGCjk82553Necm1l
Lg0gjrwH5C5yZGFaSKDOlwlrTu1iDficq3vkuTpm0cW7JXdj+m8GAM8+KJElt66d
QIshEeyXt7O3ObVi4/fbjoLt3aCMUijq3/jTJenyXsWpLfA+CqjyMbfBoAUIEB0U
bgsQdclpo7FQgY2hIzB1PyeQ1cQ+xzcF2uDiV2xipV0oZgSoCuK8WAyZNN1i4Rcd
ANN3R7nttQhlNwj95t97MtgLWCz4b04LQQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FBaP62TOJP4c8Qmtxbk+2Pmf4Xe2MB8GA1UdIwQYMBaAFBd9TqTuG143EmcTMEcp
70SrAAQ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpcmRMMzhSdWQ5RmU0
M25yd0NUaDZMUGdSZXJhVnN6SFM2djFKeUg2WVN3LzEvMTc3RDRFQTRFRTFCNUUz
NzEyNjcxMzMwNDcyOUVGNDRBQjAwMDQzNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzdENEVBNEVFMUI1RTM3MTI2NzEzMzA0NzI5RUY0NEFCMDAw
NDM0LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXJkTDM4UnVkOUZlNDNucndD
VGg2TFBnUmVyYVZzekhTNnYxSnlINllTdy8xLzMxMzgzNjJlMzIzMjM2MmUzMTM1
MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
uuKYMA0GCSqGSIb3DQEBCwUAA4IBAQC9WPuvIAru3DjhFXQtg8mXJi1OqIHDaimP
q4Pc0oKtFVUfnDeT2DvyI+3NlGQyhacIAvCqEB7Fet/GvwgkddrTZ2nSdQwCeU+t
bMC2zfsN0oSfSA2wvq5ZCqCmTNtX9QKlrPvBlt3noylIUsdarcHlaqOhdCIUH6/u
6wB3/PbabrHQvyHhCFeZa/6wJZ8oTbZun/ReIPU6cLgctW0L7IHalKaCrH4GXi/p
t9iuSpvUU2KNtvE70f24Z8XsaNLFmubkFClpiAK7zpzIPhQka5WMgt1FCX0Jfixc
Vk5cZ6zZRJya4T7KEDwDHke+Jvy5FB0xv8OwPgUHBiGnaTwCOx3m
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org