Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e3130322e302e302f32302d3234203d3e203238333433.roa
File:                     3138372e3130322e302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          2UvVWVtAAYkLCJ6XXSF+nUSmkBxnB7seJmQDiLkRR2c=
Subject key identifier:   A4:96:01:7C:A6:7B:06:D8:28:E0:DA:30:17:63:BA:9E:4D:42:7C:D7
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       135937E6C1B3E877CC599792E703E1FD291B18E1
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e3130322e302e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:12 +0000
ROA not before:           Thu 30 Dec 2021 18:17:12 +0000
ROA not after:            Thu 29 Dec 2022 18:22:12 +0000
asID:                     28343
IP address blocks:        187.102.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:59:37:e6:c1:b3:e8:77:cc:59:97:92:e7:03:e1:fd:29:1b:18:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:12 2021 GMT
            Not After : Dec 29 18:22:12 2022 GMT
        Subject: CN=3082010A0282010100BCF17FF566C644B1CD16B7CBCBA7ED468DC89B1CFBD6AF4AD397DD324EAFB54C16E117F1FD300C9E8E522FFBFD9369658A48E2D13BAD9F83FDAC2D2B0877ACFCEBF726586DF78B6F5BAC25CEDD887CE20E8A141C180B0C451C624547400F57B42E780F96B651DDEFB091710F38F23F2074565A70AE397907397BAC4CB6C667581B41991A3DEE89A80F71DA3D54B6C7092D549054398EF949586839C8ADD798C3B0B0E1F7DA1BF413A9EDF61BD7BBE488B082AB01F8ED697F29DB16B69C64061AF6C3C48D3EB85DA8E36731DCC4C24A9E376A61B195B1478277A3A7B11393F81AF8852509771F24340E80640D2741B00B7C870B76F48EABFA4C65C5B15BB151950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:7f:f5:66:c6:44:b1:cd:16:b7:cb:cb:a7:
                    ed:46:8d:c8:9b:1c:fb:d6:af:4a:d3:97:dd:32:4e:
                    af:b5:4c:16:e1:17:f1:fd:30:0c:9e:8e:52:2f:fb:
                    fd:93:69:65:8a:48:e2:d1:3b:ad:9f:83:fd:ac:2d:
                    2b:08:77:ac:fc:eb:f7:26:58:6d:f7:8b:6f:5b:ac:
                    25:ce:dd:88:7c:e2:0e:8a:14:1c:18:0b:0c:45:1c:
                    62:45:47:40:0f:57:b4:2e:78:0f:96:b6:51:dd:ef:
                    b0:91:71:0f:38:f2:3f:20:74:56:5a:70:ae:39:79:
                    07:39:7b:ac:4c:b6:c6:67:58:1b:41:99:1a:3d:ee:
                    89:a8:0f:71:da:3d:54:b6:c7:09:2d:54:90:54:39:
                    8e:f9:49:58:68:39:c8:ad:d7:98:c3:b0:b0:e1:f7:
                    da:1b:f4:13:a9:ed:f6:1b:d7:bb:e4:88:b0:82:ab:
                    01:f8:ed:69:7f:29:db:16:b6:9c:64:06:1a:f6:c3:
                    c4:8d:3e:b8:5d:a8:e3:67:31:dc:c4:c2:4a:9e:37:
                    6a:61:b1:95:b1:47:82:77:a3:a7:b1:13:93:f8:1a:
                    f8:85:25:09:77:1f:24:34:0e:80:64:0d:27:41:b0:
                    0b:7c:87:0b:76:f4:8e:ab:fa:4c:65:c5:b1:5b:b1:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:96:01:7C:A6:7B:06:D8:28:E0:DA:30:17:63:BA:9E:4D:42:7C:D7
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e3130322e302e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:65:7f:d1:f3:20:83:ff:f3:ce:90:0d:35:4a:bf:f9:dd:78:
         d6:a5:ce:97:24:58:88:37:7d:b6:95:94:74:59:53:89:03:73:
         94:1f:93:62:aa:5d:29:69:a0:d6:f9:0e:b2:ea:72:f8:53:d9:
         ed:40:aa:19:fa:18:67:52:7c:9b:42:28:65:aa:88:0b:70:f8:
         ad:33:8e:9f:7b:27:c9:c9:02:65:7c:c0:a2:24:d0:bf:d1:9e:
         de:0e:13:45:eb:50:c7:23:9e:08:1e:f4:89:97:53:08:f8:13:
         68:50:87:ff:3d:fc:5a:73:7d:bc:70:c3:1c:72:4e:27:07:88:
         85:70:14:5a:3a:7c:06:65:0e:88:87:b2:1b:f1:7b:94:21:7c:
         d0:5b:ef:8a:1b:d2:09:56:7c:78:5f:99:12:7e:1b:7b:20:74:
         33:b0:07:e2:92:0a:83:fd:9c:1a:69:61:24:66:e8:62:ff:25:
         1b:f8:f6:cb:30:4c:65:04:2f:ca:b2:cb:5d:72:3f:29:f4:35:
         93:56:e8:1e:89:53:3e:e8:78:40:12:d8:9e:7b:84:9a:4d:1d:
         b6:c7:b7:85:53:b6:be:c8:7f:cc:8a:76:8d:29:54:d9:09:bf:
         7c:91:38:45:ba:8c:1d:27:c0:e8:80:10:26:ee:ad:e3:2f:29:
         e7:b8:c3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org