Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3234392e3139322e302f32302d3234203d3e203238333433.roa
File:                     3138362e3234392e3139322e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          SaYpMmbLeBBE/JHxo2pifSh6UGs/NDBCF/6iQaN+jK4=
Subject key identifier:   21:CA:F9:31:57:D6:6A:B6:94:CC:3A:49:30:06:31:00:0D:1C:A9:1D
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       6B90C3E739C40E48950702169E984A06ECF4AE94
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3234392e3139322e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:16 +0000
ROA not before:           Thu 30 Dec 2021 18:17:16 +0000
ROA not after:            Thu 29 Dec 2022 18:22:16 +0000
asID:                     28343
IP address blocks:        186.249.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:90:c3:e7:39:c4:0e:48:95:07:02:16:9e:98:4a:06:ec:f4:ae:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:16 2021 GMT
            Not After : Dec 29 18:22:16 2022 GMT
        Subject: CN=3082010A0282010100BB863B87760B4B73244DB04B8D672132B3F07E3654723C41196ABE98E83782983A6481B911975CDB71A96A404E363694B9AF53BAE7B55E8C5AC29F25E56F93B7C4414BB69E0E06062E0147D6853F65F7F3C8261662A63334950CF079B346CAC84E61C21138691773694C00E9073791C09FA2617F524BE1F681614F515AE9A998B3874A57E44DB2010C74E8E312BA53FD7E17424D7E75E9FA5A0312989860EE4A8AE8F6DDFE29FC1ED142E7365C3C0C7FF9196406D096694423F21F0E017D657B4EBE9DBD8CA11A0EDCB71D46206CCE24223479C8AEAB5E91157E16CC618BD7637B709BFB9DCC9C6AF3B60F2E153B457926C5AA1731556F216FFFDD871DE85FDB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:3b:87:76:0b:4b:73:24:4d:b0:4b:8d:67:
                    21:32:b3:f0:7e:36:54:72:3c:41:19:6a:be:98:e8:
                    37:82:98:3a:64:81:b9:11:97:5c:db:71:a9:6a:40:
                    4e:36:36:94:b9:af:53:ba:e7:b5:5e:8c:5a:c2:9f:
                    25:e5:6f:93:b7:c4:41:4b:b6:9e:0e:06:06:2e:01:
                    47:d6:85:3f:65:f7:f3:c8:26:16:62:a6:33:34:95:
                    0c:f0:79:b3:46:ca:c8:4e:61:c2:11:38:69:17:73:
                    69:4c:00:e9:07:37:91:c0:9f:a2:61:7f:52:4b:e1:
                    f6:81:61:4f:51:5a:e9:a9:98:b3:87:4a:57:e4:4d:
                    b2:01:0c:74:e8:e3:12:ba:53:fd:7e:17:42:4d:7e:
                    75:e9:fa:5a:03:12:98:98:60:ee:4a:8a:e8:f6:dd:
                    fe:29:fc:1e:d1:42:e7:36:5c:3c:0c:7f:f9:19:64:
                    06:d0:96:69:44:23:f2:1f:0e:01:7d:65:7b:4e:be:
                    9d:bd:8c:a1:1a:0e:dc:b7:1d:46:20:6c:ce:24:22:
                    34:79:c8:ae:ab:5e:91:15:7e:16:cc:61:8b:d7:63:
                    7b:70:9b:fb:9d:cc:9c:6a:f3:b6:0f:2e:15:3b:45:
                    79:26:c5:aa:17:31:55:6f:21:6f:ff:dd:87:1d:e8:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CA:F9:31:57:D6:6A:B6:94:CC:3A:49:30:06:31:00:0D:1C:A9:1D
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138362e3234392e3139322e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:15:a5:47:a9:5b:42:17:5a:ba:2f:c9:ad:4d:74:98:39:d7:
         b1:d1:56:7a:9e:f8:47:6d:ef:d3:19:f3:48:17:07:b7:4d:36:
         bf:a7:8b:70:48:42:81:e1:42:b4:b5:68:9b:f7:d5:6a:78:5f:
         57:0e:56:7f:ef:ef:10:19:da:59:ef:74:76:ac:ec:82:19:50:
         90:fa:99:bd:14:07:31:e6:20:13:9b:cf:f7:66:b7:a2:26:4a:
         05:b9:c8:c7:c3:91:36:44:a5:16:ef:3d:8f:34:64:47:cb:7e:
         81:9f:cd:0c:d8:7c:6d:6b:f5:69:99:a6:39:47:75:d9:df:75:
         96:45:11:e7:34:27:5f:82:4c:3d:fc:69:a7:52:a1:e4:ec:0d:
         e2:5c:0e:80:d7:47:5d:2d:d0:dd:3a:c4:c9:66:bb:06:17:cb:
         59:d7:18:44:e6:6b:2b:7f:22:b4:c0:ac:a9:fc:fd:51:b7:96:
         90:bd:fe:7b:ab:47:16:23:22:2e:1b:b6:c6:8e:7b:12:25:58:
         d3:78:20:0a:43:d2:32:f0:b4:84:00:05:d3:ac:80:cf:8c:5f:
         cf:11:b9:3f:4a:9c:21:bb:7e:70:83:84:8c:b5:c2:56:7f:8b:
         4c:61:3d:c2:f9:f9:36:c2:58:92:5c:a6:5a:b7:d0:ee:82:45:
         5c:d9:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org