Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e38352e3137362e302f32302d3234203d3e203238333433.roa
File:                     3138372e38352e3137362e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          7g60JgVlv16JfPgFiep7YADMFOvcSfK8OOMHLd60JyU=
Subject key identifier:   23:AD:5D:C0:75:95:F2:A4:4D:23:BF:DB:5A:9D:EF:DC:D5:76:DA:30
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       78E67EE2A7B9ECAD3F2428ED10F566EC6EFB7E6A
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e38352e3137362e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:14 +0000
ROA not before:           Thu 30 Dec 2021 18:17:14 +0000
ROA not after:            Thu 29 Dec 2022 18:22:14 +0000
asID:                     28343
IP address blocks:        187.85.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e6:7e:e2:a7:b9:ec:ad:3f:24:28:ed:10:f5:66:ec:6e:fb:7e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:14 2021 GMT
            Not After : Dec 29 18:22:14 2022 GMT
        Subject: CN=3082010A0282010100B6D99E2BE469B30DA7599F20C49CF31CE5EBE87B958D327443FAAB2BB8EE3E6A418580C09F3D2DDC5C2FD592F4507D32D5C2CF95FAF167BD5062D14EA955A462B0AE6E8EF7CD664CFD8066D68988EB008E62E877C1009D4346725005B1363ABAB175BDD83D141A3EEDE6145A94E55806AD895F854820F32C2EACBA82FC539C23528C572E1877F42C1131DD7A44A717E7C6B7E8C59E53963B710D8566873CE4DDB53889D3314A42A0F5818B5B8CBC9DCF1FB0BDAADF3A4A46A338B07EDF36ECAECB3A5B6D4852C7105B722AEDB59876A937EE0C85A3300ECF9A0DE0019D25E704D165C2C7EEC745D5F5372EADA5969A06A51466AE7A7AC9986B9D391CFFFFFB9F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d9:9e:2b:e4:69:b3:0d:a7:59:9f:20:c4:9c:
                    f3:1c:e5:eb:e8:7b:95:8d:32:74:43:fa:ab:2b:b8:
                    ee:3e:6a:41:85:80:c0:9f:3d:2d:dc:5c:2f:d5:92:
                    f4:50:7d:32:d5:c2:cf:95:fa:f1:67:bd:50:62:d1:
                    4e:a9:55:a4:62:b0:ae:6e:8e:f7:cd:66:4c:fd:80:
                    66:d6:89:88:eb:00:8e:62:e8:77:c1:00:9d:43:46:
                    72:50:05:b1:36:3a:ba:b1:75:bd:d8:3d:14:1a:3e:
                    ed:e6:14:5a:94:e5:58:06:ad:89:5f:85:48:20:f3:
                    2c:2e:ac:ba:82:fc:53:9c:23:52:8c:57:2e:18:77:
                    f4:2c:11:31:dd:7a:44:a7:17:e7:c6:b7:e8:c5:9e:
                    53:96:3b:71:0d:85:66:87:3c:e4:dd:b5:38:89:d3:
                    31:4a:42:a0:f5:81:8b:5b:8c:bc:9d:cf:1f:b0:bd:
                    aa:df:3a:4a:46:a3:38:b0:7e:df:36:ec:ae:cb:3a:
                    5b:6d:48:52:c7:10:5b:72:2a:ed:b5:98:76:a9:37:
                    ee:0c:85:a3:30:0e:cf:9a:0d:e0:01:9d:25:e7:04:
                    d1:65:c2:c7:ee:c7:45:d5:f5:37:2e:ad:a5:96:9a:
                    06:a5:14:66:ae:7a:7a:c9:98:6b:9d:39:1c:ff:ff:
                    fb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AD:5D:C0:75:95:F2:A4:4D:23:BF:DB:5A:9D:EF:DC:D5:76:DA:30
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138372e38352e3137362e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:33:ac:9e:7f:c2:50:36:5f:4a:9d:40:1a:89:57:fc:41:6b:
         ed:02:3c:9e:5e:76:ec:40:5d:46:2a:5a:16:f5:e5:37:71:29:
         5a:06:c6:16:e1:56:08:10:7a:ef:fa:6f:ad:97:53:5e:3b:15:
         c7:5b:00:b9:d0:ff:7b:8f:47:95:45:16:8a:56:2a:55:8d:bc:
         3a:d6:d9:c3:3a:e7:69:99:2d:6d:9f:bb:04:1c:36:f9:fe:47:
         07:a2:e8:49:91:8c:48:2f:0e:54:ff:c4:3a:c4:f2:56:d0:53:
         b1:4c:f8:ce:45:66:70:2b:33:b4:6e:16:25:e7:a1:c8:be:70:
         ba:9d:04:27:3e:c8:05:4f:22:68:ab:e8:c1:d5:19:5b:89:25:
         cf:46:46:30:1e:83:39:44:e2:f1:9b:d2:7a:84:e0:f4:c7:bf:
         be:e2:95:15:21:55:2e:8c:33:55:ab:6a:9b:cd:9c:15:9d:fd:
         d4:be:dc:96:57:16:41:d9:37:b7:1a:aa:90:13:96:12:28:a2:
         17:7d:c6:7a:77:bf:bd:a6:3b:da:9c:4d:9f:09:3a:1c:84:ba:
         81:de:b1:a7:6e:bf:0f:73:cd:f6:b7:d1:bc:81:2a:95:4a:1b:
         88:2f:dc:48:69:03:de:83:08:8b:5e:f4:54:7e:3f:ea:2e:64:
         76:cc:be:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org