Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e38352e3136302e302f32302d3234203d3e203238333433.roa
File:                     3138372e38352e3136302e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          zy0/u9I8NC2J3ssU1pvPFjgr9s6ywjJb2MfbKjosDEk=
Subject key identifier:   42:87:AC:0E:B4:06:48:39:84:66:3B:22:ED:1B:76:6C:DD:7D:F0:65
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       1DE34E0F5CF76FA11F5D0F6447DDBD81188CDC91
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e38352e3136302e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:09 +0000
ROA not before:           Thu 30 Dec 2021 18:17:09 +0000
ROA not after:            Thu 29 Dec 2022 18:22:09 +0000
asID:                     28343
IP address blocks:        187.85.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e3:4e:0f:5c:f7:6f:a1:1f:5d:0f:64:47:dd:bd:81:18:8c:dc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:09 2021 GMT
            Not After : Dec 29 18:22:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:a3:e6:a0:f2:47:b1:fd:3b:e0:1e:96:8f:
                    79:e9:c8:c2:76:e9:d1:d4:be:3f:e3:b8:b9:39:7a:
                    76:c8:fd:44:73:51:d7:38:be:f0:3f:6f:e1:6f:8f:
                    cd:b4:73:5a:71:02:b2:89:6c:1b:a0:c9:86:aa:5a:
                    a4:0b:2d:62:5b:f2:c4:38:22:0e:24:4d:dd:80:b4:
                    88:39:eb:e9:c6:6e:28:6e:20:6e:cc:8a:04:75:b2:
                    8c:a0:75:45:8f:bc:8c:c4:77:54:7c:ad:8f:44:08:
                    6e:e3:f6:9a:6e:ce:5d:d8:f0:f3:6e:e7:b0:c3:bd:
                    13:c3:e5:0e:16:dc:5d:bf:c9:3f:49:c4:86:ad:54:
                    cf:f1:01:33:40:4c:a4:c5:fc:75:dc:16:f6:a4:ed:
                    d8:f9:b9:40:be:b2:08:a7:89:3b:70:a6:2b:d6:01:
                    a4:13:15:cb:9a:04:4c:db:0a:9b:ff:b4:11:15:a4:
                    76:dd:7e:07:0b:40:34:23:48:6d:c7:c0:9b:ce:cf:
                    8e:4f:f5:c0:47:ac:2e:f5:ce:a6:b8:14:86:01:4b:
                    3a:eb:08:3e:22:09:e7:a8:2b:cf:65:bf:cd:4f:b8:
                    95:83:38:9f:81:02:63:30:1f:ec:25:66:5a:59:46:
                    74:80:de:5f:e6:c2:3f:f3:22:7e:0c:02:fb:49:2b:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:87:AC:0E:B4:06:48:39:84:66:3B:22:ED:1B:76:6C:DD:7D:F0:65
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e38352e3136302e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:20:00:5b:89:f9:20:f6:3e:90:d7:fe:78:ce:d1:fe:7a:d3:
         0a:c2:be:23:aa:d3:5a:b8:92:05:da:9e:ae:08:56:78:c3:8a:
         14:0c:59:33:af:9c:69:2e:3b:e2:b9:b2:59:54:c1:22:19:2c:
         c9:52:e4:1b:ad:52:61:ee:38:d7:47:88:49:d7:95:61:06:1c:
         9b:ff:86:58:c4:cc:17:21:f2:68:0c:f3:b2:c2:51:6e:ab:f2:
         5b:a4:55:c0:cd:79:88:e1:bb:a4:a1:ec:8d:4e:12:67:8f:55:
         a6:c5:bb:01:bf:7a:71:12:b3:44:dd:71:98:57:ac:e3:b6:f6:
         7a:eb:e3:fa:70:32:c4:db:31:aa:d2:1c:6f:0e:d4:76:4b:e4:
         c1:da:b5:73:b6:d2:74:07:e7:92:33:6e:10:64:b9:6b:a3:22:
         61:8d:fc:8e:c7:4a:f6:dc:23:65:af:0f:d7:9f:05:f8:07:9c:
         6d:67:10:c0:70:7c:b7:47:cc:03:6a:02:dc:ad:00:31:c4:d0:
         f3:b8:37:de:6d:cf:f4:52:47:49:60:42:b3:a5:5a:1b:f7:b6:
         87:57:ce:f8:82:f8:6e:fd:ad:4f:c0:25:cf:1a:ca:e0:ac:f2:
         05:a0:f0:11:bd:32:69:a8:4e:94:bd:e2:4c:37:0a:ee:2f:e6:
         36:4e:77:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org