Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e35322e3234302e302f32312d3234203d3e203238333433.roa
File:                     3139312e35322e3234302e302f32312d3234203d3e203238333433.roa (raw, json)
Hash identifier:          61nBOHXdjGL1FleJ6TOwYSG+rMP+RgyFo8M4PEIihFw=
Subject key identifier:   13:2F:5C:90:74:27:18:A3:71:DA:C3:9F:50:14:7B:1A:F5:EB:A0:77
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       464F19DB016B923283D02AC457A679B4BC66CFB9
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e35322e3234302e302f32312d3234203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:12 +0000
ROA not before:           Thu 30 Dec 2021 18:17:12 +0000
ROA not after:            Thu 29 Dec 2022 18:22:12 +0000
asID:                     28343
IP address blocks:        191.52.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4f:19:db:01:6b:92:32:83:d0:2a:c4:57:a6:79:b4:bc:66:cf:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:12 2021 GMT
            Not After : Dec 29 18:22:12 2022 GMT
        Subject: CN=3082010A0282010100B9ED57A83F9C21AFE5E6370B9AF646273231B8B24DB7A25560506206C8D17BC81369DCC7FDCD4079A2FB90AFEE25B7F324633FF536192913E2EC4E2A846F9F2F35F306D7AC6B2C2322DE0AD33D2E773A4FCEEFCD28FBD14419FE243296B83A9F73926C0472D61CA16543ABF1A9E7D95851B97A2D94F6AD4BC5A869752C1876D3AB8069D9DB6C836767BD6B094A8555A9A6F37EDCE715849C0A67D07A192668A2FC1C4D71976A09F75660AA7CF107658548063E693714230C7F958E7329A752B64566CB026D2B381575C7EFAC13B8C305C5EA3E8D009037A8CBFDC348653D568B9910DFEC7C78F89B31D61A6AD31BA73D5FB2C64A4EFE40D3EB0CC737F2DA0E5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:57:a8:3f:9c:21:af:e5:e6:37:0b:9a:f6:
                    46:27:32:31:b8:b2:4d:b7:a2:55:60:50:62:06:c8:
                    d1:7b:c8:13:69:dc:c7:fd:cd:40:79:a2:fb:90:af:
                    ee:25:b7:f3:24:63:3f:f5:36:19:29:13:e2:ec:4e:
                    2a:84:6f:9f:2f:35:f3:06:d7:ac:6b:2c:23:22:de:
                    0a:d3:3d:2e:77:3a:4f:ce:ef:cd:28:fb:d1:44:19:
                    fe:24:32:96:b8:3a:9f:73:92:6c:04:72:d6:1c:a1:
                    65:43:ab:f1:a9:e7:d9:58:51:b9:7a:2d:94:f6:ad:
                    4b:c5:a8:69:75:2c:18:76:d3:ab:80:69:d9:db:6c:
                    83:67:67:bd:6b:09:4a:85:55:a9:a6:f3:7e:dc:e7:
                    15:84:9c:0a:67:d0:7a:19:26:68:a2:fc:1c:4d:71:
                    97:6a:09:f7:56:60:aa:7c:f1:07:65:85:48:06:3e:
                    69:37:14:23:0c:7f:95:8e:73:29:a7:52:b6:45:66:
                    cb:02:6d:2b:38:15:75:c7:ef:ac:13:b8:c3:05:c5:
                    ea:3e:8d:00:90:37:a8:cb:fd:c3:48:65:3d:56:8b:
                    99:10:df:ec:7c:78:f8:9b:31:d6:1a:6a:d3:1b:a7:
                    3d:5f:b2:c6:4a:4e:fe:40:d3:eb:0c:c7:37:f2:da:
                    0e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2F:5C:90:74:27:18:A3:71:DA:C3:9F:50:14:7B:1A:F5:EB:A0:77
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/3139312e35322e3234302e302f32312d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:ec:89:7f:84:bd:bf:8e:c2:82:e4:6e:96:33:90:2b:e6:1c:
         5a:de:08:11:02:43:9b:46:44:df:61:9c:e5:46:c9:86:00:0b:
         14:a3:9d:cc:29:ed:0a:f6:9b:f8:9e:1d:e0:38:1f:45:23:e0:
         ef:93:76:04:70:38:29:33:7d:a0:28:79:c2:55:87:86:d8:54:
         50:b2:57:2c:1e:ca:53:c5:48:95:28:09:38:ff:06:e8:0f:7a:
         21:84:9b:73:98:30:91:38:fe:64:06:1d:4b:24:55:33:f6:89:
         4e:42:ce:5d:2e:9a:4d:16:72:1f:ee:5b:8b:b3:08:43:df:31:
         e4:fa:98:68:f7:30:1c:62:23:7d:43:26:73:53:8e:5f:ad:60:
         68:77:c8:c0:36:40:6c:89:fa:f7:27:4e:85:41:58:ef:49:8e:
         09:bb:1a:05:a3:77:4e:cb:14:9c:f4:e9:e4:d2:3c:86:0f:8b:
         b3:7d:6e:ad:1e:14:e0:7b:99:d8:1c:a3:7a:19:70:3c:1d:8e:
         65:bc:4d:89:68:b6:00:3e:f6:e1:ff:12:42:79:dd:3f:26:27:
         d1:36:d6:d5:fa:58:a9:e8:94:c0:5b:39:7d:12:15:dd:ec:9d:
         3a:6a:ee:b9:00:9f:ef:8e:aa:5f:58:11:d7:35:51:79:dd:10:
         9b:08:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org