Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138392e39302e34382e302f32302d3234203d3e203238333433.roa
File:                     3138392e39302e34382e302f32302d3234203d3e203238333433.roa (raw, json)
Hash identifier:          phX51MT3sRRWn8Hef3DU99A6FcMiJu7j41Ww90SJDfI=
Subject key identifier:   D8:87:45:26:43:E4:31:1B:DD:22:8B:5F:8C:07:42:0B:77:CC:72:C9
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       7F9269FC5685719095917318FC91564D2C8DDF01
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138392e39302e34382e302f32302d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:09 +0000
ROA not before:           Thu 30 Dec 2021 18:17:09 +0000
ROA not after:            Thu 29 Dec 2022 18:22:09 +0000
asID:                     28343
IP address blocks:        189.90.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:92:69:fc:56:85:71:90:95:91:73:18:fc:91:56:4d:2c:8d:df:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:09 2021 GMT
            Not After : Dec 29 18:22:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:3e:6f:d0:2e:be:f4:d6:7b:fc:c8:73:55:
                    27:99:39:71:4c:75:c0:f4:ba:48:bd:6a:2b:11:b3:
                    c2:c8:c0:34:29:33:e7:58:0e:28:1f:5e:55:e6:3b:
                    6c:33:0c:a1:ef:99:2e:10:37:90:85:60:98:75:f8:
                    d9:88:98:6d:a7:81:00:1e:63:b9:b0:47:87:26:7b:
                    b1:f2:f3:77:88:3f:40:95:01:a8:76:6f:da:cf:06:
                    d6:45:16:48:38:5b:db:db:8c:b4:8c:f0:e3:d8:06:
                    04:bd:b3:16:b4:10:89:0b:42:a8:0f:37:8e:ad:a8:
                    78:d3:e5:a2:ad:e5:f9:df:62:12:55:fe:0c:7e:9b:
                    60:51:7d:66:88:9d:c6:b4:9d:7a:a6:36:1e:b3:f4:
                    67:ed:3c:bb:cc:e4:4f:5f:c0:3f:c7:09:10:0b:3b:
                    06:8d:a5:38:8d:cd:c4:3a:58:2a:ff:65:ff:65:2e:
                    03:2a:6b:29:7a:40:dd:b4:04:c2:d9:2c:f8:2e:dc:
                    06:93:d9:c6:c3:6c:55:16:76:1a:57:71:89:d6:2b:
                    66:56:56:96:09:0f:10:80:e9:b9:bf:6f:06:39:8a:
                    0c:0f:2b:1e:63:8b:71:fb:6e:c5:14:48:d0:63:84:
                    68:f6:76:2a:6e:98:94:f4:77:e4:a1:53:d9:65:69:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:87:45:26:43:E4:31:1B:DD:22:8B:5F:8C:07:42:0B:77:CC:72:C9
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3138392e39302e34382e302f32302d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:ba:79:23:59:53:d7:7a:85:a1:e4:22:e3:7a:7e:3b:c3:99:
         5a:76:e4:1e:d3:42:f7:65:fa:21:c2:43:68:3a:ab:eb:63:99:
         12:bf:55:81:fd:aa:5d:cc:a0:e4:67:95:92:1a:43:75:69:d5:
         21:6f:aa:8b:e7:61:3d:e4:99:a0:ff:78:5e:6e:1b:a9:86:ae:
         2a:41:d1:a9:52:15:1c:20:83:d5:d8:c7:29:b9:2f:1b:f6:c5:
         eb:59:30:80:90:8f:34:1f:8b:00:25:0f:39:ee:79:82:df:6c:
         a4:bc:23:73:fd:31:28:d7:69:27:d6:a9:0d:fa:e5:68:e2:4a:
         77:dc:95:4f:14:13:88:3a:ee:f8:2d:c9:f6:de:87:72:c3:01:
         4a:69:90:4f:02:86:8d:fd:03:53:05:05:b4:a0:4e:24:6b:b2:
         18:9b:cf:aa:7f:f2:38:b9:fa:ee:12:6e:58:da:db:5c:d3:e7:
         ce:0a:8d:02:47:67:9f:9f:a6:e5:ce:3f:2e:f7:6c:26:59:ae:
         05:47:c6:69:d8:bf:3b:6e:3c:b4:1f:5c:3a:b9:27:87:a6:e1:
         20:39:5b:c7:1b:64:83:63:80:3b:8f:29:ea:cd:56:1f:c1:14:
         71:fb:b2:01:3a:80:be:e2:b0:12:af:1d:b6:e2:45:6c:e5:13:
         eb:d3:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org