Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e3130382e3230382e302f32302d3234203d3e203238333433.roa
File:                     3138372e3130382e3230382e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          dedcYpVEArIH/OVd8GJFMaNAhyRoRwOlRgLtH0CxYwk=
Subject key identifier:   BF:0D:7C:C8:FF:C3:CF:65:22:3C:DB:C6:E0:85:AC:34:88:8B:03:FF
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       7F37F15A19D322CC9D2F32A867121DC2EB996A14
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e3130382e3230382e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:15 +0000
ROA not before:           Thu 30 Dec 2021 18:17:15 +0000
ROA not after:            Thu 29 Dec 2022 18:22:15 +0000
asID:                     28343
IP address blocks:        187.108.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:37:f1:5a:19:d3:22:cc:9d:2f:32:a8:67:12:1d:c2:eb:99:6a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:15 2021 GMT
            Not After : Dec 29 18:22:15 2022 GMT
        Subject: CN=3082010A0282010100D2AF69E7A2DFF32E06B078F60DA7EBA0B0ADE5439B860E13C1FAA8AE8C238D1D00CB25708DEAED0CBF3956C20373735942FB2B99B7069806E99718FB27D5824FF04AB36EB80B9489F6DB8FF54D8AE12F32CE5FB04211F8C803D4EA2B53B3C0318C03A02D7916ADE31BD83BF84BE467365B7A57C2599B6D406CEDA21976697F771390A93B7150BBA02428EE70191A6F8470180B6BCF13641B9265C4416FF152026C9BDCCE1F9D0A6AB34EA91226BCB751666E0110269142EA70B2F173A206309D4770E77B619E66859608CBAE19C30CE0B1A028AEA7690F388002F2F7F56AD0E164A53FF24BFC8B0B6252B1E385B690ECCB1D16D4B5F16CFD76467EE595E0AF5D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:af:69:e7:a2:df:f3:2e:06:b0:78:f6:0d:a7:
                    eb:a0:b0:ad:e5:43:9b:86:0e:13:c1:fa:a8:ae:8c:
                    23:8d:1d:00:cb:25:70:8d:ea:ed:0c:bf:39:56:c2:
                    03:73:73:59:42:fb:2b:99:b7:06:98:06:e9:97:18:
                    fb:27:d5:82:4f:f0:4a:b3:6e:b8:0b:94:89:f6:db:
                    8f:f5:4d:8a:e1:2f:32:ce:5f:b0:42:11:f8:c8:03:
                    d4:ea:2b:53:b3:c0:31:8c:03:a0:2d:79:16:ad:e3:
                    1b:d8:3b:f8:4b:e4:67:36:5b:7a:57:c2:59:9b:6d:
                    40:6c:ed:a2:19:76:69:7f:77:13:90:a9:3b:71:50:
                    bb:a0:24:28:ee:70:19:1a:6f:84:70:18:0b:6b:cf:
                    13:64:1b:92:65:c4:41:6f:f1:52:02:6c:9b:dc:ce:
                    1f:9d:0a:6a:b3:4e:a9:12:26:bc:b7:51:66:6e:01:
                    10:26:91:42:ea:70:b2:f1:73:a2:06:30:9d:47:70:
                    e7:7b:61:9e:66:85:96:08:cb:ae:19:c3:0c:e0:b1:
                    a0:28:ae:a7:69:0f:38:80:02:f2:f7:f5:6a:d0:e1:
                    64:a5:3f:f2:4b:fc:8b:0b:62:52:b1:e3:85:b6:90:
                    ec:cb:1d:16:d4:b5:f1:6c:fd:76:46:7e:e5:95:e0:
                    af:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0D:7C:C8:FF:C3:CF:65:22:3C:DB:C6:E0:85:AC:34:88:8B:03:FF
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e3130382e3230382e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:43:35:fb:fc:ae:65:41:da:ec:b1:ee:fb:44:91:42:fd:4e:
         d1:a0:3a:c8:7a:e3:85:0a:d3:0c:c2:92:3e:fd:34:e0:61:fe:
         d0:2d:69:dc:f3:71:91:fb:79:4b:e5:c4:e4:50:80:9b:87:e5:
         dc:c6:0f:ae:76:19:e8:9d:f6:26:65:15:17:ab:a5:a3:e2:45:
         ea:c9:39:c9:3c:b9:5c:d8:b8:cd:b3:23:33:c0:2c:6f:f5:2e:
         bc:59:8c:cd:ae:e7:89:20:d5:54:7b:e2:c6:d2:91:c0:41:bb:
         6f:f6:c1:2c:4c:db:34:1c:96:f5:15:66:6a:61:15:e8:87:02:
         1c:37:b1:e1:a8:4d:c2:dc:db:bf:c9:d1:ef:bf:1b:22:fb:ef:
         22:26:5d:da:5a:71:f0:9e:03:cd:f3:b1:aa:11:cd:e1:b0:95:
         f9:fd:4a:de:2c:e6:fc:c0:f1:0b:f9:d4:8c:6b:d2:01:de:3e:
         b4:76:0f:30:19:39:67:92:bf:90:51:13:eb:2c:e4:a1:b1:2d:
         81:38:d5:e9:a8:3a:b2:3e:da:31:ca:e8:51:b2:f5:f2:8c:ae:
         f2:f9:b7:11:1a:ef:95:a2:e4:86:7b:8d:3c:6f:b0:84:f3:7c:
         91:75:f2:cd:1f:c6:0b:ee:d6:5c:93:70:19:13:27:a3:49:fb:
         fd:54:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org