Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3233372e3134342e302f32312d3234203d3e203238333433.roa
File:                     3138362e3233372e3134342e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          q7v6xwgDVCqDJG6jWv6gy4vG/b6tt77sYIEEhNegNRE=
Subject key identifier:   F8:E7:5B:6E:1C:62:F7:A0:08:50:E9:C0:CA:7B:63:B6:9D:05:34:ED
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       4DC62A1692CE77D9E4B94DDFF00020294A9B8334
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3233372e3134342e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:08 +0000
ROA not before:           Thu 30 Dec 2021 18:17:08 +0000
ROA not after:            Thu 29 Dec 2022 18:22:08 +0000
asID:                     28343
IP address blocks:        186.237.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c6:2a:16:92:ce:77:d9:e4:b9:4d:df:f0:00:20:29:4a:9b:83:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:08 2021 GMT
            Not After : Dec 29 18:22:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:b5:58:43:53:bf:4b:29:0c:4d:a2:18:55:
                    b5:79:4e:8c:07:81:25:77:5f:2b:86:79:3b:7f:63:
                    d0:48:a7:6a:15:78:9d:6f:86:63:09:e7:b0:0c:de:
                    4d:9e:8d:6d:ab:b3:36:ac:94:77:ef:32:e9:3d:9b:
                    ac:48:46:56:dd:64:e3:72:24:22:ff:d6:6d:f7:81:
                    98:a3:0c:9f:f4:c1:b5:21:01:d5:8e:07:95:8e:37:
                    97:6e:3b:e4:ed:f9:1d:82:13:1e:74:d9:7c:05:be:
                    16:95:3f:6e:aa:f6:ed:4e:48:37:a6:9a:ab:4b:87:
                    d7:10:9d:25:72:98:31:28:58:e0:56:81:8b:10:87:
                    2f:57:f8:26:f6:a7:af:22:02:37:30:86:fa:c4:be:
                    a6:ca:16:69:78:94:fe:49:fc:e1:4b:85:30:28:d8:
                    f9:60:30:14:cb:ab:71:4a:bb:fb:b6:bc:65:f9:6e:
                    dd:ec:2a:0a:13:17:98:c7:48:0f:f3:60:f8:c7:4d:
                    a8:79:40:83:88:16:10:f4:7b:9f:5f:e5:b8:e4:7e:
                    77:30:de:a4:69:d8:e8:71:27:98:6a:f4:c2:ef:aa:
                    f5:fc:d9:79:c5:c9:86:b0:33:db:fa:d7:3f:cd:6e:
                    f5:b9:80:64:4f:92:31:54:d7:3b:6e:e2:7a:72:d5:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E7:5B:6E:1C:62:F7:A0:08:50:E9:C0:CA:7B:63:B6:9D:05:34:ED
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3233372e3134342e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:ea:e2:d6:29:04:30:c9:b5:86:72:d4:61:c4:73:5f:b5:1d:
         9e:57:ca:0e:45:da:9b:1b:3f:c1:13:5f:3e:af:ac:22:6c:0e:
         ca:4c:a2:1d:31:e9:8e:5b:c4:e5:43:c2:d8:28:fa:13:76:81:
         91:0d:16:a2:d7:4d:d8:12:e4:9a:35:5b:45:48:26:26:a4:20:
         16:a9:a1:1f:20:e3:31:50:5b:01:99:dd:b6:22:fb:20:26:5b:
         48:8f:2a:e6:d5:38:27:cb:ce:fc:4e:73:48:da:b8:5a:5e:59:
         b7:c7:1b:7a:9c:10:7d:10:40:5b:5a:af:82:d2:7b:bb:4b:52:
         41:9a:b3:ac:48:bd:24:6c:cf:24:d4:b7:99:59:a0:e9:b0:2d:
         ef:6f:b2:89:f1:30:b8:8a:40:e4:f5:48:fc:02:e8:fc:ef:48:
         b5:38:3b:4c:01:2b:35:c7:4f:c0:43:90:6a:ed:11:f5:37:2b:
         df:74:8d:36:ca:24:4b:f8:b5:eb:a1:35:46:c1:aa:51:45:25:
         9f:91:a1:2a:36:c0:23:e6:14:f9:91:6f:4e:ca:b7:82:1c:1d:
         7e:39:21:86:f2:fe:15:f1:47:44:72:c4:da:f6:5c:1e:81:b9:
         c9:13:77:40:55:a5:d9:41:46:bf:20:d9:8e:e8:f7:05:80:2b:
         bf:f4:91:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org