Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e3234302e3231362e302f32312d3234203d3e203238333433.roa
File:                     3139312e3234302e3231362e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          oRFwaQ25/0kIFNWNe3KYqjuSttpdurVLnbkUlAPpsxg=
Subject key identifier:   D1:89:9E:8F:37:72:E9:A8:CE:65:17:83:20:D1:54:A8:05:17:94:26
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       0593E2E90603CE77E906D2AE83FAC079B9C520B8
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e3234302e3231362e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:09 +0000
ROA not before:           Thu 30 Dec 2021 18:17:09 +0000
ROA not after:            Thu 29 Dec 2022 18:22:09 +0000
asID:                     28343
IP address blocks:        191.240.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:93:e2:e9:06:03:ce:77:e9:06:d2:ae:83:fa:c0:79:b9:c5:20:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:09 2021 GMT
            Not After : Dec 29 18:22:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:97:71:39:55:39:e8:0d:5f:27:e4:ce:d6:c3:
                    93:84:dd:07:c9:1a:b5:d9:b7:6b:48:a7:af:8d:40:
                    2a:fc:ec:8a:b8:83:49:1c:e5:94:17:5d:f4:8d:57:
                    e0:4d:c3:4b:6f:d0:15:7c:ca:49:f4:d7:9c:6d:77:
                    8f:c8:7a:0b:18:f1:de:76:06:6c:c2:55:b9:95:4b:
                    6d:4f:4f:76:57:a9:1b:b7:c7:c7:36:d5:53:33:f9:
                    46:7d:4d:38:5e:f3:b9:fd:36:90:ef:cf:5e:83:53:
                    c5:6e:15:a2:62:59:e9:aa:ed:ac:df:65:fa:d1:22:
                    b7:ec:e5:12:ff:61:cf:0d:76:7f:63:01:55:40:c3:
                    b2:44:20:ee:77:98:5e:ef:29:0f:ec:bc:ac:28:c3:
                    38:92:18:39:18:e8:4e:1d:62:86:45:cc:c3:09:f2:
                    e2:7a:8a:f0:b9:a8:60:21:00:2d:1c:a4:e5:3a:f8:
                    e0:1f:01:88:de:55:3d:3c:ff:60:15:3c:68:d3:37:
                    59:6d:21:74:00:9d:5e:7b:44:ad:e7:5e:78:fc:09:
                    af:ff:58:bf:19:28:08:16:c1:f6:ce:78:2c:b9:09:
                    61:47:67:df:2e:15:2b:3f:dc:5e:e4:9e:de:44:39:
                    80:97:68:ad:0a:40:cf:e2:6e:aa:22:ce:06:eb:5c:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:89:9E:8F:37:72:E9:A8:CE:65:17:83:20:D1:54:A8:05:17:94:26
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e3234302e3231362e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c3:a9:48:2c:00:69:21:b3:f5:6c:23:94:b2:b3:0c:21:fb:4d:
         fc:43:f5:99:8e:4c:04:ba:3b:6d:c3:bd:d8:65:ca:69:6c:5c:
         f7:22:38:31:31:8d:f7:81:93:92:c3:51:3f:7a:db:0f:74:98:
         f0:e1:83:43:e2:c0:37:6d:f2:0c:cd:57:30:ff:62:83:62:5e:
         05:0a:40:df:9e:6a:30:5a:ae:82:82:c7:65:ff:d3:5b:0d:ce:
         57:8c:7d:0e:77:52:a9:17:da:ff:71:0b:67:d6:26:3f:b7:48:
         a3:1e:04:a7:17:51:94:d0:63:c8:16:74:a2:ad:ba:54:64:eb:
         d7:30:d2:37:9b:f1:af:c1:01:26:27:9a:44:d2:68:9d:41:7b:
         75:8c:bb:a7:79:8e:e2:d7:b4:59:27:2f:54:58:4e:cd:9c:ad:
         da:4d:57:22:1e:f1:84:c3:f6:83:b0:26:cb:df:85:f7:b2:bd:
         4c:cf:b9:ac:fa:ed:e1:cb:8e:58:28:c7:4e:96:03:34:36:38:
         fe:48:12:9f:73:c8:e1:56:9d:3a:a3:b2:98:af:d8:f9:a5:da:
         50:af:d2:aa:28:d1:d7:40:8d:f2:54:63:72:6f:94:73:92:56:
         86:bd:05:11:15:87:d0:40:8f:e9:6d:23:f5:ba:4a:e8:c8:ad:
         9e:3a:bc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org