Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e33372e3137322e302f32322d3234203d3e203238333433.roa
File:                     3139312e33372e3137322e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          wBhsv6gwVCxZFbT+kuZ/yKALNwlOC6H5Z9/Fk7CQDio=
Subject key identifier:   16:93:79:FD:EC:D0:9E:37:95:00:ED:DE:BE:50:80:46:40:EB:6B:9A
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       18C93A3576911DCF0E7969E568DDD04565D01C9E
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e33372e3137322e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:13 +0000
ROA not before:           Thu 30 Dec 2021 18:17:13 +0000
ROA not after:            Thu 29 Dec 2022 18:22:13 +0000
asID:                     28343
IP address blocks:        191.37.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c9:3a:35:76:91:1d:cf:0e:79:69:e5:68:dd:d0:45:65:d0:1c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:13 2021 GMT
            Not After : Dec 29 18:22:13 2022 GMT
        Subject: CN=3082010A0282010100BE5226F3F27A190B7AEA79B75C921B4DCCC1F401329214ABD1C23DDCE928CF093F0F6738F1F30BFD378A4C8A9F8DFC05E359CC4EB7CE45B1FBDBC0D3EF1D2BD5EE11F8949DB630E492C95542A8D0A35A037501745B69B1B86A8DF6BF79805D033DAB88DDFCD3E77C0A9C27902189D4DD29E4A9263ADAA6233E269CFE8A57CE15481A358F0E9FD2D92BC8A2AF8E4BA935268A410D69C66D5CA5DC3CBEABCE212BB5980A6D76E821DE37D17ED38D9835A9FF1F05C8B184A65E7A977AD6958FA50039A5F4581BE1DAE3FA2AD18DFC3C115BFA14F220DD6586F2C151EBDC95819CB606AA1D5DAC57B32ED005F0842ED2DD6902D7BDE09800A964A48C285BA0BA17CD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:26:f3:f2:7a:19:0b:7a:ea:79:b7:5c:92:
                    1b:4d:cc:c1:f4:01:32:92:14:ab:d1:c2:3d:dc:e9:
                    28:cf:09:3f:0f:67:38:f1:f3:0b:fd:37:8a:4c:8a:
                    9f:8d:fc:05:e3:59:cc:4e:b7:ce:45:b1:fb:db:c0:
                    d3:ef:1d:2b:d5:ee:11:f8:94:9d:b6:30:e4:92:c9:
                    55:42:a8:d0:a3:5a:03:75:01:74:5b:69:b1:b8:6a:
                    8d:f6:bf:79:80:5d:03:3d:ab:88:dd:fc:d3:e7:7c:
                    0a:9c:27:90:21:89:d4:dd:29:e4:a9:26:3a:da:a6:
                    23:3e:26:9c:fe:8a:57:ce:15:48:1a:35:8f:0e:9f:
                    d2:d9:2b:c8:a2:af:8e:4b:a9:35:26:8a:41:0d:69:
                    c6:6d:5c:a5:dc:3c:be:ab:ce:21:2b:b5:98:0a:6d:
                    76:e8:21:de:37:d1:7e:d3:8d:98:35:a9:ff:1f:05:
                    c8:b1:84:a6:5e:7a:97:7a:d6:95:8f:a5:00:39:a5:
                    f4:58:1b:e1:da:e3:fa:2a:d1:8d:fc:3c:11:5b:fa:
                    14:f2:20:dd:65:86:f2:c1:51:eb:dc:95:81:9c:b6:
                    06:aa:1d:5d:ac:57:b3:2e:d0:05:f0:84:2e:d2:dd:
                    69:02:d7:bd:e0:98:00:a9:64:a4:8c:28:5b:a0:ba:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:93:79:FD:EC:D0:9E:37:95:00:ED:DE:BE:50:80:46:40:EB:6B:9A
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e33372e3137322e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:f6:09:94:90:63:a3:2c:94:55:35:10:d3:29:8f:81:d8:63:
         cc:22:d1:8d:b2:d1:9b:64:da:a6:c8:ae:82:2f:11:2a:27:1c:
         aa:59:36:8b:7f:f7:62:8c:ab:1b:eb:a8:4c:bd:8b:ab:0b:a1:
         f3:7c:c4:48:32:2d:ab:06:1c:a7:56:9c:41:84:fe:20:91:42:
         9e:fe:8e:f5:dc:7b:4f:42:fc:b2:13:5c:fe:69:7d:99:d8:e3:
         90:c0:46:0e:b8:66:8f:ae:e5:d5:91:93:8b:df:2f:1e:13:9e:
         f8:7d:41:8e:33:07:a2:e7:8c:1e:ca:0c:9d:38:17:7e:d1:df:
         20:b6:a9:f8:97:5b:fe:6e:71:10:cf:90:cf:e0:33:3a:27:e1:
         ed:a4:57:33:1e:46:29:cc:0c:1e:d8:75:91:dc:2d:ce:9e:98:
         f5:eb:b8:8f:72:ef:62:33:96:06:5e:05:b9:78:f4:41:7d:b4:
         98:9f:20:ed:69:b4:91:ba:b0:4d:80:e9:a6:7b:07:6d:25:df:
         6b:bd:96:f8:9e:dd:d2:22:43:ab:ef:75:22:be:dd:51:92:a1:
         af:e4:99:a5:a0:de:aa:e9:76:75:a2:ea:29:27:dd:c0:73:e2:
         b9:35:a1:bb:db:c5:8f:87:35:5d:a4:86:5a:db:d5:72:5e:17:
         99:28:35:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org