Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e3235332e39362e302f31392d3234203d3e203238333433.roa
File:                     3139312e3235332e39362e302f31392d3234203d3e203238333433.roa (raw, json)
Hash identifier:          WUdI7pp5jd0RRm/GXbpUUu8q1IMfrn8Zu4sNfJx3vCU=
Subject key identifier:   59:55:F4:32:F3:74:B7:0E:C0:CC:9F:C8:E7:86:E4:86:35:3A:0B:5E
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       439D5A08A175C1C24EE97BE95C62D63CAB7EFBE1
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e3235332e39362e302f31392d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:15 +0000
ROA not before:           Thu 30 Dec 2021 18:17:15 +0000
ROA not after:            Thu 29 Dec 2022 18:22:15 +0000
asID:                     28343
IP address blocks:        191.253.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9d:5a:08:a1:75:c1:c2:4e:e9:7b:e9:5c:62:d6:3c:ab:7e:fb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:15 2021 GMT
            Not After : Dec 29 18:22:15 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:da:a6:13:bd:23:ee:58:70:88:df:49:de:
                    40:06:63:05:36:9a:57:91:a6:62:90:cb:00:eb:34:
                    ec:70:c3:00:87:1c:a3:14:5f:ce:cd:4b:c6:bb:6f:
                    1a:9c:e1:47:b6:bc:e6:6a:0c:68:67:ad:6a:41:dd:
                    53:ba:54:3b:78:d7:65:a7:54:0e:3c:c7:01:fd:3f:
                    c9:ee:37:a4:40:a4:f4:03:61:de:61:eb:ba:b7:55:
                    61:aa:0e:63:ce:ba:25:52:ce:cf:62:dc:ed:d9:e7:
                    2b:fb:29:cc:00:25:0d:0b:68:4c:99:50:9e:78:90:
                    32:f5:13:af:03:92:f6:e1:ad:79:9b:1b:95:a4:09:
                    6e:ab:ac:5d:96:7e:6b:30:52:1b:bc:3a:61:19:1d:
                    0d:70:da:42:8a:d2:14:b0:57:d4:57:e8:bb:39:35:
                    5c:6f:20:c4:50:e6:f7:37:42:f8:ef:c1:0b:a0:fd:
                    87:c1:3f:b3:99:d6:a1:e1:1b:72:ca:e7:59:34:2c:
                    24:66:26:f1:71:bf:2b:49:da:94:be:d6:f3:80:07:
                    12:86:3d:a3:f7:7c:34:89:77:63:aa:ef:c1:1e:6e:
                    70:41:46:43:be:c6:f6:a8:a0:ee:ef:a2:e9:e3:9d:
                    6e:37:5a:af:ee:83:28:44:7a:d8:33:c1:24:aa:f2:
                    8d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:55:F4:32:F3:74:B7:0E:C0:CC:9F:C8:E7:86:E4:86:35:3A:0B:5E
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e3235332e39362e302f31392d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a5:4e:52:f7:b3:6d:aa:ca:b2:12:ae:28:74:2d:7c:46:25:b6:
         dd:55:a0:36:82:0c:8b:f9:1b:22:82:cb:27:d2:10:d4:da:03:
         fb:9b:b3:16:c3:4a:58:10:bf:b3:51:49:bd:cb:2b:04:14:6e:
         fb:4f:86:a9:6b:47:4e:fa:3a:7c:04:8b:4e:a8:b2:89:51:24:
         28:79:a9:3d:d9:7e:9d:6b:10:b5:4e:f7:9f:b6:4b:2f:09:6f:
         b1:c1:01:35:9f:02:ee:f4:11:9c:e4:38:92:39:20:0d:df:07:
         c3:7c:ca:4a:22:72:db:d4:95:32:ea:a6:06:9e:64:fd:7f:77:
         b3:d9:b3:96:af:03:3b:ab:90:21:a9:5f:71:d7:46:e9:b8:4f:
         2d:e9:9f:8b:67:69:24:86:8a:a7:dd:be:8d:be:69:f1:30:cc:
         db:0b:c9:5c:b8:5d:c1:ab:0e:77:f7:ca:c6:bb:d9:92:dd:76:
         e5:05:12:97:8f:1f:6c:f4:86:4f:b5:3d:3f:60:77:1c:7f:94:
         20:7f:61:3a:52:bf:0e:b0:f6:8d:b6:fe:b1:6a:c8:a0:f1:ab:
         ae:5f:6b:a9:e6:7f:bd:1d:3f:a4:1f:f9:11:3a:58:fd:b7:be:
         8a:24:07:bd:f6:e5:d7:79:37:e9:30:6f:2b:7d:18:5f:06:27:
         ae:db:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org